CCSA-2

For Automatic Hide NAT rules created by the administrator what is a TRUE statement?

• Source Port Address Translation (PAT) is enabled by default.

• Automatic NAT rules are supported for Network objects only.

• Automatic NAT rules are supported for Host objects only.

• Source Port Address Translation (PAT) is disabled by default.

Which of the following is true about Stateful Inspection?

• Stateful Inspection requires that a server reply to a request, in order to track a connection's state

• Stateful Inspection looks at both the headers of packets, as well as deeply examining their content.

• Stateful Inspection requires two rules, one for outgoing traffic and one for incoming traffic.

• Stateful Inspection requires two rules, one for outgoing traffic and one for incoming traffic.

What is the user ID of a user that have all the privileges of a root user?

• User ID 1

• User ID 2

• User ID 0

• User ID 99

What are the two elements of address translation rules?

• Original packet and translated packet

• Manipulated packet and original packet

• Translated packet and untranslated packet

• Untranslated packet and manipulated packet

A _______ license requires an administrator to designate a gateway for attachment whereas a _______ license is automatically attached to a Security Gateway.

• Formal; corporate

• Local; central

• Local; formal

• Central; local

RADIUS protocol uses _________ to communicate with the gateway.

• UDP

• CCP

• TDP

• HTTP

Which software blade enables Access Control policies to accept, drop, or limit web site access based on user, group, and/or machine?

• Application Control

• Threat Emulation

• Data Awareness

• Identity Awareness

Which one of the following is TRUE?

• One policy can be either inline or ordered, but not both.

• Inline layer can be defined as a rule action.

• Ordered policy is a sub-policy within another policy.

• Pre-R80 Gateways do not support ordered layers.

You have discovered suspicious activity in your network. What is the BEST immediate action to take?

• Contact your ISP to request them to block the traffic.

• Wait until traffic has been identified before making any changes.

• Create a new policy rule to block the traffic.

• Create a Suspicious Activity Monitoring (SAM) rule to block that traffic.

Which of the following is NOT an identity source used for Identity Awareness?

• Remote Access

• UserCheck

• RADIUS

• AD Query