Question 1

Which member of a high-availability cluster should be upgraded first in a Zero downtime upgrade?

Options :

A : The Standby Member

B : The Active Member

C : The Primary Member

D : The Secondary Member

Answer: A

Question 2

Fill in the blanks: In the Network policy layer, the default action for the Implied last rule is ____ all traffic. However, in the Application Control policy layer, the default action is ______ all traffic.

Options :

A : Accept; redirect

B : Accept; drop

C : Redirect; drop

D : Drop; accept

Answer: D

Question 3

What is the purpose of extended master key extension/session hash?

Options :

A : UDP VOIP protocol extension

B : In case of TLS1.x it is a prevention of a Man-in-the-Middle attack/disclosure of the client-server communication

C : Special TCP handshaking extension

D : Supplement DLP data watermark

Answer: B

Question 4

Which of the following is a new R81 Gateway feature that had not been available in R77.X and older?

Options :

A : The rule base can be built of layers, each containing a set of the security rules. Layers are inspected in the order in which they are defined, allowing control over the rule base flow and which security functionalities take precedence.

B : Limits the upload and download throughput for streaming media in the company to 1 Gbps.

C : Time object to a rule to make the rule active only during specified times.

D : Sub Policies ae sets of rules that can be created and attached to specific rules. If the rule is matched, inspection will continue in the sub policy attached to it rather than in the next rule.

Answer: D

Question 5

You have created a rule at the top of your Rule Base to permit Guest Wireless access to the Internet. However, when guest users attempt to reach the Internet, they are not seeing the splash page to accept your Terms of Service, and cannot access the Internet. How can you fix this?

Other-Image-2f91b6c1e-6ada-4446-8cd6-7bbcceeba8e4

Options :

A : Right click Accept in the rule, select ''More'', and then check 'Enable Identity Captive Portal'.

B : On the firewall object, Legacy Authentication screen, check 'Enable Identity Captive Portal'.

C : In the Captive Portal screen of Global Properties, check 'Enable Identity Captive Portal'.

D : On the Security Management Server object, check the box 'Identity Logging'.

Answer: A