156-215.80 Study Guides 2021

NEW QUESTION 1
Kofi, the administrator of the ABC Corp network wishes to change the default Gaia WebUI Portal port number currently set on the default HTTPS port. Which CLISH commands are required to be able to change this TCP port?

• A. set web ssl-port <new port number>
• B. set Gaia-portal <new port number>
• C. set Gaia-portal https-port <new port number>
• D. set web https-port <new port number>

Answer: A

Explanation: In Clish
Connect to command line on Security Gateway / each
Log in to Clish.
Set the desired port (e.g., port 4434):
Cluster member.
HostName> set web ssl-port <Port_Number>
Save the changes:
HostName> save config
Verify that the configuration was saved:
[Expert@HostName]# grep 'httpd:ssl_port' /config/db/initial References:

NEW QUESTION 2
As a Security Administrator, you must refresh the Client Authentication authorized time-out every time a new user connection is authorized. How do you do this? Enable the Refreshable Timeout setting:

• A. in the user object's Authentication screen.
• B. in the Gateway object's Authentication screen.
• C. in the Limit tab of the Client Authentication Action Properties screen.
• D. in the Global Properties Authentication screen.

Answer: C

NEW QUESTION 3
Two administrators Dave and Jon both manage R80 Management as administrators for ABC Corp. Jon logged into the R80 Management and then shortly after Dave logged in to the same server. They are both in the Security Policies view. From the screenshots below, why does Dave not have the rule no.6 in his SmartConsole view even though Jon has it his in his SmartConsole view?

• A. Jon is currently editing rule no.6 but has Published part of his changes.
• B. Dave is currently editing rule no.6 and has marked this rule for deletion.
• C. Dave is currently editing rule no.6 and has deleted it from his Rule Base.
• D. Jon is currently editing rule no.6 but has not yet Published his changes.

Answer: D

Explanation: When an administrator logs in to the Security Management Server through SmartConsole, a new editing session starts. The changes that the administrator makes during the session are only available to that administrator. Other administrators see a lock icon on object and rules that are being edited. To make changes available to all administrators, and to unlock the objects and rules that are being edited, the administrator must publish the session.

NEW QUESTION 4
Using mgmt_cli, what is the correct syntax to import a host object called Server_1 from the CLI?

• A. mgmt_cli add-host “Server_1” ip_address “10.15.123.10” --format txt
• B. mgmt_cli add host name “Server_1” ip_address “10.15.123.10” --format json
• C. mgmt_cli add object-host “Server_1” ip_address “10.15.123.10” --format json
• D. mgmt_cli add object “Server_1” ip_address “10.15.123.10” --format json

Answer: A

NEW QUESTION 5
In which VPN community is a satellite VPN gateway not allowed to create a VPN tunnel with another satellite VPN gateway?

• A. Pentagon
• B. Combined
• C. Meshed
• D. Star

Answer: D

Explanation: VPN communities are based on Star and Mesh topologies. In a Mesh community, there are VPN connections between each Security Gateway. In a Star community, satellites have a VPN connection with the center Security Gateway, but not to each other.

NEW QUESTION 6
WeBControl Layer has been set up using the settings in the following dialogue:

Consider the following policy and select the BEST answer.

• A. Traffic that does not match any rule in the subpolicy is dropped.
• B. All employees can access only Youtube and Vimeo.
• C. Access to Youtube and Vimeo is allowed only once a day.
• D. Anyone from internal network can access the internet, expect the traffic defined in drop rules 5.2, 5.5 and 5.6.

Answer: D

Explanation: Policy Layers and Sub-Policies
R80 introduces the concept of layers and sub-policies, allowing you to segment your policy according to your network segments or business units/functions. In addition, you can also assign granular privileges by layer or sub-policy to distribute workload and tasks to the most qualified administrators
With layers, the rule base is organized into a set of security rules. These set of rules or layers, are inspected in the order in which they are defined, allowing control over the rule base flow and the security functionalities that take precedence. If an “accept” action is performed across a layer, the inspection will continue to the next layer. For example, a compliance layer can be created to overlay across a cross-section of rules.
Sub-policies are sets of rules that are created for a specific network segment, branch office or business unit, so if a rule is matched, inspection will continue through this subset of rules before it moves on to the next rule.
Sub-policies and layers can be managed by specific administrators, according to their permissions profiles. This facilitates task delegation and workload distribution.

NEW QUESTION 7
What protocol is specifically used for clustered environments?

• A. Clustered Protocol
• B. Synchronized Cluster Protocol
• C. Control Cluster Protocol
• D. Cluster Control Protocol

Answer: D

NEW QUESTION 8
Message digests use which of the following?

• A. DES and RC4
• B. IDEA and RC4
• C. SSL and MD4
• D. SHA-1 and MD5

Answer: D

NEW QUESTION 9
You are unable to login to SmartDashboard. You log into the management server and run #cpwd_admin list with the following output:

What reason could possibly BEST explain why you are unable to connect to SmartDashboard?

• A. CDP is down
• B. SVR is down
• C. FWM is down
• D. CPSM is down

Answer: C

Explanation: The correct answer would be FWM (is the process making available communication between SmartConsole applications and Security Management Server.). STATE is T (Terminate = Down)
Symptoms
SmartDashboard fails to connect to the Security Management server.
Verify if the FWM process is running. To do this, run the command:
[Expert@HostName:0]# ps -aux | grep fwm
If the FWM process is not running, then try force-starting the process with the following command: [Expert@HostName:0]# cpwd_admin start -name FWM -path "$FWDIR/bin/fwm" -command "fwm" [Expert@HostName:0]# ps -aux | grep fwm
[Expert@HostName:0]# cpwd_admin start -name FWM -path "$FWDIR/bin/fwm" -command "fwm"

NEW QUESTION 10
Fill in the blank: To build an effective Security Policy, use a _____ and _____ rule.

• A. Cleanup; stealth
• B. Stealth; implicit
• C. Cleanup; default
• D. Implicit; explicit

Answer: A

NEW QUESTION 11
NAT can NOT be configured on which of the following objects?

• A. HTTP Logical Server
• B. Gateway
• C. Address Range
• D. Host

Answer: A

NEW QUESTION 12
Which VPN routing option uses VPN routing for every connection a satellite gateway handles?

• A. To satellites through center only
• B. To center only
• C. To center and to other satellites through center
• D. To center, or through the center to other satellites, to internet and other VPN targets

Answer: D

Explanation: On the VPN Routing page, enable the VPN routing for satellites section, by selecting one of these options:
To center and to other Satellites through center; this allows connectivity between Gateways; for example, if the spoke Gateways are DAIP Gateways, and the hub is a Gateway with a static IP address
To center, or through the center to other satellites, to Internet and other VPN targets; this allows connectivity between the Gateways, as well as the ability to inspect all communication passing through the hub to the Internet.

NEW QUESTION 13
You are using SmartView Tracker to troubleshoot NAT entries. Which column do you check to view the NAT'd source port if you are using Source NAT?

• A. XlateDst
• B. XlateSPort
• C. XlateDPort
• D. XlateSrc

Answer: B

NEW QUESTION 14
Fill in the blank: The command _____ provides the most complete restoration of a R80 configuration.

• A. upgrade_import
• B. cpconfig
• C. fwm dbimport -p <export file>
• D. cpinfo -recover

Answer: A

Explanation: (Should be "migrate import")
"migrate import" Restores backed up configuration for R80 version, in previous versions the command was " upgrade_import ".

NEW QUESTION 15
Which of the following is NOT an attribute of packer acceleration?

• A. Source address
• B. Protocol
• C. Destination port
• D. Application Awareness

Answer: D

NEW QUESTION 16
Which of the following is NOT a license activation method?

• A. SmartConsole Wizard
• B. Online Activation
• C. License Activation Wizard
• D. Offline Activation

Answer: A

NEW QUESTION 17
When launching SmartDashboard, what information is required to log into R77?

• A. User Name, Management Server IP, certificate fingerprint file
• B. User Name, Password, Management Server IP
• C. Password, Management Server IP
• D. Password, Management Server IP, LDAP Server IP

Answer: B