Question 1

True or False: In a Distributed Environment, a Central License can be installed via CLI on a Security Gateway

Options :

A : True, CLI is the prefer method for Licensing

B : False, Central License are handled via Security Management Server

C : False, Central License are installed via Gaia on Security Gateways

D : True, Central License can be installed with CPLIC command on a Security Gateway

Answer: D

Question 2

Which of the following is NOT a method used by Identity Awareness for acquiring identity?

Options :

A : RADIUS

B : Active Directory Query

C : Cloud IdP (Identity Provider)

D : Certificates

Answer: C

Question 3

Which of the following log queries would show only dropped packets with source address of 192.168.1.1 and destination address of 172.26.1.1?

Options :

A : src:192.168.1.1 OR dst:172.26.1.1 AND action:Drop

B : src:192.168.1.1 AND dst:172.26.1.1 AND action:Drop

C : 192.168.1.1 AND 172.26.1.1 AND drop

D : 192.168.1.1 OR 172.26.1.1 AND action:Drop

Answer: B

Question 4

What is the BEST method to deploy Identity Awareness for roaming users?

Options :

A : Use Office Mode

B : Use identity agents

C : Share user identities between gateways

D : Use captive portal

Answer: B

Question 5

Fill in the blanks: The _____ collects logs and sends them to the _____.

Options :

A : Log server; Security Gateway

B : Security Gateways; log server

C : Log server; security management server

D : Security management server; Security Gateway

Answer: B

Higher Test Marks with Free Online 156-215.81.20 Exam Practice