156-915.80 Free Practice Test

- (Exam Topic 1)
What is the command to show SecureXL status?

1. A. fwaccel status
2. B. fwaccel stats –m
3. C. fwaccel –s
4. D. fwaccel stat

Correct Answer: D
To check overall SecureXL status: [Expert@HostName]# fwaccel stat

- (Exam Topic 3)
You find that Gateway fw2 can NOT be added to the cluster object. What are possible reasons for that? Exhibit:

1) fw2 is a member in a VPN community.
2) ClusterXL software blade is not enabled on fw2.
3) fw2 is a DAIP Gateway.

1. A. 2 or 3
2. B. 1 or 2
3. C. 1 or 3
4. D. All

Correct Answer: C

- (Exam Topic 2)
John Adams is an HR partner in the ACME organization. ACME IT wants to limit access to HR servers to a set of designated IP addresses to minimize malware infection and unauthorized access risks. Thus, the gateway policy permits access only from John's desktop which is assigned a static IP address 10.0.0.19.
He has received a new laptop and wants to access the HR Web Server from anywhere in the organization. The IT department gave the laptop a static IP address, but that limits him to operating it only from his desk. The current Rule Base contains a rule that lets John Adams access the HR Web Server from his laptop with a static IP (10.0.0.19).
He wants to move around the organization and continue to have access to the HR Web Server. To make this scenario work, the IT administrator:
1) Enables Identity Awareness on a gateway, selects AD Query as one of the Identity Sources, and installs the policy.
2) Adds an access role object to the Firewall Rule Base that lets John Adams access the HR Web Server from
any machine and from any location and installs policy.
John plugged in his laptop to the network on a different network segment and was not able to connect to the HR Web server. What is the next BEST troubleshooting step?

1. A. Investigate this as a network connectivity issue
2. B. Install the Identity Awareness Agent
3. C. Set static IP to DHCP
4. D. After enabling Identity Awareness, reboot the gateway

Correct Answer: C

- (Exam Topic 2)
What is the primary benefit of using the command upgrade_export over either backup or snapshot?

1. A. upgrade_export is operating system independent and can be used when backup or snapshot is not available.
2. B. upgrade_export will back up routing tables, hosts files, and manual ARP configurations, where backup and snapshot will not.
3. C. The commands backup and snapshot can take a long time to run whereas upgrade_export will take a much shorter amount of time.
4. D. upgrade_export has an option to back up the system and SmartView Tracker logs while backup andsnapshot will not.

Correct Answer: A

- (Exam Topic 1)
Which command shows the current connections distributed by CoreXL FW instances?

1. A. fw ctl multik stat
2. B. fw ctl affinity –l
3. C. fw ctl instances –v
4. D. fw ctl iflist

Correct Answer: A
The fw ctl multik stat and fw6ctl multik stat (multi-kernel statistics) commands show information for eac kernel instance. The state and processing core number of each instance is displayed, along with: