156-915.80 Free Practice Test

- (Exam Topic 2)
As a Security Administrator, you must refresh the Client Authentication authorization time-out every time a new user connection is authorized. How do you do this? Enable the Refreshable Timeout setting:

1. A. in the user object's Authentication screen.
2. B. in the Gateway object's Authentication screen.
3. C. in the Limit tab of the Client Authentication Action Properties screen.
4. D. in the Global Properties Authentication screen.

Correct Answer: C

- (Exam Topic 2)
You have configured Automatic Static NAT on an internal host-node object. You clear the box Translate destination on client site from Global Properties > NAT. Assuming all other NAT settings in Global Properties are selected, what else must be configured so that a host on the Internet can initiate an inbound connection to this host?

1. A. No extra configuration is needed.
2. B. A proxy ARP entry, to ensure packets destined for the public IP address will reach the Security Gateway's external interface.
3. C. The NAT IP address must be added to the external Gateway interface anti-spoofing group.
4. D. A static route, to ensure packets destined for the public NAT IP address will reach the Gateway's internal interface.

Correct Answer: D

- (Exam Topic 1)
What Shell is required in Gaia to use WinSCP?

1. A. UNIX
2. B. CPShell
3. C. CLISH
4. D. Bash

Correct Answer: D

- (Exam Topic 3)
Use the table to match the BEST Management High Availability synchronication-status descriptions for your Security Management Server (SMS).
Exhibit:

1. A. A-5, B-3, C-1, D-2
2. B. A-3, B-1, C-4, D-2
3. C. A-3, B-5, C-2, D-4
4. D. A-3, B-1, C-5, D-4

Correct Answer: D

- (Exam Topic 1)
The Firewall kernel is replicated multiple times, therefore:

1. A. The Firewall kernel only touches the packet if the connection is accelerated
2. B. The Firewall can run different policies per core
3. C. The Firewall kernel is replicated only with new connections and deletes itself once the connection times out
4. D. The Firewall can run the same policy on all cores

Correct Answer: D
On a Security Gateway with CoreXL enabled, the Firewall kernel is replicated multiple times. Each replicated copy, or instance, runs on one processing core. These instances handle traffic concurrently, and each instance is a complete and independent inspection kernel. When CoreXL is enabled, all the kernel instances in the Security Gateway process traffic through the same interfaces and apply the same security policy.