156-215.77 Free Practice Test

Identify the correct step performed by SmartUpdate to upgrade a remote Security Gateway. After selecting Packages > Distribute and Install Selected Package and choosing the target Gateway, the:

1. A. selected package is copied from the Package Repository on the Security Management Server to the Security Gateway and the installation IS performed.
2. B. SmartUpdate wizard walks the Administrator through a distributed installation.
3. C. selected package is copied from the Package Repository on the Security Management Server to the Security Gateway but the installation IS NOT performed.
4. D. selected package is copied from the SmartUpdate PC CD-ROM directly to the Security Gateway and the installation IS performed.

Correct Answer: A

You are a Security Administrator who has installed Security Gateway R77 on your network. You need to allow a specific IP address range for a partner site to access your intranet Web server. To limit the partner’s access for HTTP and FTP only, you did the following:
1) Created manual Static NAT rules for the Web server.
2) Cleared the following settings in the Global Properties > Network Address Translation screen:
- Allow bi-directional NAT
- Translate destination on client side
Do the above settings limit the partner’s access?

1. A. Ye
2. B. This will ensure that traffic only matches the specific rule configured for this traffic, and that the Gateway translates the traffic after accepting the packet.
3. C. N
4. D. The first setting is not applicabl
5. E. The second setting will reduce performance.
6. F. Ye
7. G. Both of these settings are only applicable to automatic NAT rules.
8. H. N
9. I. The first setting is only applicable to automatic NAT rule
10. J. The second setting will force translation by the kernel on the interface nearest to the client.

Correct Answer: D

Which of the following methods will provide the most complete backup of an R77 configuration?

1. A. Policy Package Management
2. B. Copying the directories $FWDIR\conf and $CPDIR\conf to another server
3. C. Execute command upgrade_export
4. D. Database Revision Control

Correct Answer: C

How can you reset the Security Administrator password that was created during initial Security Management Server installation on GAiA?

1. A. Launch SmartDashboard in the User Management screen, and edit the cpconfig administrator.
2. B. As expert user Type fwm -a, and provide the existing administrator’s account nam
3. C. Reset the Security Administrator’s password.
4. D. Type cpm -a, and provide the existing administrator’s account nam
5. E. Reset the Security Administrator’s password.
6. F. Export the user database into an ASCII file with fwm dbexpor
7. G. Open this file with an editor, and delete the Password portion of the fil
8. H. Then log in to the account without a passwor
9. I. You will be prompted to assign a new password.

Correct Answer: B

The third-shift Administrator was updating Security Management Server access settings in Global Properties and testing. He managed to lock himself out of his account.
How can you unlock this account?

1. A. Type fwm unlock_admin from the Security Management Server command line.
2. B. Type fwm unlock_admin -u from the Security Gateway command line.
3. C. Type fwm lock_admin -u from the Security Management Server command line.
4. D. Delete the file admin.lock in the Security Management Server directory $FWDIR/tmp/.

Correct Answer: C