VNX326

VNX326 practice questions, page 3 of 4, with answer review and explanations.

Question 11

Your organization needs protection from ICMP fragmentation attacks.In this scenario, which feature must be configured?

  1. Intrusion Detection System (IDS)
  2. Zone Protection profile
  3. DoS policy
  4. URL filtering policy

Question 12

You are asked to protect Web servers at a LAN site from volumetric attacks. The requirements include the ability to perform protection based on the destination address of the attacks.How would you accomplish this task?

  1. Configure a NextGen firewall application filter.
  2. Configure and apply a zone protection profile.
  3. Configure and apply a DoS protection profile
  4. Configure a class of service filter.

Question 13

What is the effect of a security rule that matches traffic on the ptvi destination zone?

  1. All DIA traffic s matched by this security rule.
  2. All control plane traffic is matched by this rule.
  3. All LAN traffic is matched by this rule.
  4. All SD-WAN traffic going to a remote branch matched by this rule.

Question 14

Review the exhibit.Referring to the exhibit, which statement is true about the NAT configuration on the hub VOS device?Exhibit Text (CLI Output):

  1. The session is initiated from a remote SD-WAN branch.
  2. The session has invalid port numbers and will fail.
  3. The session is a destination NAT session to an internal server.
  4. The NAT process is looking for sessions to default port numbers.

Question 15

You have configured a URL filter with a Deny List action of “Justify”. A user browses to a URL that matches the Deny List URL pattern, but the URL also matches a category-based action of “block”.In this situation, which statement is true?

  1. The user’s access to the URL will be blocked.
  2. The user’s access to the URL will be allowed.
  3. The user will be asked to justify the reason for access.
  4. The URL filter default action will be applied.