[Q319-Q337] Free Sample Questions to Practice 156-315.81 Certification Test Engine [Mar-2023]

NEW QUESTION 319
Packet acceleration (SecureXL) identities connections by several attributes. Which of the attributes is NOT used for identifying connection?

Source Port

TCP Acknowledgment Number

Source Address

Destination Address

NEW QUESTION 320
What needs to be configured if the NAT property ‘Translate destination or client side’ is not enabled in Global Properties?

A host route to route to the destination IP.

Use the file local.arp to add the ARP entries for NAT to work.

Nothing, the Gateway takes care of all details necessary.

Enabling ‘Allow bi-directional NAT’ for NAT to work correctly.

NEW QUESTION 321
Which of these is an implicit MEP option?

Primary-backup

Source address based

Round robin

Load Sharing

NEW QUESTION 322
SandBlast agent extends 0 day prevention to what part of the network?

Web Browsers and user devices

DMZ server

Cloud

Email servers

NEW QUESTION 323
You need to change the MAC-address on eth2 interface of the gateway. What command and what mode will you use to achieve this goal?

set interface eth2 mac-addr 11:11:11:11:11:11; CLISH

ifconfig eth1 hw 11:11:11:11:11:11; expert

set interface eth2 hw-addr 11:11:11:11:11:11; CLISH

ethtool -i eth2 mac 11:11:11:11:11:11; expert

NEW QUESTION 324
With Mobile Access enabled, administrators select the web-based and native applications that can be accessed by remote users and define the actions that users can perform the applications. Mobile Access encrypts all traffic using:

HTTPS for web-based applications and 3DES or RC4 algorithm for native applications. For end users to access the native applications, they need to install the SSL Network Extender.

HTTPS for web-based applications and AES or RSA algorithm for native applications. For end users to access the native application, they need to install the SSL Network Extender.

HTTPS for web-based applications and 3DES or RC4 algorithm for native applications. For end users to access the native applications, no additional software is required.

HTTPS for web-based applications and AES or RSA algorithm for native applications. For end users to access the native application, no additional software is required.

NEW QUESTION 325
The WebUI offers several methods for downloading hotfixes via CPUSE except:

Automatic

Force override

Manually

Scheduled

NEW QUESTION 326
Ken wants to obtain a configuration lock from other administrator on R81 Security Management Server. He can do this via WebUI or via CLI.
Which command should he use in CLI? (Choose the correct answer.)

remove database lock

The database feature has one command lock database override.

override database lock

The database feature has two commands lock database override and unlock database. Both will work.

NEW QUESTION 327
Fill in the blank: __________ information is included in “Full Log” tracking option, but is not included in “Log” tracking option?

Destination port

Data type

File attributes

Application

NEW QUESTION 328
Which features are only supported with R81.10 Gateways but not R77.x?

Access Control policy unifies the Firewall, Application Control & URL Filtering, Data Awareness, and Mobile Access Software Blade policies.

Limits the upload and download throughput for streaming media in the company to 1 Gbps.

The rule base can be built of layers, each containing a set of the security rules. Layers are inspected in the order in which they are defined, allowing control over the rule base flow and which security functionalities take precedence.

Time object to a rule to make the rule active only during specified times.

NEW QUESTION 329
What are the modes of SandBlast Threat Emulation deployment?

Cloud, Smart-1 and Hybrid

Cloud. OpenServer and Vmware

Cloud, Appliance and Private

Cloud, Appliance and Hybrid

NEW QUESTION 330
SSL Network Extender (SNX) is a thin SSL VPN on-demand client that is installed on the remote user’s machine via the web browser. What are the two modes of SNX?

Application and Client Service

Network and Application

Network and Layers

Virtual Adapter and Mobile App

NEW QUESTION 331
What is required for a certificate-based VPN tunnel between two gateways with separate management systems?

Mutually Trusted Certificate Authorities

Shared User Certificates

Shared Secret Passwords

Unique Passwords

NEW QUESTION 332
Which of the following is NOT an alert option?

SNMP

High alert

Mail

User defined alert

NEW QUESTION 333
Capsule Connect and Capsule Workspace both offer secured connection for remote users who are using their mobile devices. However, there are differences between the two.
Which of the following statements correctly identify each product’s capabilities?

Workspace supports ios operating system, Android, and WP8, whereas Connect supports ios operating system and Android only

For compliance/host checking, Workspace offers the MDM cooperative enforcement, whereas Connect offers both jailbreak/root detection and MDM cooperative enforcement.

For credential protection, Connect uses One-time Password login support and has no SSO support, whereas Workspace offers both One-Time Password and certain SSO login support.

Workspace can support any application, whereas Connect has a limited number of application types which it will support.

NEW QUESTION 334
Which method below is NOT one of the ways to communicate using the Management API’s?

Typing API commands using the “mgmt_cli” command

Typing API commands from a dialog box inside the SmartConsole GUI application

Typing API commands using Gaia’s secure shell(clish)19+

Sending API commands over an http connection using web-services

NEW QUESTION 335
If the Active Security Management Server fails or if it becomes necessary to change the Active to Standby, the following steps must be taken to prevent data loss. Providing the Active Security Management Server is responsive, which if these steps should NOT be performed:

Rename the hostname of the Standby member to match exactly the hostname of the Active member.

Change the Standby Security Management Server to Active.

Change the Active Security Management Server to Standby.

Manually synchronize the Active and Standby Security Management Servers.

NEW QUESTION 336
When using CPSTAT, what is the default port used by the AMON server?

18191

18192

18194

18190

NEW QUESTION 337
What is the correct command to observe the Sync traffic in a VRRP environment?

fw monitor -e “accept[12:4,b]=224.0.0.18;”

fw monitor -e “accept port(6118;”