What are some measures you can take to prevent IPS false positives?

• A.Use Recommended IPS profile
• B.Exclude problematic services from being protected by IPS (sip, H.323, etc.)
• C.Use IPS only in Detect mode
• D.Capture packets, Update the IPS database, and Back up custom IPS files

Comment: *

Name: *

Email: *

Verification: *

Select the technology that does the following actions
- provides reassembly via streaming for TCP
- handles packet reordering and congestion
- handles payload overlap
- provides consistent stream of data to protocol parsers

• A.Pre-Protocol Parser
• B.Context Management
• C.fwtcpstream
• D.A Passive Streaming Library

Comment: *

Name: *

Email: *

Verification: *

How would you check the connection status of a gateway to the Log server?

• A.run netstat -anp I grep :18187 in expert mode on Log server
• B.run netstat -anp I grep :257 in expert mode on Log server
• C.run netstat -anp I grep :18187 in CLISH on Log server
• D.run netstat -anp I grep :257 in CLISH on Log server

Comment: *

Name: *

Email: *

Verification: *

The Identity Awareness process that receives identity data from the identity sources and organizes it in tables before forwarding the data to the enforcement module is called

• A.pdp
• B.pep
• C.iaforward
• D.iasend

Comment: *

Name: *

Email: *

Verification: *

What is true concerning fw monitor?

• A.tcpdump syntax can be used in fw monitor for deeper analysis
• B.fw monrtor is available on all management server platforms and the syntax is the same everywhere
• C.fwmonitor has been obsoleted by tcpdump with R80.10
• D.fwmonitor is available on all platforms and even the syntax is the same on all gateways

Comment: *

Name: *

Email: *

Verification: *