|
Question 1.
Which functionality is provided by a NAT address pool with Symantec Enterprise Firewall?
A. port translation
B. port forwarding
C. IP address hiding
D. MAC address hiding
Answer: C
Question 2.
Which three statements are true about Security Gateway Management interface (SGMi)? (Choose three.)
A. it can be used to view active connections.
B. It can be used to configure the security gateway as a DNS server.
C. It pushes configuration data to multiple cluster nodes automatically.
D. It provides centralized logging, alerting and reporting with the Symantec Event Manager for
Security Gateways plug-in
Answer: A, B, C
Question 3.
What is used to upgrade the firmware of a Symantec Gateway Security 300 Series?
A. SSH
B. TFTP
C. SNMP
D. Infrared
E. HTTPS
Answer: B
Question 4.
Which of the following tools is distributed with the Symantec Enterprise Firewall?
A. SYSLOG
B. Remote log
C. TCPDUMP
Answer: C
Question 5.
Which Symantec Gateway Security 300 Series technology provides extended user authentication?
A. LDAP.
B. CHAP
C. Secure ID
D. RADIUS
Answer: D
Question 6.
Which three are supported connection types for the Symantec Gateway Security 300 Series?
A. Dialup
B. PPPoA
C. PPPoE
D. Firewire
E. Ethernet
F. Token Ring
Answer: A, C, E
Question 7.
Your ISP provides a changing IP address. Which feature of Symantec Gateway Security 300 Series allows external connections by name?
A. BIND DNS client
B. BIND DNS server
C. Dynamic DNS client
D. Dynamic DNS server
Answer: C
Question 8.
Your client computer has a static address of 192.168.100.25. You plug your client computer into one of the LAN ports on the Symantec Gateway Security 360, but cannot establish a connection to the appliance's management interface.
Which two configuration settings could you assign to your client to establish a management connection? (Choose two).
A. IP 192.168.0.1
B. IP 192.168.0.123
C. Mask 255.255.255.0
D. Mask 255.255.255.240
Answer: B, C
Question 9.
Which action is performed when the Symantec Gateway Security 300 Series is unable to pass its self check test after a Live Update?
A. It goes into disaster-recovery mode
B. It attempts to restart the interrupt Live Update
C. It defaults to the factory firmware stored in protected memory
D. It becomes unusable until the PROM chip is replaced with a pre-programmed one
Answer: C
Question 10.
What are two characteristics of the Symantec Gateway Security 300 Series content filtering lists?
(Choose two).
A. support wild cards
B. do not support wild cards
C. hold a maximum of 100 entries
D. hold a maximum of 128 entries
Answer: A, C
Question 11.
How does the addition of Live Update to the Symantec Gateway Security 300 Series improve its management capabilities?
A. It keeps virus definitions up-to-date
B. Appliance firmware is easily updated
C. Client Anti Virus software is updated automatically
D. OS patches are automatically distributed throughout your network
E. Firewall rules are automatically downloaded and installed on the device
Answer: B
Question 12.
Which two events will generate Symantec Gateway Security 300 Series SNMP messages? (Choose two).
A. Cold startup
B. Blocked connections
C. SGMI authentication failure
D. Trojan communication attempts
Answer: A, C
Question 13.
What is the recommended method to perform remote management on the Symantec Gateway Security 300 Series?
A. Through a VPN tunnel
B. Form the command line interface
C. Form Internet Explorer 5.5 or greater
D. By providing the admin account with a complex password
Answer: A
Question 14.
How can you configure the security gateway to permit remote management from home in the event when the VPN fails?
The IP addressing for your Symantec Gateway Security 320 is:
LAN:192.168.0.1
WAN:209.195.22.1
Your home IP is: 24.108.33.24
A. Allow remote management from IP range 24.108.33.1 to 24.108.33.32 and connect to
http://209.195.22.1:8080
B. Allow remote management from IP range 24.108.33.0 to 24.108.33.1 and connect to
ghttp://209.195.22.1:8088
C. Allow remote management from IP range 24.108.33.24 to 24.108.33.24 and connect to
http://209.195.22.1:8080
D. Allow remote management from IP range 24.108.33.24 to 24.108.33.24 and connect to
http://209.195.22.1:8088
Answer: D
Question 15.
What is the maximum size of the address pool supported by the Symantec Gateway Security 300 Series DHCP service?
A. 64
B. 125
C. 253
D. 65535
Answer: C
Question 16.
How many LAN ports does the Symantec Gateway Security 320 have?
A. 1
B. 2
C. 4
D. 8
E. 10
Answer: C
Question 17.
You want configure the Symantec Gateway Security 360R to use WAN2 30% of the time. Which three steps must you carry out to achieve this? (Choose three).
A. Set WAN1 port to normal mode
B. Set WAN2 port to normal mode
C. Set WAN1 port to backup mode
D. Set WAN2 port to backup mode
E. Set the percentage of traffic to pass through WAN1 port to 70%
F. Set the percentage of traffic to pass through WAN2 port to 30%
Answer: A, B, E
Question 18.
You manage a Symantec Gateway Security 300 Series for your company. Your company employs a lot of contractors who work for short durations with the company, but who require VPN access. This has resulted in considerable administration on your behalf, updating user account on the appliance, and ensuring that only those contractors who currently require access will have it.
What can you do to simplify this process?
A. Allow only gateway-to-gateway VPN tunnels on the appliance
B. Configure the appliance to update the user account list by importing a CSV listing the currently
authorized users
C. Install a LDAP server on you network and configure the appliance to use the LDAP server to
authenticate VPN connection attempts
D. Install a RADIUS server on your network and configure the appliance to use the RADIUS
server to authenticate VPN connection attempt
Answer: D
Question 19.
Which should you use to configure a rule that applies to any source or any destination when deploying the Symantec Gateway Security 5400 series?
A. Default
B. Universe
C. All subnets
D. 255.255.255.255
Answer: B
Question 20.
Which Symantec Gateway Security 5400 Series model is a 1U form factor?
A. 5420
B. 5421
C. 5440
D. 5441
Answer: A
|
Question 1.
What is the best practice of configuring an intercom on a shared line?
A. This feature allows all endpoints to participate in intercom messages.
B. This feature can be used only when the intercomephone-dn is configured as a dual line
C. This feature is not supported and should not be used
D. This feature can be supported only in a unidirectional manner.
E. This feature allows one endpoint to contact multiple endpoints simultaneously
Answer: C
Question 2.
Using the show ccn trigger command provides the following output:cue-10-0-0# show ccn trigger Name:
6800Type: SIPApplication: voicemailLocale:en_US Idle Timeout: 5000Enabled: yes Maximum number of sessions: 8Name: 6700Type: SIPApplication: autoattendant Locale:en_US Idle Timeout: 5000Enabled: yes
Maximum number of sessions: 8cue-10-0-0#
What two pieces of information can you derive from this output? (Choose two.)
A. The number of ports available is 16
B. The operator can bereachedat extension6800
C. The voice-mail pilot point number is 6800
D. The voice-mail application is enabled.
E. The idle timeout is 5 seconds
Answer: C, D
Question 3.
You work as an administrator at your company. You study the exhibit carefully.
What type of calls can the ephone with extension 2151 make?
Exhibit:
A. No impact on out going calls. However, in coming calls will not be permitted to extension
2151unless cor list is configured on the ephone-dn
B. Only US calls
C. All calls
D. Internal and emergency calls only, because of the defaultcor restriction.
E. None
Answer: C
Question 4.
You work as an administrator at your company. You study the exhibit carefully. A user at Acme Co. reports that when some one leaves a voice-mail message, their MWI does not light up. The administrator has checked the MWI configuration in Cisco Unified Communications Manager Express and found that the MWI On number is 9001 and the MWI Off number is 9000.
Using the trace output from the Cisco Unity Express module, what is the problem?
Exhibit:
A. The MWI On number configuration is incorrect in Cisco Unity Express
B. The CCN subsystem SIP is incorrect in Cisco Unity Express.
C. The MWI Off Number configuration is incorrect in Cisco Unity Express
D. The SIP is misconfigured in Cisco Unified Communications Manager Express
E. The MWI application is not enabled
Answer: A
Question 5.
You work as an administrator at your company. You study the exhibits carefully. This proposed configuration is meant to forward calls to extension 9999 when extension 2001is busy.
Which configuration command will most likely to be edited for this to function properly?
Exhibit #1:
Exhibit #2:
A. max registrations
B. id network mask
C. mailbox
D. voiceregisterpool
Answer: D
Question 6.
You work as an administrator at Your company. You study the exhibit carefully. When two separate calls, FXO and PRI, arrive at the following Cisco Unified Communications Manager Express router, which statement about call behavior is true?
Exhibit:
A. The PRI call matches dial-peer50pots, the FXO call matchesdial-peer123pots, and both calls
succeed.
B. The FXO call matches dial-peer50pots,the PRI call matches dial-peer123pots,andbothcalls
succeed
C. The FXO call matches dial-peer50pots, and the PRI call matchesdial-peer123pots, but both
calls fail due to misconfiguration
D. The FXO call matches dial-peer50pots and succeeds, and the PRI call matchesdial
-peer123pots , but it fails due to a missing port statement.
E. The PRI call matches dial-peer50pots and succeeds, and the FXO call matchesdial-
peer123pots , but it fails due to a missing port statement.
Answer: B
Question 7.
You work as an administrator at Your company. You study the exhibit carefully. When a message is left at extensionephone-dn1, the message is left successfully, however the MWI light does not come on.
Which configuration command resolves this issue?
Exhibit:
A. The command MWI SIP is missing underephone-dn 1.
B. The command MWI SIP is missing under voiceregisterpool 1
C. Must configure two ephone-dns for MWI on andMWI off
D. The command MWI is missing under voice register global
E. The command MWI is missing under ephone-dn1
Answer: A
Question 8.
You work as an administrator at Your company. You study the exhibit carefully. Cisco Unity Express is not registered to a Cisco Unified Messaging Gateway.
What is causing this condition?
Exhibit:
A. Email domains are not on the same subnet.
B. Local location ID should be changed to be "10"
C. Cisco Unified Messaging Gateway location is not defined
D. The messaging- gateway registration command is not configured
E. VoiceView cannot be enabled.
Answer: D
Question 9.
You work as an administrator at Your company. You study the exhibit carefully.
Which command can be used to override all the blocked patterns in the after-hours configuration?
Exhibit:
A. Configure the pin command under theephone command
B. Configure the after- hours exempt and pin commands under theephone-dn command
C. Configure the after- hours exempt command under theephone-dn command
D. Configure thenoafter-hours block pattern command under the ephone command.
Answer: C
Question 10.
Which pre configuration task is necessary for VoiceView Express?
A. Ensure that all phones that are owned by the JTAPI user point to the authentication server
URL on Cisco Unity Express.
B. Ensure that the authentication server URL points to Cisco Unity Express
C. Ensure that all phones point to the authentication server URL owned by Cisco Unity Express
D. Ensure that authentication server is owned by the JTAPI user on Cisco Unity Express
Answer: B
Copyright © 2004 CertsBraindumps.com Inc. All rights reserved.