156-315.80 Free Practice Test

What has to be taken into consideration when configuring Management HA?

1. A. The Database revisions will not be synchronized between the management servers
2. B. SmartConsole must be closed prior to synchronized changes in the objects database
3. C. If you wanted to use Full Connectivity Upgrade, you must change the Implied Rules to allow FW1_cpredundant to pass before the Firewall Control Connections.
4. D. For Management Server synchronization, only External Virtual Switches are supporte
5. E. So, if you wanted to employ Virtual Routers instead, you have to reconsider your design.

Correct Answer: A

What is the correct command to observe the Sync traffic in a VRRP environment?

1. A. fw monitor –e “accept[12:4,b]=224.0.0.18;”
2. B. fw monitor –e “accept port(6118;”
3. C. fw monitor –e “accept proto=mcVRRP;”
4. D. fw monitor –e “accept dst=224.0.0.18;”

Correct Answer: D

Which statements below are CORRECT regarding Threat Prevention profiles in SmartDashboard?

1. A. You can assign only one profile per gateway and a profile can be assigned to one rule Only.
2. B. You can assign multiple profiles per gateway and a profile can be assigned to one rule only.
3. C. You can assign multiple profiles per gateway and a profile can be assigned to one or more rules.
4. D. You can assign only one profile per gateway and a profile can be assigned to one or more rules.

Correct Answer: C

Fill in the blank: The R80 feature _______ permits blocking specific IP addresses for a specified time period.

1. A. Block Port Overflow
2. B. Local Interface Spoofing
3. C. Suspicious Activity Monitoring
4. D. Adaptive Threat Prevention

Correct Answer: C
Suspicious Activity Rules Solution
Suspicious Activity Rules is a utility integrated into SmartView Monitor that is used to modify access privileges upon detection of any suspicious network activity (for example, several attempts to gain unauthorized access).
The detection of suspicious activity is based on the creation of Suspicious Activity rules. Suspicious Activity rules are Firewall rules that enable the system administrator to instantly block suspicious connections that are not restricted by the currently enforced security policy. These rules, once set (usually with an expiration date), can be applied immediately without the need to perform an Install Policy operation.
References:

You have a Gateway is running with 2 cores. You plan to add a second gateway to build a cluster and used a device with 4 cores.
How many cores can be used in a Cluster for Firewall-kernel on the new device?

1. A. 3
2. B. 2
3. C. 1
4. D. 4

Correct Answer: D