You are the Security Administrator for MegaCorp. In order to see how efficient your firewall Rule
Base is, you would like to see how often the particular rules match. Where can you see it? Give
the BEST answer.

A company has disabled logging for some of the most commonly used Policy rules. This was to
decrease load on the Security Management Server and to make tracking dropped connections

easier. What action would you recommend to get reliable statistics about the network traffic using
SmartReporter?

What is a Consolidation Policy?

Which feature in R77 permits blocking specific IP addresses for a specified time period?

You find a suspicious FTP site trying to connect to one of your internal hosts. How do you block it
in real time and verify it is successfully blocked? Highlight the suspicious connection in SmartView
Tracker:

Your Security Gateways are running near performance capacity and will get upgraded hardware
next week. Which of the following would be MOST effective for quickly dropping all connections
from a specific attacker’s IP at a peak time of day?

Your company enforces a strict change control policy. Which of the following would be MOST
effective for quickly dropping an attacker’s specific active connection?

______________ is an R77 component that displays the number of packets accepted, rejected,
and dropped on a specific Security Gateway, in real time.

You have just installed your Gateway and want to analyze the packet size distribution of your
traffic with SmartView Monitor.
Unfortunately, you get the message.
“There are no machines that contain Firewall Blade and SmartView Monitor.”
What should you do to analyze the packet size distribution of your traffic? Give the BEST answer.

You want to configure a mail alert for every time the policy is installed to a specific Gateway.
Where would you configure this alert?