QUESTION: 157

Jennifer McHanry is CEO of ACME. She recently bought her own personal iPad. She wants use her iPad to access the internal Finance Web server. Because the iPad is not a member of the Active Directory domain, she cannot identify seamlessly with AD Query. However, she can enter her AD credentials in the Captive Portal and then get the same access as on her office computer. Her access to resources is based on rules in the R80 Firewall Rule Base.
To make this scenario work, the IT administrator must:
1) Enable Identity Awareness on a gateway and select Captive Portal as one of the Identity Sources.
2) In the Portal Settings window in the User Access section, make sure that Name and password login is selected.
3) Create a new rule in the Firewall Rule Base to let Jennifer McHanry access network destinations. Select accept as the Action.
Ms. McHanry tries to access the resource but is unable. What should she do?

Have the security administrator select the Action field of the Firewall Rule "Redirect HTTP connections to an authentication (captive) portal"
Have the security administrator reboot the firewall
Have the security administrator select Any for the Machines tab in the appropriate Access Role
Install the Identity Awareness agent on her iPad

Answer(s): A

Reveal Solution Next Question

QUESTION: 158

Because of pre-existing design constraints, you set up manual NAT rules for your HTTP server. However, your FTP server and SMTP server are both using automatic NAT rules. All traffic from your FTP and SMTP servers are passing through the Security Gateway without a problem, but traffic from the Web server is dropped on rule 0 because of anti-spoofing settings. What is causing this?

Manual NAT rules are not configured correctly.
Allow bi-directional NAT is not checked in Global Properties.
Routing is not configured correctly.
Translate destination on client side is not checked in Global Properties under Manual NAT Rules.

Answer(s): D

Reveal Solution Next Question

QUESTION: 159

Many companies have defined more than one administrator. To increase security, only one administrator should be able to install a Rule Base on a specific Firewall. How do you configure this?

Define a permission profile in SmartDashboard with read/write privileges, but restrict it to all other firewalls by placing them in the Policy Targets field. Then, an administrator with this permission profile cannot install a policy on any Firewall not listed here.
Put the one administrator in an Administrator group and configure this group in the specific Firewall object in Advanced > Permission to Install.
In the object General Properties representing the specific Firewall, go to the Software Blades product list and select Firewall. Right-click in the menu, select Administrator to Install to define only this administrator.
Right-click on the object representing the specific administrator, and select that Firewall in Policy Targets.

Answer(s): B

Reveal Solution Next Question

QUESTION: 160

Captive Portal is a __________ that allows the gateway to request login information from the user.

Pre-configured and customizable web-based tool
Transparent network inspection tool
LDAP server add-on
Separately licensed feature

Answer(s): A

Reveal Solution Next Question

Free 156-915.80 Exam Braindumps (page: 40)

QUESTION: 157

QUESTION: 158

QUESTION: 159

QUESTION: 160