156-310

Front 1

Which of the following statements about IKE Encryption are TRUE?

Back 1

-The final packet size is increased after it is encrypted.
-TCP and IP headers are encrypted, along with the payload.
-IKE uses in-place encryption.

Front 2

When upgrading a configuration to NG with Application Intelligence: (Choose the FALSE answer)

Back 2

- Copy $FWDIR/state from one version of VPN-1/FireWall-1 to another version of VPN-1/FireWall-1.

Front 3

When you upgrade VPN-1/FireWall-1, what components are carried over to the new version? (Choose
two)

Back 3

- Licenses
-VPN-1/FireWall-1 database

Front 4

Which of the following is NOT a function of the Internal Certificate Authority (ICA)?

Back 4

-Generated certificates for HTTPS Web server.

Front 5

Which of the following FTP Content Security settings prevents internal users from sending corporate
files to external FTP Servers, while allowing users to retrieve files?

Back 5

-Use an FTP resource and enable the GET method.

Front 6

All of the following are steps for implementing UFP

Back 6

-The client invokes a connection through the VPN-1/FireWall-1 Enforcement Module.
-The Content Server inspects the URLs and returns the validation result message to the Enforcement Module.
- The Enforcement Module takes the action defined in the Rule Base for the resource.
-The Security Server uses UFP to send the URL to a third-party UFP Server categorization.

Front 7

All of the following are steps for implementing UFP

Back 7

-The client invokes a connection through the VPN-1/FireWall-1 Enforcement Module.
-The Content Server inspects the URLs and returns the validation result message to the Enforcement Module.
- The Enforcement Module takes the action defined in the Rule Base for the resource.
-The Security Server uses UFP to send the URL to a third-party UFP Server categorization.