156-915.80 Free Practice Test

- (Exam Topic 2)
A Web server behind the Security Gateway is set to Automatic Static NAT. Client side NAT is not checked in the Global Properties. A client on the Internet initiates a session to the Web Server. Assuming there is a rule allowing this traffic, what other configuration must be done to allow the traffic to reach the Web server?

1. A. Automatic ARP must be unchecked in the Global Properties.
2. B. Nothing else must be configured.
3. C. A static route must be added on the Security Gateway to the internal host.
4. D. A static route for the NAT IP must be added to the Gateway’s upstream router.

Correct Answer: C

- (Exam Topic 1)
What is a feature that enables VPN connections to successfully maintain a private and secure VPN session without employing Stateful Inspection?

1. A. Stateful Mode
2. B. VPN Routing Mode
3. C. Wire Mode
4. D. Stateless Mode

Correct Answer: C
Wire Mode is a VPN-1 NGX feature that enables VPN connections to successfully fail over, bypassing Security Gateway enforcement. This improves performance and reduces downtime. Based on a trusted source and destination, Wire Mode uses internal interfaces and VPN Communities to maintain a private and secure VPN session, without employing Stateful Inspection. Since Stateful Inspection no longer takes place, dynamic-routing protocols that do not survive state verification in non-Wire Mode configurations can now be deployed. The VPN connection is no different from any other connections along a dedicated wire, thus the meaning of "Wire Mode".

- (Exam Topic 3)
How do you configure the Security Policy to provide user access to the Captive Portal through an external (Internet) interface?

1. A. Change the gateway settings to allow Captive Portal access via an external interface.
2. B. No action is necessar
3. C. This access is available by default.
4. D. Change the Identity Awareness settings under Global Properties to allow Captive Portal access on all interfaces.
5. E. Change the Identity Awareness settings under Global Properties to allow Captive Portal access for anexternal interface.

Correct Answer: A

- (Exam Topic 3)
Fill in the blank. To save your OSPF configuration in GAiA, enter the command .
Solution:
save config

Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

- (Exam Topic 3)
A ClusterXL configuration is limited to members.

1. A. There is no limit.
2. B. 16
3. C. 6
4. D. 2

Correct Answer: C