QUESTION: 113

You have created a Rule Base for firewall, websydney. Now you are going to create a new policy package with security and address translation rules for a second Gateway.

What is TRUE about the new package's NAT rules?

Rules 1, 2, 3 will appear in the new package.
Only rule 1 will appear in the new package.
NAT rules will be empty in the new package.
Rules 4 and 5 will appear in the new package.

Answer(s): A

Reveal Solution Next Question

QUESTION: 114

You find that Users are not prompted for authentication when they access their Web servers, even though you have created an HTTP rule via User Authentication. Choose the BEST reason why.

You checked the cache password on desktop option in Global Properties.
Another rule that accepts HTTP without authentication exists in the Rule Base.
You have forgotten to place the User Authentication Rule before the Stealth Rule.
Users must use the SecuRemote Client, to use the User Authentication Rule.

Answer(s): B

Reveal Solution Next Question

QUESTION: 115

Your customer, Mr. Smith needs access to other networks and should be able to use all services. Session authentication is not suitable. You select Client Authentication with HTTP. The standard authentication port for client HTTP authentication (Port 900) is already in use. You want to use Port 9001 but are having connectivity problems. Why are you having problems?

The configuration file $FWDIR/conf/fwauthd.conf is incorrect.
The Security Policy is not correct.
You can't use any port other than the standard port 900 for Client Authentication via HTTP.
The service FW_clntauth_http configuration is incorrect.

Answer(s): A

Reveal Solution Next Question

QUESTION: 116

John Adams is an HR partner in the ACME organization. ACME IT wants to limit access to HR servers to designated IP addresses to minimize malware infection and unauthorized access risks. Thus, the gateway policy permits access only from John's desktop which is assigned a static IP address 10.0.0.19.
John received a laptop and wants to access the HR Web Server from anywhere in the organization. The IT department gave the laptop a static IP address, but that limits him to operating it only from his desk. The current Rule Base contains a rule that lets John Adams access the HR Web Server from his laptop with a static IP (10.0.0.19). He wants to move around the organization and continue to have access to the HR Web Server.
To make this scenario work, the IT administrator:
1) Enables Identity Awareness on a gateway, selects AD Query as one of the Identity Sources installs the policy.
2) Adds an access role object to the Firewall Rule Base that lets John Adams PC access the HR Web Server from any machine and from any location.
What should John do when he cannot access the web server from a different personal computer?

John should lock and unlock his computer
Investigate this as a network connectivity issue
The access should be changed to authenticate the user instead of the PC
John should install the Identity Awareness Agent

Answer(s): C

Reveal Solution Next Question

Free 156-915.80 Exam Braindumps (page: 29)

QUESTION: 113

QUESTION: 114

QUESTION: 115

QUESTION: 116