NEW QUESTION 1
Which of the following is NOT true for Clientless VPN?

• A. The Gateway can enforce the use of strong encryption.
• B. The Gateway accepts any encryption method that is proposed by the client and supported in the VPN.
• C. Secure communication is provided between clients and servers that support HTTP.
• D. User Authentication is supported.

Answer: C

NEW QUESTION 2
You plan to create a backup of the rules, objects, policies, and global properties from an R77 Security Management Server. Which of the following backup and restore solutions can you use?

• A. 2, 4, and 5
• B. 1, 2, 3, 4, and 5
• C. 1, 2, and 3
• D. 1, 3, and 4

Answer: C

NEW QUESTION 3
How do you view a Security Administrator's activities with SmartConsole?

• A. Eventia Suite
• B. SmartView Monitor using the Administrator Activity filter
• C. SmartView Tracker in the Management tab
• D. SmartView Tracker in the Network and Endpoint tabs

Answer: C

NEW QUESTION 4
Anti-Spoofing is typically set up on which object type?

• A. Security Gateway
• B. Host
• C. Security Management object
• D. Network

Answer: A

NEW QUESTION 5
You cannot use SmartDashboard’s User Directory features to connect to the LDAP server. What should you investigate?
1) Verify you have read-only permissions as administrator for the operating system.
2) Verify there are no restrictions blocking SmartDashboard's User Manager from connecting to the LDAP server.
3) Check that the login Distinguished Name configured has root permission (or at least write permission Administrative access) in the LDAP Server's access control configuration.

• A. 1, 2, and 3
• B. 2 and 3
• C. 1 and 2
• D. 1 and 3

Answer: B

NEW QUESTION 6
By default, when you click File > Switch Active File in SmartView Tracker, the Security Management Server:

• A. Saves the current log file, names the log file by date and time, and starts a new log file.
• B. Purges the current log file, and starts a new log file.
• C. Prompts you to enter a filename, and then saves the log file.
• D. Purges the current log file, and prompts you for the new log’s mode.

Answer: A

NEW QUESTION 7
Which command displays the installed Security Gateway kernel version?

• A. fw printver
• B. fw ver
• C. fw ver -k
• D. cpstat -gw

Answer: C

NEW QUESTION 8
You have a mesh VPN Community configured to create a site-to-site VPN. Given the displayed VPN properties, what can you conclude about this community?
Exhibit:

• A. The VPN Community will perform IKE Phase 1 key-exchange encryption using the longest key Security Gateway R77 supports.
• B. Changing the setting Perform key exchange encryption with from AES-256 to 3DES will enhance the VPN Community's security , and reduce encryption overhead.
• C. Change the data-integrity setting for this VPN Community because MD5 is incompatible with AES.
• D. Changing the setting Perform IPsec data encryption with from AES-128 to 3Des will increase the encryption overhead.

Answer: D

NEW QUESTION 9
Message digests use which of the following?

• A. DES and RC4
• B. IDEA and RC4
• C. SSL and MD4
• D. SHA-1 and MD5

Answer: D

NEW QUESTION 10
You manage a global network extending from your base in Chicago to Tokyo, Calcutta and Dallas. Management wants a report detailing the current software level of each Enterprise class Security Gateway. You plan to take the opportunity to create a proposal outline, listing the most cost-effective way to upgrade your Gateways.
Which two SmartConsole applications will you use to create this report and outline?

• A. SmartView Tracker and SmartView Monitor
• B. SmartLSM and SmartUpdate
• C. SmartDashboard and SmartView Tracker
• D. SmartView Monitor and SmartUpdate

Answer: D

NEW QUESTION 11
Your company has two headquarters, one in London, and one in New York. Each office includes several branch offices. The branch offices need to communicate with the headquarters in their country, not with each other, and only the headquarters need to communicate directly.
What is the BEST configuration for establishing VPN Communities for this company? VPN Communities comprised of:

• A. One star Community with the option to mesh the center of the star: New York and London Gateways added to the center of the star with the mesh center Gateways option checked; all London branch offices defined in one satellite window, but, all New York branch offices defined in another satellite window.
• B. Two mesh and one star Community: One mesh Community is set up for each of the headquarters and its branch office
• C. The star Community is configured with London as the center of the Community and New York is the satellite.
• D. Two star and one mesh Community: One star Community is set up for each site, with headquarters as the Community center, and its branches as satellite
• E. The mesh Community includes only New York and London Gateways.
• F. Three mesh Communities: One for London headquarters and its branches, one for New York headquarters and its branches, and one for London and New York headquarters.

Answer: C

NEW QUESTION 12
In a distributed management environment, the administrator has removed the default check from Accept Control Connections under the Policy > Global Properties > FireWall tab. In order for the Security Management Server to install a policy to the Firewall, an explicit rule must be created to allow the server to communicate to the Security Gateway on port ______

• A. 259
• B. 900
• C. 256
• D. 80

Answer: C

NEW QUESTION 13
In the Rule Base displayed, user authentication in Rule 4 is configured as fully automatic.
Eric is a member of the LDAP group, MSD_Group.

What happens when Eric tries to connect to a server on the Internet?

• A. None of these things will happen.
• B. Eric will be authenticated and get access to the requested server.
• C. Eric will be blocked because LDAP is not allowed in the Rule Base.
• D. Eric will be dropped by the Stealth Rule.

Answer: B

NEW QUESTION 14
What information is found in the SmartView Tracker Management log?

• A. Creation of an administrator using cpconfig
• B. GAiA expert login event
• C. FTP username authentication failure
• D. Administrator SmartDashboard logout event

Answer: D

NEW QUESTION 15
Which command allows Security Policy name and install date verification on a Security Gateway?

• A. fw show policy
• B. fw stat -l
• C. fw ctl pstat -policy
• D. fw ver -p

Answer: B

NEW QUESTION 16
What action can be performed from SmartUpdate R77?

• A. upgrade_export
• B. fw stat -l
• C. cpinfo
• D. remote_uninstall_verifier

Answer: C

NEW QUESTION 17
Exhibit:

You installed Security Management Server on a computer using GAiA in the MegaCorp home office. You use IP address 10.1.1.1. You also installed the Security Gateway on a second GAiA computer, which you plan to ship to another Administrator at a MegaCorp hub office.
What is the correct order for pushing SIC certificates to the Gateway before shipping it?

• A. 2, 3, 4, 1, 5
• B. 2, 1, 3, 4, 5
• C. 1, 3, 2, 4, 5
• D. 2, 3, 4, 5, 1

Answer: B

NEW QUESTION 18
What is the primary benefit of using the command upgrade_export over either backup or snapshot?

• A. upgrade_export is operating system independent and can be used when backup or snapshot is not available.
• B. upgrade_export will back up routing tables, hosts files, and manual ARP configurations, where backup and snapshot will not.
• C. The commands backup and snapshot can take a long time to run whereas upgrade_export will take a much shorter amount of time.
• D. upgrade_export has an option to back up the system and SmartView Tracker logs while backup and snapshot will not.

Answer: A

NEW QUESTION 19
Select the TRUE statements about the Rule Base shown? Exhibit:

1) HTTP traffic from webrome to websingapore will be encrypted.
2) HTTP traffic from websingapore to webrome will be encrypted.
3) HTTP traffic from webrome to websingapore will be authenticated.
4) HTTP traffic from websingapore to webrome will be blocked.

• A. 1, 2, and 3
• B. 3 only
• C. 2 and 3
• D. 3 and 4

Answer: D

NEW QUESTION 20
......