Question 1

Review the images.

Other-Image-22afb8b18-285e-4f7b-91c4-1bc831cb0ae5

A firewall policy that permits web traffic includes the

What is the result of traffic that matches the 'Alert - Threats' Profile Match List?

Options :

A : The source address of SMTP traffic that matches a threat is automatically blocked as BadGuys for 180 minutes.

B : The source address of traffic that matches a threat is automatically blocked as BadGuys for 180 minutes.

C : The source address of traffic that matches a threat is automatically tagged as BadGuys for 180 minutes.

D : The source address of SMTP traffic that matches a threat is automatically tagged as BadGuys for 180 minutes.

Answer: C

Question 2

If the firewall has the following link monitoring configuration, what will cause a failover?

Options :

A : ethernet1/3 and ethernet1/6 going down

B : ethernet1/3 going down

C : ethernet1/3 or ethernet1/6 going down

D : ethernet1/6 going down

Answer: A

Question 3

A user at an external system with the IP address 65.124.57.5 queries the DNS server at 4.2.2.2 for the IP address of the web server, www.xyz.com. The DNS server returns an address of 172.16.15.1. In order to reach the web server, which Security rule and NAT rule must be configured on the firewall?

Options :

A :

NAT Rule:

Untrust-L3 (any) - Untrust-L3 (172.16.15.1) Destination Translation: 192.168.15.47

Security Rule:

Untrust-L3 (any) - Trust-L3 (172.16.15.1) - Application: Web-browsing

B :

NAT Rule:

Untrust-L3 (any) - Trust-L3 (172.16.15.1) Destination Translation: 192.168.15.47

Security Rule:

Untrust-L3 (any) - Trust-L3 (192.168.15.47) - Application: Web-browsing

C :

NAT Rule:

Untrust-L3 (any) - Trust-L3 (172.16.15.1) Destination Translation: 192.168.15.47

Security Rule:

Untrust-L3 (any) - Trust-L3 (172.16.15.1) - Application: Web-browsing

D :

NAT Rule:

Untrust-L3 (any) - Untrust-L3 (any) Destination Translation: 192.168.15.1

Security Rule:

Untrust-L3 (any) - Trust-L3 (172.16.15.1) - Application: Web-browsing

Answer: A

Question 4

A client is concerned about web shell attacks against their servers.

Which profile will protect the individual servers?

Options :

A : Anti-Spyware profile

B : Zone Protection profile

C : DoS Protection profile

D : Antivirus profile

Answer: A

Question 5

During SSL decryption, which three factors affect resource consumption? (Choose three.)

Options :

A : key exchange algorithm

B : transaction size

C : TLS protocol version

D : applications ta non-standard ports

E : certificate issuer

Answer: A,B,C

Higher Test Marks with Free Online PCNSE Exam Practice

Buying Options: