Which application should Mary use to view Security Administrator activity?
Mary is the IT auditor for a bank. One of her responsibilities is reviewing the Security Administrator activity and comparing it to the change log. Which application should Mary use to view Security Administrator activity?
When you use the Global Properties’ default settings, which type of traffic will be dropped, if no expli
When you use the Global Properties’ default settings, which type of traffic will be dropped, if no explicit rule allows the traffic?
Does Mary’s proposed solution meet the required and desired results?
Mary is recently hired as the Security Administrator for a public relations company. Mary’s manager has asked her to investigate ways to improve the performance of the firm’s perimeter Security Gateway. Mary must propose a plan based on the following required and desired results:
Required Result #1:Do not purchase new hardware.
Required Result #2:Use configuration changes that do not reduce security.
Desired Result #1:Reduce the number of explicit rules in the Rule Base.
Desired Result #2:Reduce the volume of logs.
Desired Result #3:Improve the Gateway’s performance.
Proposed Solution:
Mary recommends the following changes to the Gateway’s configuration:
?Replace all domain objects with network and group objects.
?Check "Log implied rules" and "Accept ICMP requests" in Global Properties.
?Use Global Properties, instead of explicit rules, to control ICMP, VRRP, and RIP.
Does Mary’s proposed solution meet the required and desired results?
Which of the following is the most likely cause?
Nelson is a consultant. He is at a customer’s site reviewing configuration and logs as part of a security audit. Nelson sees logs accepting POP3 traffic, but he does not see a rule allowing POP3 traffic in the Rule Base. Which of the following is the most likely cause? The POP3:
Which SmartConsole tool should she use to check changes to rules or object properties other administrators mad
Anna is working in a large hospital, together with three other Security Administrators. Which SmartConsole tool should she use to check changes to rules or object properties other administrators made?
Which two SmartConsole applications should Jeremy use, to create his report and outline?
Jeremy manages sites in Tokyo, Calcutta and Dallas, from his office in Chicago. He is trying to create a report for management, detailing the current software level of each Security Gateway. He also wants to create a proposal outline, listing the most cost-effective way to upgrade his Gateways. Which two SmartConsole applications should Jeremy use, to create his report and outline?
Which SmartConsole application will provide David with the information needed to create this map?
David is a consultant for a software-deployment company. David is working at a customer’s site this week. David’s task is to create a map of the customer’s VPN tunnels, including down and destroyed tunnels. Which SmartConsole application will provide David with the information needed to create this map?
How do you view a Security Administrator’s activities, using SmartConsole tools?
How do you view a Security Administrator’s activities, using SmartConsole tools? With:
How do you configure an NGX Security Gateway’s kernel memory settings, without manually modifying the co
How do you configure an NGX Security Gateway’s kernel memory settings, without manually modifying the configuration files in $FWDIRlib? By configuring:
Does Katie’s solution meet the required and desired results?
Katie is the Security Administrator for an insurance company. Her manager gives Katie the following requirements for controlling DNS traffic:
Required Result #1: Accept domain-name-over-TCP traffic (zone-transfer traffic).
Required Result #2: Log domain-name-over-TCP traffic (zone-transfer traffic).
Desired Result #1: Accept domain-name-over-UDP traffic (queries traffic).
Desired Result #2: Do not log domain-name-over-UDP traffic (queries traffic).
Desired Result #3: Do not clutter the Rule Base by creating explicit rules for traffic that can be controlled using Global Properties.
Katie makes the following configuration changes, and installs the Security Policy:
1. She selects the box "Accept Domain Name over TCP (Zone Transfer)" in Global Properties.
2. She selects the box "Accept Domain Name over UDP (Queries)" in Global Properties.
3. She selects the box "Log Implied Rules" in Global Properties.
Does Katie’s solution meet the required and desired results?