QUESTION: 77

The "Drive-By Download" protection feature, under File Blocking profiles in Content-ID, provides:

Increased speed on downloads of file types that are explicitly enabled.
The ability to use Authentication Profiles, in order to protect against unwanted downloads.
Password-protected access to specific file downloads for authorized users.
Protection against unwanted downloads by showing the user a response page indicating that a file is going to be downloaded.

Answer(s): D

Taking into account only the information in the screenshot above, answer the following question. In order for ping traffic to traverse this device from e1/2 to e1/1, what else needs to be configured? Select all that apply.

Security policy from trust zone to Internet zone that allows ping
Create the appropriate routes in the default virtual router
Security policy from Internet zone to trust zone that allows ping
Create a Management profile that allows ping. Assign that management profile to e1/1 and e1/2

Answer(s): A,D

Reveal Solution Next Question

QUESTION: 79

The following can be configured as a next hop in a Static Route:

A Policy-Based Forwarding Rule
Virtual System
A Dynamic Routing Protocol
Virtual Router

Answer(s): D

Reveal Solution Next Question

QUESTION: 80

What are two sources of information for determining if the firewall has been successful in communicating with an external User-ID Agent?

System Logs and the indicator light under the User-ID Agent settings in the firewall
There's only one location - System Logs
There's only one location - Traffic Logs
System Logs and indicator light on the chassis

Answer(s): A

Reveal Solution Next Question

Free ACE Exam Braindumps (page: 20)

QUESTION: 77

QUESTION: 78

QUESTION: 79

QUESTION: 80