Certified Network Security Consultant Exam Questions PDF download

QUESTION: 11

An administrator pushes a new configuration from panorama to a pair of firewalls that are configured as active/passive HA pair.
Which NGFW receives the configuration from panorama?

the active firewall, which then synchronizes to the passive firewall
the passive firewall, which then synchronizes to the active firewall
both the active and passive firewalls independently, with no synchronization afterward
both the active and passive firewalls, which then synchronizes with each other

Answer(s): D

Reveal Solution Next Question

QUESTION: 12

What is exchanged through the HA2 link?

hello heartbeats
User-ID in information
session synchronization
HA state information

Answer(s): C

Reveal Solution Next Question

QUESTION: 13

A Security policy rule is configured with a Vulnerability Protection Profile and an action of Deny". Which action will this configuration cause on the matched traffic?

The configuration is invalid it will cause the firewall to Skip this Security policy rule A warning will be displayed during a command.
The configuration is valid It will cause the firewall to deny the matched sessions. Any configured Security Profiles have no effect if the Security policy rule action is set to "Deny"
The configuration will allow the matched session unless a vulnerability signature is detected. The "Deny" action will supersede the per. defined, severity defined actions defined in the associated Vulnerability Protection Profile.
The configuration is invalid. The Profile Settings section will be- grayed out when the action is set to "Deny"

Answer(s): C

Reveal Solution Next Question

QUESTION: 14

Which DoS protection mechanism detects and prevents session exhaustion attacks?

TCP Port Scan Protection
Flood Protection
Resource Protection
Pocket Based Attack Protection

Answer(s): C

Reveal Solution Next Question

Refer to the exhibit.

An administrator wants multiple web servers in the DMZ to receive connections from the internet. Traffic destined for 206.15.22.9 port 80/TCP needs to be forwarded to the server at 10 1.22
Based on the information shown in the age, which NAT rule will forward web-browsing traffic correctly?