Question 1

Which statement is true regarding NAT rules?

Options :

A : Static NAT rules have precedence over other forms of NAT.

B : Translation of the IP address and port occurs before security processing.

C : NAT rules are processed in order from top to bottom.

D : Firewall supports NAT on Layer 3 interfaces only.

Answer: C

Question 2

Given the network diagram, traffic should be permitted for both Trusted and Guest users to accessgeneral Internet and DMZ servers using SSH. web-browsing and SSL applicationsWhich policy achieves the desired results?

Options :

A :

B :

C :

D :

Answer: C

Question 3

Which two security profile types can be attached to a security policy? (Choose two.)

Options :

A : antivirus

B : DDoS protection

C : threat

D : vulnerability

Answer: A,D

Question 4

Which type of administrator account cannot be used to authenticate user traffic flowing through thefirewallsdata plane?

Options :

A : Kerberos user

B : SAML user

C : local database user

D : local user

Answer: B

Question 5

What does an administrator use to validate whether a session is matching an expected NAT policy?

Options :

A : system log

B : test command

C : threat log

D : config audit

Answer: B