Question 51
The fw monitor utility is used to troubleshoot which of the following problems?
- Phase two key negotiation
- Address translation
- Log Consolidation Engine
- User data base corruption
Question 52
Looking at the SYN packets in the Wireshark output, select the statement that is true about NAT. Exhibit:
- This is an example of Hide NAT.
- There is not enough information provided in the Wireshark capture to determine the NAT settings.
- This is an example of Static NAT and Translate destination on client side unchecked in Global Properties.
- This is an example of Static NAT and Translate destination on client side checked in Global Properties.
Question 53
In SmartDashboard, Translate destination on client side is checked in Global Properties. When Network Address Translation is used:
- It is not necessary to add a static route to the Gateway's routing table.
- It is necessary to add a static route to the Gateway's routing table.
- The Security Gateway's ARP file must be modified.
- VLAN tagging cannot be defined for any hosts protected by the Gateway.
Question 54
Secure Internal Communications (SIC) is completely NAT-tolerant because it is based on:
- IP addresses.
- SIC is not NAT-tolerant.
- SIC names.
- MAC addresses.
Question 55
Static NAT connections, by default, translate on which firewall kernel inspection point?
- Inbound
- Outbound
- Post-inbound
- Eitherbound