156-115.80 Online Practice Questions and Answers

Which one of following commands should you run to display HTTPS packet content together with kernel debug?

A. fw ctl get int https_inspection_show_decrypted_data_in_debug=1 fw ctl get int ssl_inspection_extra_debug=1

B. fw set int https_inspection_get_encrypted_data_in_debug 1 fw set int https_inspection_show_debug 1

C. fw ctl set int https_inspection_show_decrypted_data_in_debug 1 fw ctl set int ssl_inspection_extra_debug 1

D. fw ctl set int http_inspection_display_encrypted_data_in_debug=1 fw ctl set int http_inspection_extra_debug=1

When enabling hyper-threading on a Security Gateway, the administrator needs to make sure there is enough _______________ to support additional CoreXL Firewall instances.

A. drive space

B. cpu's

C. available cache

D. available memory

Which of the connections cannot be accelerated with SecureXL?

A. Every NAT'ed connection

B. Every encrypted connection, such as HTTPS or SSH connections

C. Every connection destined to the Security Gateways

D. Every connection through a rule using a time object

Which templates for SecureXL are not enabled by default?

A. All templates are disabled by default

B. Accept and NMR

C. Drop and NAT

D. All templates are enabled by default

Which kernel table stores information about NAT connections?

A. connections

B. tab_nat_conn

C. xlate

D. fwx_alloc

Which command would show the synchronization statistics between cluster members?

A. cphaprob stat

B. fw ctl sync

C. fw ctl pstat

D. cphaprob sync

Which software blade daemon is the core engine that performs the scanning/inspection for DLP?

A. fwdlp

B. ctldpld

C. dlpd

D. dlpu

Which SecureXL table holds IPs that should not be accelerated?

A. f2f_addresses

B. cphwd_psglue_conn_db

C. tcp_f2f_ports

D. udp_f2f_conns

Which command would show you the status of the clustered interfaces as well as the virtual interfaces?

A. cphaprob –i list

B. cphaprob –i if

C. cphaprob –a if

D. cphaprob if stat

How would you disable CPM debug?

A. Run fw debug cpm off TDERROR_ALL_ALL=0

B. Delete $FWDIR/log/tdlog.cpm file

C. Set the severity level to INFO and run cpm_debug.sh –r

D. Delete $FWDIR/log/fwm.elg file