Question 1

What is considered best practice with regards to committing configuration changes?

Options :

A : Disable the automatic commit feature that prioritizes content database installations before committing

B : Validate configuration changes prior to committing

C : Wait until all running and pending jobs are finished before committing

D : Export configuration after each single configuration change performed

Answer: A

Question 2

What is the default action for the SYN Flood option within the DoS Protection profile?

Options :

A : Alert

B : Random Early Drop

C : Reset-client

D : Sinkhole

Answer: B

Question 3

For the firewall to use Active Directory to authenticate users, which Server Profile is required in the Authentication Profile?

Options :

A : TACACS+

B : RADIUS

C : LDAP

D : SAML

Answer: C

Question 4

A Security Profile can block or allow traffic at which point?

Options :

A : after it is matched to a Security policy rule that allows traffic

B : on either the data plane or the management plane

C : after it is matched to a Security policy rule that allows or blocks traffic

D : before it is matched to a Security policy rule

Answer: A

Question 5

An internal host wants to connect to servers of the internet through using source NAT.Which policy is required to enable source NAT on the firewall?

Options :

A : NAT policy with source zone and destination zone specified

B : post-NAT policy with external source and any destination address

C : NAT policy with no source of destination zone selected

D : pre-NAT policy with external source and any destination address

Answer: A

Higher Test Marks with Free Online NetSec-Analyst Exam Practice