In Threat Prevention, you can create new or clone profiles but you CANNOT change the out-of-the-box profiles of:

• A.Basic, Optimized, Strict
• B.Basic, Optimized, Severe
• C.General, Escalation, Severe
• D.General, purposed, Strict

Comment: *

Name: *

Email: *

Verification: *

You have created a rule at the top of your Rule Base to permit Guest Wireless access to the Internet. However, when guest users attempt to reach the Internet, they are not seeing the splash page to accept your Terms of Service, and cannot access the Internet. How can you fix this?

• A.Right click Accept in the rule, select "More", and then check 'Enable Identity Captive Portal'.
• B.In the Captive Portal screen of Global Properties, check 'Enable Identity Captive Portal'.
• C.On the firewall object, Legacy Authentication screen, check 'Enable Identity Captive Portal'.
• D.On the Security Management Server object, check the box 'Identity Logging'.

Comment: *

Name: *

Email: *

Verification: *

Why is a Central License the preferred and recommended method of licensing?

• A.Central Licensing actually not supported with Gaia.
• B.Central Licensing is the only option when deploying Gala.
• C.Central Licensing ties to the IP address of the management server and is not dependent on the IP of any gateway in the event it changes.
• D.Central Licensing ties to the IP address of a gateway and can be changed to any gateway if needed.

Comment: *

Name: *

Email: *

Verification: *

How do you enable virtual mac (VMAC) on-the-fly on a cluster member?

• A.cphaprob set int fwha_vmac_global_param_enabled 1
• B.clusterXL set int fwha_vmac_global_param_enabled 1
• C.fw ctl set int fwha_vmac_global_param_enabled 1
• D.cphaconf set int fwha_vmac_global_param_enabled 1

Comment: *

Name: *

Email: *

Verification: *

If SecureXL is disabled which path is used to process traffic?

• A.Passive path
• B.Medium path
• C.Firewall path
• D.Accelerated path

Comment: *

Name: *

Email: *

Verification: *