156-215.77

156-215.77 practice questions, page 7 of 15, with answer review and explanations.

Question 31

You want to generate a cpinfo file via CLI on a system running GAiA. This will take about 40 minutes since the log files are also needed. What action do you need to take regarding timeout?

  1. No action is needed because cpshell has a timeout of one hour by default.
  2. Log in as the default user expert and start cpinfo.
  3. Log in as admin, switch to expert mode, set the timeout to one hour with the command, idle 60, then start cpinfo.
  4. Log in as Administrator, set the timeout to one hour with the command idle 60 and start cpinfo.

Question 32

Many companies have defined more than one administrator. To increase security, only one administrator should be able to install a Rule Base on a specific Firewall. How do you configure this?

  1. Define a permission profile in SmartDashboard with read/write privileges, but restrict it to all other firewalls by placing them in the Policy Targets field. Then, an administrator with this permission profile cannot install a policy on any Firewall not listed here.
  2. Put the one administrator in an Administrator group and configure this group in the specific Firewall object in Advanced > Permission to Install.
  3. In the object General Properties representing the specific Firewall, go to the Software Blades product list and select Firewall. Right-click in the menu, select Administrator to Install to define only this administrator.
  4. Right-click on the object representing the specific administrator, and select that Firewall in Policy Targets.

Question 33

What is the officially accepted diagnostic tool for IP Appliance Support?

  1. ipsoinfo
  2. CST
  3. uag-diag
  4. cpinfo

Question 34

Which of these Security Policy changes optimize Security Gateway performance?

  1. Using groups within groups in the manual NAT Rule Base.
  2. Use Automatic NAT rules instead of Manual NAT rules whenever possible.
  3. Using domain objects in rules when possible.
  4. Putting the least-used rule at the top of the Rule Base.

Question 35

Your perimeter Security Gateway's external IP is 200.200.200.3. Your network diagram shows: Required. Allow only network 192.168.10.0 and 192.168.20.0 to go out to the Internet, using 200.200.200.5. The local network 192.168.1.0/24 needs to use 200.200.200.3 to go out to the Internet. Assuming you enable all the settings in the NAT page of Global Properties, how could you achieve these requirements?

  1. Create network objects for 192.168.10.0/24 and 192.168.20.0/24. Enable Hide NAT on both network objects, using 200.200.200.5 as hiding IP address. Add an ARP entry for 200.200.200.3 for the MAC address of 200.200.200.5.
  2. Create an Address Range object, starting from 192.168.10.1 to 192.168.20.254. Enable Hide NAT on the NAT page of the address range object. Enter Hiding IP address 200.200.200.5. Add an ARP entry for 200.200.200.5 for the MAC address of 200.200.200.3.
  3. Create a network object 192.168.0.0/16. Enable Hide NAT on the NAT page. Enter 200.200.200.5 as the hiding IP address. Add an ARP entry for 200.200.200.5 for the MAC address of 200.200.200.3.
  4. Create two network objects: 192.168.10.0/24 and 192.168.20.0/24. Add the two network objects to a group object. Create a manual NAT rule like the following: