Essentials

Essentials practice questions, page 3 of 3, with answer review and explanations.

Question 11

Which of these options are private IPv4 addresses you can assign to a trusted interface, as described in RFC 1918, Address Allocation for Private Internets? (Select three.)

  1. 192.168.50.1/24
  2. 10.50.1.1/16
  3. 198.51.100.1/24
  4. 172.16.0.1/16
  5. 192.0.2.1/24

Question 12

The policies in a default Firebox configuration do not allow outgoing traffic from optional interfaces.

  1. True
  2. False

Question 13

When you examine the log messages In Traffic Monitor, you see that some network packets are denied with an unhandled packet log message. What does this log massage mean? (Select one.)

  1. The packet is denied because the site is on the Blocked Sites List.
  2. The packet is denied because it matched a policy.
  3. The packet is denied because it matched an IPS signature.
  4. The packet is denied because it does not match any firewall policies.

Question 14

Which of these actions adds a host to the temporary or permanent blocked sites list? (Select three.)

  1. Enable the AUTO-block sites that attempt to connect option in a deny policy.
  2. Add the site to the Blocked Sites Exceptions list.
  3. On the Firebox System Manager >Blocked Sites tab, select Add.
  4. In Policy Manager, select Setup> Default Threat Protection > Blocked Sites and click Add.

Question 15

Which of these threats can the Firebox prevent with the default packet handling settings? (Select four.)

  1. Access to inappropriate websites
  2. Denial of service attacks
  3. Flood attacks
  4. Malware in downloaded files
  5. Port scans
  6. Viruses in email messages
  7. IP spoofing