Free 156-585 Exam braindumps download (156-585 exam dumps Free)

QUESTION: 11

When running a debug with fw monitor, which parameter will create a more verbose output?

-i
-i
-0
-d

Answer(s): D

Show Answer Next Question

QUESTION: 12

What is connect about the Resource Advisor (RAD) service on the Security Gateways?

RAD has a kernel module that looks up the kernel cache, notifies client about hits and misses and forwards a-sync requests to RAD user space module which is responsible for online categorization
RAD is completely loaded as a kernel module that looks up URL in cache and if not found connects online for categorization There is no user space involvement in this process
RAD functions completely in user space The Pattern Matter (PM) module of the CMI looks up for URLs in the cache and if not found, contact the RAD process in user space to do online categorization
RAD is not a separate module, it is an integrated function of the 'fw1 kernel module and does all operations in the kernel space

Answer(s): C

Show Answer Next Question

QUESTION: 13

What are some measures you can take to prevent IPS false positives?

Exclude problematic services from being protected by IPS (sip, H 323, etc )
Use IPS only in Detect mode
Use Recommended IPS profile
Capture packets. Update the IPS database, and Back up custom IPS files

Answer(s): A

Show Answer Next Question

QUESTION: 14

RAD is initiated when Application Control and URL Filtering blades are active on the Security Gateway What is the purpose of the following RAD configuration file SFWDIR/conf/rad_settings.C?

This file contains the location information tor Application Control and/or URL Filtering entitlements
This file contains the information on how the Security Gateway reaches the Security Managers RAD service for Application Control and URL Filtering
This file contains RAD proxy settings
This file contains all the host name settings for the online application detection engine

Answer(s): B

Show Answer Next Question