Free 156-315.81.20 Exam Braindumps (page: 12)

Page 11 of 47

What are the two types of tests when using the Compliance blade?

  1. Tests conducted based on the IoC XML file and analysis of SOLR documents
  2. Access Control policy analysis and Threat Prevention policy analysis
  3. Policy-based tests and Global properties
  4. Global tests and Object-based tests

Answer(s): D



Which of the following statements about SecureXL NAT Templates is true?

  1. NAT Templates are generated to achieve high session rate for NAT. These templates store the NAT attributes of connections matched by rulebase so that similar new connections can take advantage of this information and do NAT without the expensive rulebase lookup. These are disabled by default and work only if Accept Templates are disabled.
  2. NAT Templates are generated to achieve high session rate for NAT. These templates store the NAT attributes of connections matched by rulebase so that similar new connections can take advantage of this information and do NAT without the expensive rulebase lookup. These are enabled by default and work only if Accept Templates are enabled.
  3. ACCEPT Templates are generated to achieve high session rate for NAT. These templates store the NAT attributes of connections matched by rulebase so that similar new connections can take advantage of this information and do NAT without the expensive rulebase lookup. These are disabled by default and work only if NAT Templates are disabled.
  4. DROP Templates are generated to achieve high session rate for NAT. These templates store the NAT attributes of connections matched by rulebase so that similar new connections can take advantage of this information and do NAT without the expensive rulebase lookup. These are disabled by default and work only if NAT Templates are disabled.

Answer(s): B



In what way is Secure Network Distributor (SND) a relevant feature of the Security Gateway?

  1. SND is used to distribute packets among Firewall instances
  2. SND is a feature to accelerate multiple SSL VPN connections
  3. SND is a feature of fw monitor to capture accelerated packets
  4. SND is an alternative to IPSec Main Mode, using only 3 packets.

Answer(s): A



Which statement is most correct regarding about “CoreXL Dynamic Dispatcher’?

  1. The CoreXL FW instances assignment mechanism is based on IP Protocol type.
  2. The CoreXL FW instances assignment mechanism is based on the utilization of CPU cores
  3. The CoreXL FW instances assignment mechanism is based on Source MAC addresses, Destination MAC addresses
  4. The CoreXL FW instances assignment mechanism is based on Source IP addresses, Destination IP addresses, and the IP ‘Protocol’ type.

Answer(s): B






Post your Comments and Discuss Checkpoint 156-315.81.20 exam with other Community members:

156-315.81.20 Discussions & Posts