156-915.80 Free Practice Test

- (Exam Topic 3)
Where does the security administrator activate Identity Awareness within SmartDashboard?

1. A. Gateway Object > General Properties
2. B. Security Management Server > Identity Awareness
3. C. Policy > Global Properties > Identity Awareness
4. D. LDAP Server Object > General Properties

Correct Answer: A

- (Exam Topic 1)
When synchronizing clusters, which of the following statements is FALSE?

1. A. The state of connections using resources is maintained in a Security Server, so their connections cannot be synchronized.
2. B. Only cluster members running on the same OS platform can be synchronized.
3. C. In the case of a failover, accounting information on the failed member may be lost despite a properly working synchronization.
4. D. Client Authentication or Session Authentication connections through a cluster member will be lost if the cluster member fails.

Correct Answer: D

- (Exam Topic 3)
Fill in the blank with a numeric value. The default port number for Secure Sockets Layer (SSL) connections with the LDAP Server is
Solution:
636

Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

- (Exam Topic 2)
What happens if the identity of a user is known?

1. A. If the user credentials do not match an Access Role, the traffic is automatically dropped.
2. B. If the user credentials do not match an Access Role, the system displays a sandbox.
3. C. If the user credentials do not match an Access Role, the gateway moves onto the next rule.
4. D. If the user credentials do not match an Access Role, the system displays the Captive Portal.

Correct Answer: C

- (Exam Topic 2)
You just installed a new Web server in the DMZ that must be reachable from the Internet. You create a manual Static NAT rule as follows:
Source: Any || Destination: web_public_IP || Service: Any || Translated Source: original || Translated Destination: web_private_IP || Service: Original
“web_public_IP” is the node object that represents the new Web server’s public IP address. “web_private_IP” is the node object that represents the new Web site’s private IP address. You enable all settings from Global Properties > NAT.
When you try to browse the Web server from the Internet you see the error “page cannot be displayed”. Which of the following is NOT a possible reason?

1. A. There is no Security Policy defined that allows HTTP traffic to the protected Web server.
2. B. There is no ARP table entry for the protected Web server’s public IP address.
3. C. There is no route defined on the Security Gateway for the public IP address to the Web server’s privateIP address.
4. D. There is no NAT rule translating the source IP address of packets coming from the protected Web server.

Correct Answer: D