156-585

Review 75 156-585 practice questions with answer explanations and community insights.

Question 1

What are some measures you can take to prevent IPS false positives?

  1. Exclude problematic services from being protected by IPS (sip, H.323, etc.)
  2. Use IPS only in Detect mode
  3. Use Recommended IPS profile
  4. Capture packets, Update the IPS database, and Back up custom IPS files

Question 2

VPN issues may result from misconfiguration, communication failure, or incompatible default configurations between peers. Which basic command syntax needs to be used for troubleshooting Site-to-Site VPN issues?

  1. vpn debug truncon
  2. fw debug truncon
  3. cp debug truncon
  4. vpn truncon debug

Question 3

What are the maximum kernel debug buffer sizes, depending on the version?

  1. 8MB or 32MB
  2. 8GB or 64GB
  3. 4MB or 8MB
  4. 32MB or 64MB

Question 4

Which daemon governs the Mobile Access VPN blade and works with VPND to create Mobile Access VPN connections? It also handles interactions between HTTPS and the Multi-Portal Daemon.

  1. Connectra VPN Daemon - cvpnd
  2. Mobile Access Daemon - MAD
  3. mvpnd
  4. SSL VPN Daemon - sslvpnd

Question 5

What does CMI stand for in relation to the Access Control Policy?

  1. Content Matching Infrastructure
  2. Content Management Interface
  3. Context Management Infrastructure
  4. Context Manipulation Interface
We are moving to a new platform

CertificationTest is being migrated. Some pages may be slow or briefly unavailable; everything will be back to normal within a few hours. If you run into any issue, email support@certificationtest.net.