QUESTION: 13

A Security policy rule is configured with a Vulnerability Protection Profile and an action of “Deny”.
Which action will this cause configuration on the matched traffic?

The configuration is invalid. The Profile Settings section will be grayed out when the Action is set to “Deny”.
The configuration will allow the matched session unless a vulnerability signature is detected. The “Deny” action will supersede the per-severity defined actions defined in the associated Vulnerability Protection Profile.
The configuration is invalid. It will cause the firewall to skip this Security policy rule. A warning will be displayed during a commit.
The configuration is valid. It will cause the firewall to deny the matched sessions. Any configured Security Profiles have no effect if the Security policy rule action is set to “Deny.”

Answer(s): D

Reveal Solution Next Question

QUESTION: 14

Which DoS protection mechanism detects and prevents session exhaustion attacks?

TCP Port Scan Protection
Flood Protection
Resource Protection
Pocket Based Attack Protection

Answer(s): C

Reveal Solution Next Question

Refer to the exhibit.

An administrator wants multiple web servers in the DMZ to receive connections from the internet. Traffic destined for 206.15.22.9 port 80/TCP needs to be forwarded to the server at 10 1.22
Based on the information shown in the age, which NAT rule will forward web-browsing traffic correctly?

Option A
Option B
Option C
Option D

Answer(s): A

Reveal Solution Next Question

QUESTION: 16

View the GlobalProtect configuration screen capture.

What is the purpose of this configuration?

It forces an internal client to connect to an internal gateway at IP address 192 168 10 I.
It configures the tunnel address of all internal clients lo an IP address range starting at 192 168 10 1.
It forces the firewall to perform a dynamic DNS update, Which adds the internal gateway's hostname and IP address to the DNS server.
It enables a Client to perform a reverse DNS lookup on 192 .168. 10 .1. to delect it is an internal client.

Answer(s): D

Reveal Solution Next Question

Free PCNSC Exam Braindumps (page: 5)

QUESTION: 13

QUESTION: 14

QUESTION: 15

QUESTION: 16