quiz 6

Question 1

Select True or False. Logging on intrazone-default and interzone-default Security policy rules is enabled by default.
Select one:

a. True

b. False

Answer 1

False

Question 2

NGFW QoS policies can be configured to apply:
Select one:

a. either preferential treatment or bandwidth-limiting traffic rules

b. third party authentication

c. forwarding for anti-virus screening

d. data encryption

Answer 2

either preferential treatment or bandwidth-limiting traffic rules

Question 3

When defining Security policy rules, why should you consider only the c2s flow direction, and define policy rules that allow or deny traffic from the source zone to the destination zone, that is, in the c2s direction?
Select one:

a. The return c2s flow does not require a separate rule because communications are automatically allowed.

b. For traffic that does not match any custom defined rules, all communications are conducted in a separate traffic buffer

c. Default rules are predefined to allow all interzone traffic (between zones) and deny all intrazone traffic (within a zone).

d. The return s2c flow does not require a separate rule because the return traffic automatically is allowed

Answer 3

The return s2c flow does not require a separate rule because the return traffic automatically is allowed

Question 4

Which of the following are NOT traffic attributes or criteria that can be defined in a Security policy rule?
Select one:

a. URL Catgegory

b. Source / Destination zones

c. Traffic that does not pass through the firewall data plane

d. Source user

Answer 4

Traffic that does not pass through the firewall data plane

Question 5

Select True or False. Security policy rules on the Next Generation firewall specify a source and a destination interface.
Select one:

a. True

b. False

Answer 5

True

Question 6

Traffic going to a public IP address is being translated by a Next Generation firewall to an internal server private IP address. Which IP address should the security policy use as the destination IP in order to allow traffic to the server?
Select one:

a. The server private IP

b. The firewall Management port IP

c. The firewall gateway IP

d. The server public IP

Answer 6

The server public IP

Question 7

Which action in a Security policy rule results in traffic being silently rejected?
Select one:

a. Reset Server

b. Deny

c. Reset Client

d. Drop

Answer 7

Reset Server

Question 8

Which NGFW security policy rule applies to all matching traffic within the specified source zones?
Select one:

a. Intrazone

b. Universal

c. Interzone

d. Default

Answer 8

Universal

Question 9

Which type of Security policy rule is the default rule type?
Select one:

a. Intrazone

b. Universal

c. Interzone

d. Default

Answer 9

Interzone