156-315.81 Free Practice Test

- (Exam Topic 1)
What is the limitation of employing Sticky Decision Function?

1. A. With SDF enabled, the involved VPN Gateways only supports IKEv1
2. B. Acceleration technologies, such as SecureXL and CoreXL are disabled when activating SDF
3. C. With SDF enabled, only ClusterXL in legacy mode is supported
4. D. With SDF enabled, you can only have three Sync interfaces at most

Correct Answer: B

- (Exam Topic 2)
Under which file is the proxy arp configuration stored?

1. A. $FWDIR/state/proxy_arp.conf on the management server
2. B. $FWDIR/conf/local.arp on the management server
3. C. $FWDIR/state/_tmp/proxy.arp on the security gateway
4. D. $FWDIR/conf/local.arp on the gateway

Correct Answer: D

- (Exam Topic 4)
How does the Anti-Virus feature of the Threat Prevention policy block traffic from infected websites?

1. A. By dropping traffic from websites identified through ThreatCloud Verification and URL Caching
2. B. By dropping traffic that is not proven to be from clean websites in the URL Filtering blade
3. C. By allowing traffic from websites that are known to run Antivirus Software on servers regularly
4. D. By matching logs against ThreatCloud information about the reputation of the website

Correct Answer: D

- (Exam Topic 4)
SmartEvent uses it's event policy to identify events. How can this be customized?

1. A. By modifying the firewall rulebase
2. B. By creating event candidates
3. C. By matching logs against exclusions
4. D. By matching logs against event rules

Correct Answer: D

- (Exam Topic 2)
What is the purpose of extended master key extension/session hash?

1. A. UDP VOIP protocol extension
2. B. In case of TLS1.x it is a prevention of a Man-in-the-Middle attack/disclosure of the client-server communication
3. C. Special TCP handshaking extension
4. D. Supplement DLP data watermark

Correct Answer: B