An administrator is configuring SSL decryption and needs 10 ensure that all certificates for both SSL Inbound inspection and SSL Forward Proxy are installed properly on the firewall. When certificates are being imported to the firewall for these purposes, which three certificates require a private key? (Choose three.)

• A.Forward Untrust certificate
• B.Forward Trust certificate
• C.Enterprise Root CA certificate
• D.End-entity (leaf) certificate
• E.Intermediate certificate(s)

Comment: *

Name: *

Email: *

Verification: *

A firewall should be advertising the static route 10.2.0.0/24 Into OSPF. The configuration on the neighbor is correct, but the route is not in the neighbor's routing table.
Which two configurations should you check on the firewall? (Choose two.)

• A.Within the redistribution profile ensure that Redist is selected.
• B.In the redistribution profile check that the source type is set to "ospf."
• C.In the OSFP configuration, ensure that the correct redistribution profile is selected in the OSPF Export Rules section.
• D.Ensure that the OSPF neighbor state Is "2-Way."

Comment: *

Name: *

Email: *

Verification: *

An engineer is configuring Packet Buffer Protection on ingress zones to protect from single-session DoS attacks Which sessions does Packet Buffer Protection apply to?

• A.It applies to new sessions and is not global
• B.It applies to existing sessions and is not global
• C.It applies to existing sessions and is global
• D.It applies to new sessions and is global

Comment: *

Name: *

Email: *

Verification: *

An administrator discovers that a file blocked by the WildFire inline ML feature on the firewall is a false-positive action. How can the administrator create an exception for this particular file?

• A.Disable the WildFire profile on the related Security policy.
• B.Add the related Threat ID in the Signature exceptions tab of the Antivirus profile.
• C.Set the WildFire inline ML action to allow for that protocol on the Antivirus profile.
• D.Add partial hash and filename in the file section of the WildFire inline ML tab of the Antivirus profile.

Comment: *

Name: *

Email: *

Verification: *

Refer to the diagram. Users at an internal system want to ssh to the SSH server The server is configured to respond only to the ssh requests coming from IP 172.16.16.1.
In order to reach the SSH server only from the Trust zone, which Security rule and NAT rule must be configured on the firewall?

A)

B)

C)

D)

• A.Option D
• B.Option B
• C.Option C
• D.Option A

Comment: *

Name: *

Email: *

Verification: *