Question 1

What is the name of the default Threat Prevention Profile?

Options :

A : Basic

B : Standard

C : Strict

D : Optimized

Answer: D

Question 2

What is the correct action to exclude one or more Threat Prevention Blades in a Blade exception rule?

Options :

A : "inactive"

B : "ignore"

C : "Ask user"

D : "bypass"

Answer: D

Question 3

What are the common features included in the NGFW, NGTP and SNBT packages, respectively?

Options :

A : Firewall, Antivirus, Threat Emulation

B : Firewall, Identity Awareness, Content Awareness, and IPS

C : Firewall, IPS, Antivirus, Antibot

D : Firewall, IPS, Antivirus, Threat Emulation

Answer: B

Question 4

How can the IPS Blade be activated?

Options :

A : The IPS Blade must be activated on the Management Server object and can be used on every gateway managed by this Management server.

B : No need to activate the IPS Blade as far as you have installed the correct IPS license on the gateways.

C : In a ClusterXL deployment, the IPS Blade must be activated on the individual cluster nodes.

D : The IPS Blade must be activated on the individual Security Gateway object.

Answer: D

Question 5

You have to issue a Log filter to view IPS logs generated for user John Doe. Which of the following is the correct filter?

Options :

A : user:"John-Doe" AND (action:drop OR action:reject OR action:block)

B : user:John Doe AND (action:drop OR action:reject OR action:block)

C : user:"John Doe" AND (action:drop OR action:reject OR action:block)

D : user:'John Doe' AND (action:drop OR action:reject OR action:block)

Answer: C