VNX326

VNX326 practice questions, page 2 of 4, with answer review and explanations.

Question 6

You want to ensure that your internal network traffic is regularly inspected for unusual events or trends in network activity.In this scenario, which VOS security component should be used?

  1. antivirus
  2. IP filtering
  3. Intrusion Detection and Prevention (IDP)
  4. DHCP snooping

Question 7

You need to request a certificate for the VOS decryption feature from your company’s IT department for a VOS branch. The company-issued laptops have the IT root certificate already preinstalled.In this scenario, which type of certificate should you request from the IT department?

  1. a client certificate signed by the enterprise CA
  2. an intermediate CA certificate
  3. a codesigning certificate
  4. an SSL certificate

Question 8

Which two statements are true about DoS protection in a stateful firewall policy? (Choose two.)

  1. DoS protection can protect and deny scanning activities in a network.
  2. DoS protection is used against SYN-based TCP attacks.
  3. DoS protection uses L3/L4/L7 properties for protection
  4. DoS protection uses L3/L4 properties for protection only.

Question 9

You are asked to protect against attacks originated from the internal LAN.Which three actions would help to achieve the first level of defense in this scenario? (Choose three.)

  1. Derive a baseline for different types of traffic passing through the device, before configuring the zone protection’s flood threshold values.
  2. Enable the appropriate “Packet based Attack Protection” fields on the zone protection profiles.
  3. Configure the zone protection profiles with the flood settings enabled and the map to all the WAN zones.
  4. Enable DoS profiles for all LAN interfaces.
  5. Enable alerting of network scan activities to get notified in Analytics.

Question 10

You must apply security policies to allow secure Web traffic towards a hosted Web server from specific countries.In this scenario, which statement is correct?

  1. You cannot achieve this task using the stateful firewall service: you need to upgrade to Next Generation Firewall services.
  2. You can configure a stateful firewall to identify secure Web traffic using predefined services but you cannot select IP addresses from the source countries.
  3. You can select IP addresses from specific countries from the source address list. But you cannot select secure Web traffic.
  4. You can select IP addresses from specific countries using the source address list and then select the secure Web traffic from predefined services.