Online Access Free 156-215.76 Practice Test

Which of the following is a viable consideration when determining Rule Base order?

• A.Grouping rules by date of creation
• B.Grouping functionally related rules together
• C.Grouping reject and drop rules after the Cleanup Rule
• D.Grouping authentication rules with address-translation rules

Why are certificates preferred over pre-shared keys in an IPsec VPN?

• A.Weak performancE. PSK takes more time to encrypt than Diffie-Hellman.
• B.Weak security: PSKs can only have 112 bit length.
• C.Weak Security: PSK are static and can be brute-forced.
• D.Weak scalability: PSKs need to be set on each and every Gateway.

Select the TRUE statements about the Rule Base shown?

1) HTTP traffic from webrome to websingapore will be encrypted. 2) HTTP traffic from websingapore to webrome will be encrypted. 3) HTTP traffic from webrome to websingapore will be authenticated. 4) HTTP traffic from websingapore to webrome will be blocked.

• A.3 only
• B.3 and 4
• C.1, 2, and 3
• D.2 and 3

What happens when you run the commanD. fw sam -J src [Source IP Address]?

• A.Connections from the specified source are blocked without the need to change the Security Policy.
• B.Connections to and from the specified target are blocked without the need to change the Security Policy.
• C.Connections to and from the specified target are blocked with the need to change the Security Policy.
• D.Connections to the specified target are blocked without the need to change the Security Policy.

Which of the below is the MOST correct process to reset SIC from SmartDashboard?

• A.Click the Communication button for the firewall object, then click Reset. Run cpconfig and type a new activation key.
• B.Run cpconfig, and select Secure Internal Communication > Change One Time Password.
• C.Click Communication > Reset on the Gateway object, and type a new activation key.
• D.Run cpconfig, and click Reset.