156-215.77 Free Practice Test

Match the terms with their definitions: Exhibit:

1. A. A-3, B-2, C-4, D-1
2. B. A-2, B-3, C-4, D-1
3. C. A-3, B-2, C-1, D-4
4. D. A-3, B-4, C-1, D-2

Correct Answer: A

Which item below in a Security Policy would be enforced first?

1. A. IP spoofing/IP options
2. B. Security Policy First rule
3. C. Administrator-defined Rule Base
4. D. Network Address Translation

Correct Answer: A

Exhibit:

You installed Security Management Server on a computer using GAiA in the MegaCorp home office. You use IP address 10.1.1.1. You also installed the Security Gateway on a second GAiA computer, which you plan to ship to another Administrator at a MegaCorp hub office.
What is the correct order for pushing SIC certificates to the Gateway before shipping it?

1. A. 2, 3, 4, 1, 5
2. B. 2, 1, 3, 4, 5
3. C. 1, 3, 2, 4, 5
4. D. 2, 3, 4, 5, 1

Correct Answer: B

What action can be performed from SmartUpdate R77?

1. A. upgrade_export
2. B. fw stat -l
3. C. cpinfo
4. D. remote_uninstall_verifier

Correct Answer: C

You just installed a new Web server in the DMZ that must be reachable from the Internet. You create a manual Static NAT rule as follows:
Source: Any || Destination: web_public_IP || Service: Any || Translated Source: original || Translated Destination: web_private_IP || Service: Original
“web_public_IP” is the node object that represents the new Web server’s public IP address. “web_private_IP” is the node object that represents the new Web site’s private IP address. You enable all settings from Global Properties > NAT.
When you try to browse the Web server from the Internet you see the error “page cannot be displayed”.
Which of the following is NOT a possible reason?

1. A. There is no Security Policy defined that allows HTTP traffic to the protected Web server.
2. B. There is no ARP table entry for the protected Web server’s public IP address.
3. C. There is no route defined on the Security Gateway for the public IP address to the Web server’s private IP address.
4. D. There is no NAT rule translating the source IP address of packets coming from the protected Web server.

Correct Answer: A