NEW QUESTION 1
You have created a rule at the top of your Rule Base to permit Guest Wireless access to the Internet. However, when guest users attempt to reach the Internet, they are not seeing the splash page to accept your Terms of Service, and cannot access the Internet. How can you fix this?

• A. Right click Accept in the rule, select “More”, and then check ‘Enable Identity Captive Portal’.
• B. On the firewall object, Legacy Authentication screen, check ‘Enable Identity Captive Portal’.
• C. In the Captive Portal screen of Global Properties, check ‘Enable Identity Captive Portal’.
• D. On the Security Management Server object, check the box ‘Identity Logging’.

Answer: A

NEW QUESTION 2
Which of the following blades is NOT subscription-based and therefore does not have to be renewed on a regular basis?

• A. Application Control
• B. Threat Emulation
• C. Anti-Virus
• D. Advanced Networking Blade

Answer: B

NEW QUESTION 3
What command verifies that the API server is responding?

• A. api stat
• B. api status
• C. show api_status
• D. app_get_status

Answer: B

NEW QUESTION 4
The Security Gateway is installed on GAIA R80. The default port for the Web User Interface is ______.

• A. TCP 18211
• B. TCP 257
• C. TCP 4433
• D. TCP 443

Answer: D

NEW QUESTION 5
When Identity Awareness is enabled, which identity source(s) is(are) used for Application Control?

• A. RADIUS
• B. Remote Access and RADIUS
• C. AD Query
• D. AD Query and Browser-based Authentication

Answer: D

Explanation:
Identity Awareness gets identities from these acquisition sources:

NEW QUESTION 6
Ken wants to obtain a configuration lock from other administrator on R80 Security Management Server. He can do this via WebUI or via CLI.
Which command should he use in CLI? (Choose the correct answer.)

• A. remove database lock
• B. The database feature has one command lock database override.
• C. override database lock
• D. The database feature has two commands lock database override and unlock databas
• E. Both will work.

Answer: D

NEW QUESTION 7
SandBlast agent extends 0 day prevention to what part of the network?

• A. Web Browsers and user devices
• B. DMZ server
• C. Cloud
• D. Email servers

Answer: A

NEW QUESTION 8
What is the purpose of the CPCA process?

• A. Monitoring the status of processes.
• B. Sending and receiving logs.
• C. Communication between GUI clients and the SmartCenter server.
• D. Generating and modifying certificates.

Answer: D

NEW QUESTION 9
To enable Dynamic Dispatch on Security Gateway without the Firewall Priority Queues, run the following command in Expert mode and reboot:

• A. fw ctl Dyn_Dispatch on
• B. fw ctl Dyn_Dispatch enable
• C. fw ctl multik set_mode 4
• D. fw ctl multik set_mode 1

Answer: C

NEW QUESTION 10
How can SmartView application accessed?

• A. http://<Security Management IP Address>/smartview
• B. http://<Security Management IP Address>:4434/smartview/
• C. https://<Security Management IP Address>/smartview/
• D. https://<Security Management host name>:4434/smartview/

Answer: C

NEW QUESTION 11
Fill in the blank: The tool _______ generates a R80 Security Gateway configuration report.

• A. infoCP
• B. infoview
• C. cpinfo
• D. fw cpinfo

Answer: C

NEW QUESTION 12
You have a Gateway is running with 2 cores. You plan to add a second gateway to build a cluster and used a device with 4 cores.
How many cores can be used in a Cluster for Firewall-kernel on the new device?

• A. 3
• B. 2
• C. 1
• D. 4

Answer: D

NEW QUESTION 13
Which command shows actual allowed connections in state table?

• A. fw tab –t StateTable
• B. fw tab –t connections
• C. fw tab –t connection
• D. fw tab connections

Answer: B

NEW QUESTION 14
Which of these is an implicit MEP option?

• A. Primary-backup
• B. Source address based
• C. Round robin
• D. Load Sharing

Answer: A

NEW QUESTION 15
The _______ software blade package uses CPU-level and OS-level sandboxing in order to detect and block malware.

• A. Next Generation Threat Prevention
• B. Next Generation Threat Emulation
• C. Next Generation Threat Extraction
• D. Next Generation Firewall

Answer: B

NEW QUESTION 16
When requiring certificates for mobile devices, make sure the authentication method is set to one of the following, Username and Password, RADIUS or _____.

• A. SecureID
• B. SecurID
• C. Complexity
• D. TacAcs

Answer: B

NEW QUESTION 17
......