Question 1

An administrator configures a VPN gateway with eBGP for dynamic route exchange. After setup, routes are not advertised to the remote peer. Which configuration is most likely missing?

Options :

A : DHCP options for assigning IP addresses to remote endpoints.

B : ASN configuration for the local gateway to identify its autonomous system.

C : VLAN ID alignment between local and remote networks.

D : Peer IP address required for establishing the BGP session.

Answer: B

Question 2

When configuring an Application policy, an administrator defines a VM Category Application:MySQL as a Secured Entity. The administrator wants to ensure that traffic between VMs in the Secured Entity is kept to only required replication traffic on the default mysql service port. How should the administrator best accomplish this?

Options :

A : Create an Inter-Tier Rule specifying the mysql service as the allowed traffic.

B : Create an Intra-Tier Rule specifying the mysql service as the allowed traffic.

C : Create an Inbound Rule specifying the mysql service as the allowed traffic.

D : Create an Outbound Rule specifying the mysql service as the allowed traffic.

Answer: B

Question 3

An administrator needs to ensure all web traffic (HTTP/HTTPS) from a specific subnet (10.100.20.0) is redirected through a third-party virtual firewall inside the VPC for Layer 7 inspection before reaching the internet. The firewall VM has an IP of 10.100.30.5 and is connected to a different subnet. What should be done to enforce this specific traffic path?

Options :

A : Configure a Policy-Based Route (PBR) on the VPC with a re-route IP 10.100.30.5.

B : Create a FNS policy with an allow rule for the FW IP 10.100.30.5.

C : Move the Firewall VM into the same subnet and set the default GW of the web servers to 10.100.30.5.

D : Create a Network Policy with a high priority with the source 10.100.20.0, destination of 10.100.30.5 on port 80 & 443.

Answer: A

Question 4

Which statement is correct about cloning Application Security Policies?

Options :

A : The system prevents saving the cloned policy if it has the same secured entities as the original.

B : The policy type can be changed while cloning a policy.

C : Only one policy can be cloned at a time.

D : The default name of the cloned policy must be manually entered; the system does not provide a default.

Answer: B

Question 5

An administrator needs to configure a security policy that controls VM-to-VM communication within a category defined as secured entity. Which configuration action should the administrator take to restrict all intra-tier communication between the VMs within a category defined as secured entity?

Options :

A : Apply the policy with inbound rules that block all inter-VM communication.

B : Configure the security policy with allow-all intra-tier traffic.

C : Set the security policy to allow-specific traffic for intra-tier communication.

D : Use deny-all intra-tier traffic configuration in the policy.

Answer: D