156-215.77 Free Practice Test

Where are SmartEvent licenses installed?

1. A. SmartEvent server
2. B. Log Server
3. C. Security Management Server
4. D. Security Gateway

Correct Answer: A

A Web server behind the Security Gateway is set to Automatic Static NAT. Client side NAT is not checked in the Global Properties. A client on the Internet initiates a session to the Web Server. Assuming there is a rule allowing this traffic, what other configuration must be done to allow the traffic to reach the Web server?

1. A. Automatic ARP must be unchecked in the Global Properties.
2. B. Nothing else must be configured.
3. C. A static route must be added on the Security Gateway to the internal host.
4. D. A static route for the NAT IP must be added to the Gateway’s upstream router.

Correct Answer: C

The Tokyo Security Management Server Administrator cannot connect from his workstation in Osaka.

Which of the following lists the BEST sequence of steps to troubleshoot this issue?

1. A. Check for matching OS and product versions of the Security Management Server and the clien
2. B. Then, ping the Gateways to verify connectivit
3. C. If successful, scan the log filesfor any denied management packets.
4. D. Verify basic network connectivity to the local Gateway, service provider, remote Gateway, remote network and target machin
5. E. Then, test for firewall rules that deny management access to the targe
6. F. If successful, verify that pcosaka is a valid client IP address.
7. G. Check the allowed clients and users on the Security Management Serve
8. H. If pcosaka and your user account are valid, check for network problem
9. I. If there are no network related issues, this is likely to be a problem with the server itsel
10. J. Check for any patches and upgrade
11. K. If still unsuccessful, open a case with Technical Support.
12. L. Call Tokyo to check if they can ping the Security Management Server locall
13. M. If so, login to sgtokyo, verify management connectivity and Rule Bas
14. N. If this looks okay, ask your provider if they have some firewall rules that filters out your management traffic.

Correct Answer: B

Which command allows Security Policy name and install date verification on a Security Gateway?

1. A. fw show policy
2. B. fw stat -l
3. C. fw ctl pstat -policy
4. D. fw ver -p

Correct Answer: B

Which feature in R77 permits blocking specific IP addresses for a specified time period?

1. A. Suspicious Activity Monitoring
2. B. HTTP Methods
3. C. Local Interface Spoofing
4. D. Block Port Overflow

Correct Answer: A