Online Access Free 156-215-75 Practice Test

Whitfield Diffie and martin Hellman gave their names to what standard?

• A.An encryption scheme that makes pre-shared keys obsolete
• B.A Key Exchange Protocol for the advanced Encryption Standard
• C.A Key Agreement / Derivation Protocol that constructs secure keys over an insecure channel.
• D.An algorithm that is used in IPsec QuickMode and as an additional option in IPsec QuickMode (PFS)

Which of the following is a viable consideration when determining Rule Base order?

• A.Grouping IPS rules with dynamic drop rules
• B.Grouping rules by date of creation
• C.Adding SAM rules at the top of the Rule Base
• D.Placing frequently accessed rules before less frequently accessed rules

John Adams is an HR partner in the ACME organization. ACME IT wants to limit access to HR servers to a set of designated IP addresses to minimize malware infection and unauthorized access risks. Thus, the gateway policy permits access only from John's desktop which is assigned a static IP address 10.0.0.19.
He has received a new laptop and wants to access the HR Web Server from anywhere in the organization. The IT department gave the laptop a static IP address, but that limits him to operating it only from his desk. The current Rule Base contains a rule that lets John Adams access the HR Web Server from his laptop with a static IP (10.0.0.19).
He wants to move around the organization and continue to have access to the HR Web Server. To make this scenario work, the IT administrator:
1) Enables Identity Awareness on a gateway, selects AD Query as one of the Identity Sources, and installs the policy.
2) Adds an access role object to the Firewall Rule Base that lets John Adams access the HR Web Server from any machine and from any location and installs policy.
John plugged in his laptop to the network on a different network segment and was not able to connect to the HR Web server. What is the next troubleshooting step?

• A.John should install the Identity Awareness Agent
• B.After enabling Identity Awareness, reboot the gateway
• C.He should lock and unlock the computer
• D.Investigate this as a network connectivity issue

The Captive Portal tool:

• A.Acquires identities from unidentified users
• B.Allows access to users already identified
• C.Is only used for guest user authentication
• D.Is deployed from the Identity Awareness page in the Global Properties settings

Reviews the following rules and note the Client Authentication Action properties screen, as shown below:

Checkpoint 156-215.75 : Practice Test
After being authenticated by the Security Gateway, when a user starts an HTTP connection to a Web site, the user tries to FTP to another site using the command line. What happens to the user? The:

• A.User is prompted for Authentication by the Security Gateway again.
• B.FTP connection is dropped by rules 2.
• C.user is prompted from that FTP site only, and does not need to enter his username and password for Client Authentication.
• D.FTP data connection is dropped after the user is authenticated successfully.