Question 1.
A ScreenOS firewall has the correct interfaces addressed and active. A policy is written allowing interzone FTP traffic from a directly connected client. But the traffic does not cross the firewall  from the client to the server. 

What is the most likely problem with the firewall?

A. The ScreenOS firewall has no physical connection to the FTP server.
B. The ALG option on the ScreenOS firewall has not been enabled for FTP traffic.
C. The ScreenOS firewall does not have a route defined to the FTP servers' subnet.
D. The ScreenOS firewall does not have a route defined to the FTP clients subnet.

Answer:  C

Question 2.
In the exhibit:
 
Why is the packet dropped?

A. interface down
B. route not configured
C. policy not configured
D. denied by policy 1005

Answer:  C

Question 3.
Which three options allow proper configuration of NAT-dst? (Choose three.)

A. the default address book entry of "any" in the internal zone
B. the default address book entry of "any" in the external zone
C. a secondary address on one of the interfaces in the internal zone
D. an address book entry for the address to be translated in the internal zone
E. a static route to the appropriate subnet using a private interface as the outbound interface

Answer:  C, D, E

Question 4.
Which two statements are true in regards to a ScreenOS firewall in transparent mode? (Choose two.)

A. VPNs can terminate to the VLAN1 interface IP address.
B. Static routes must be configured if multiple virtual routers are going to be used.
C. It can be installed in a network without the requirement to reconfigure IP addressing schemes.
D. You must use the console port to manage the device as you cannot manage the device using 
    an Ethernet port.

Answer:  A, C 

Question 5.
What are three major concerns when sending private data over a public medium? (Choose three.)

A. integrity
B. authority
C. capacity
D. confidentiality
E. authentication

Answer:  A, D, E

Question 6.
By default, from which hardware component is the startup copy of the ScreenOS loaded?

A. NVRAM
B. TFTP server
C. internal flash
D. PCMCIA card

Answer:  C

Question 7.
Which three must a policy contain? (Choose three.)

A. action
B. service
C. address
D. application
E. policy name

Answer:  A, B, C

Question 8.
What is the default mode for an interface in the trust zone?

A. NAT
B. route
C. Layer 2
D. Layer 3
E. transparent

Answer:  A

Question 9.
Which command is used to verify IKE Phase 1 is complete?

A. get sa active
B. get ike active
C. get ike cookie
D. get flow active

Answer:  C

Question 10.
When managing a ScreenOS device using the WebUI and performing an image upgrade, from which hardware component will the ScreenOS image be loaded?

A. TFTP server
B. PC local disk
C. internal flash
D. Compact Flash Card

Answer:  B

	Web www.certsbraindumps.com