156-215.77

156-215.77 practice questions, page 12 of 15, with answer review and explanations.

Question 56

You are MegaCorp's Security Administrator. There are various network objects which must be NATed. Some of them use the Automatic Hide NAT method, while others use the Automatic Static NAT method. What is the rule order if both methods are used together? Give the BEST answer.

  1. The Administrator decides the rule order by shifting the corresponding rules up and down.
  2. The Static NAT rules have priority over the Hide NAT rules and the NAT on a node has priority over the NAT on a network or an address range.
  3. The Hide NAT rules have priority over the Static NAT rules and the NAT on a node has priority over the NAT on a network or an address range.
  4. The rule position depends on the time of their creation. The rules created first are placed at the top; rules created later are placed successively below the

Question 57

Which answers are TRUE? Automatic Static NAT CANNOT be used when: 1) NAT decision is based on the destination port. 2) Both Source and Destination IP's have to be translated. 3) The NAT rule should only be installed on a dedicated Gateway. 4) NAT should be performed on the server side.

  1. 1 and 2
  2. 2 and 4
  3. 1, 3, and 4
  4. 2 and 3

Question 58

After filtering a fw monitor trace by port and IP, a packet is displayed three times; in the i, I, and o inspection points, but not in the O inspection point. Which is the likely source of the issue?

  1. The packet has been sent out through a VPN tunnel unencrypted.
  2. An IPSO ACL has blocked the packet's outbound passage.
  3. A SmartDefense module has blocked the packet.
  4. It is due to NAT.

Question 59

Your internal network is configured to be 10.1.1.0/24. This network is behind your perimeter R77 Gateway, which connects to your ISP provider. How do you configure the Gateway to allow this network to go out to the Internet?

  1. Use Hide NAT for network 10.1.1.0/24 behind the external IP address of your perimeter Gateway.
  2. Use Hide NAT for network 10.1.1.0/24 behind the internal interface of your perimeter Gateway.
  3. Use automatic Static NAT for network 10.1.1.0/24.
  4. Do nothing, as long as 10.1.1.0 network has the correct default Gateway.

Question 60

You are a Security Administrator who has installed Security Gateway R77 on your network. You need to allow a specific IP address range for a partner site to access your intranet Web server. To limit the partner's access for HTTP and FTP only, you did the following: 1) Created manual Static NAT rules for the Web server. 2) Cleared the following settings in the Global Properties > Network Address Translation screen: - Allow bi-directional NAT - Translate destination on client side Do the above settings limit the partner's access?

  1. Yes. This will ensure that traffic only matches the specific rule configured for this traffic, and that the Gateway translates the traffic after accepting the packet.
  2. No. The first setting is not applicable. The second setting will reduce performance.
  3. Yes. Both of these settings are only applicable to automatic NAT rules.
  4. No. The first setting is only applicable to automatic NAT rules. The second setting will force translation by the kernel on the interface nearest to the client.