[100% Real] Most Hottest 117-201 Dumps PDF Covers All Key Points
Passed Lpi 117-201 Dumps on first attempt only using the Pass4itsure and one corrected answers.Thanks a lot for your valuable update reagding 117-201 premium dump.It will definitely help me for preparing for the exam before to write.
Exam Code: 117-201
Exam Name: LPI level 2 Exam 201
Updated: Jun 16, 2017
Q&As: 202
Exam Information: https://www.pass4itsure.com/117-201.html
Lpi Exam Pass4itsure 117-201 Dumps Blog Series:
QUESTION 35
If you change the inspection order of any of the Implied rules under Security Policy of the Properties Setup, does it change the orders of the rules set up in the Policy Editor?
A. Yes
B. No, the Clean-Up Rule is always last.
Correct Answer: A
QUESTION 36
One of the most important task are firewall administrator perform is log maintenance. When selecting File>New from the Log Viewer, the firewall:
A. Purge the current log file and starts a new log.
B. Replicates the current log file named the saved file by date and time, and start a new log.
C. Save the current log file, named the saved by date and time, and start a new log.
D. Prompt the administrator for the named to saved the current log as, and then starts a new log.
E. Place a date-time stamp in the current log to allow are "new" sort.
117-201 exam Correct Answer: C
QUESTION 37
When stating fwpolicy, what information is needed to log on the FireWall-1? (Select the response below that list necessary information)
A. User Name, Password
B. Password, Management Server
C. User Name, Password, Management Server
D. Password, Management Server, Authentication Server
E. User Name, Password, Management Server, Authentication Server
Correct Answer: C
QUESTION 38
Which VPN-1/FireWall-1 GUI program would you use to add a NAT rule?
A. Policy Editor
B. Log Viewer
C. System Status
D. Real Time Monitor
E. None of the above.
117-201 dumps Correct Answer: A
QUESTION 39
When applying a Rule Base to the interface of the firewall in an Inbound direction, which of the following is TRUE?
A. Properties enforces on outgoing packets.
B. Logging is disabled.
C. The numbered rule base and policy properties are enforced on incoming packets.
D. The numbered rule base and properties are enforced an outing packets.
E. Spoof checking is disabled.
Correct Answer: C
QUESTION 40
The system administrator grants special privilege to certain users, regardless of IP address. Which listed below includes the most valid list of services for User Authentications?
A. FTP, HTTP, POP3
B. FTP, HTTP, RLOGIN
C. FTP, POP3, RLOGIN
D. HTTP, POP3, RLOGIN
E. FTP, HTTP, POP3, RLOGIN B.
117-201 pdf Correct Answer: B
QUESTION 41
NAT can be implemented on which of the following lists of objects?
A. Workstations, Networks
B. Workstations, Users
C. Networks, Users
D. Domain Networks
E. Services, Workstations, Networks, Users
Correct Answer: A
QUESTION 42
If the rules are checked Inbound on the firewall, no traffic from the Internal Net is inspected.
A. True
B. False
117-201 vce Correct Answer: B
QUESTION 43
When you create a services group, you must incorporate Services of the same protocols type or that use the same transfer protocol.
A. True
B. False
Correct Answer: B
QUESTION 44
Consider the following Rule Base for VPN-1/Firewall-1:
No. Source Destination Service Action Track 1 Any Web server http Accept Long 2 Any Any Any Drop
Long Assuming the default settings in the policy properties have not been changed ICMP would be
allowed though the firewall.
A. True
B. False
117-201 dumps Correct Answer: B
QUESTION 45
By Default, more than one firewall administrator have a time may log into the Policy Editor with Read/Write permission.
A. True
B. False
Correct Answer: B
QUESTION 46
As a firewall administrator, if you want a log of packets dropped by "implicit drop anything not covered" rules. You must explicitly define a "Clean-Up" rule. Thus must be the last rule in the Rule Base.
A. True
B. False
117-201 exam Correct Answer: A
QUESTION 47
As a VPN-1/FireWall-1 administrator, you have a group of contiguous IP addresses for which you want to perform address translation. You can simplify your effort through the use of ADDRESS RANGES.
A. True
B. False
Correct Answer: A
QUESTION 48
Why would you want to mask a rule?
A. Useful for viewing a few rules, without being distracted by other rules.
B. To prevent conflicts between rules and to test rules.
C. To negate a rule.
D. To block an intruder.
117-201 vce Correct Answer: A
QUESTION 49
In what order are policies and rules matched?
A. Basic Rules, Security Policy's first rule, IP Spoofing
B. Security Policy's first rule, Basic Rules, IP Spoofing
C. IP Spoofing, Security Policy's first rule, Basic Rules
D. IP Spoofing, Basic Rules, Security Policy's first rule
Correct Answer: C
QUESTION 50
When defining an RPC service, what happens if the program number is omitted? If resolution fails, an error message is issued and installation will continue.
A. Firewall-1 will attempt to resolve the program number when the rule base is installed. If resolution fails, an error message is issued and installation will fails.
B. Firewall-1 will attempt to resolve the program number when the rule base is installed.
C. Any rules with the service defined will be disabled and installation will continue.
D. Any rules with the service defined will be disabled and installation will fail.
117-201 pdf Correct Answer: A
QUESTION 51
What are internal authentication schemes?
A. S/KEY
B. RADIUS
C. Firewall-1 Password
D. TACACS
E. OS Password
F. AXENT
Correct Answer: ACE
QUESTION 52
Firewall-1 uses which three types of authentication?
A. User
B. Inband
C. Client
D. Source
E. Session
F. Transparent
117-201 dumps Correct Answer: ACE
QUESTION 53
What is true regarding saving a log file in Log Viewer?
A. The current log entries will be written to file.
Only the records that match the selection criteria will be saved to the file.
B. The current log entries will be written to file. All records will be saved.
C. All entries will be appended to the previous log file called fw.log.
D. The current log entries will be written to file. Entries that are not visible in the window will not be saved.
Correct Answer: A
QUESTION 54
A default rule is added to the end of every rule base. What is this rule?
A. The explicit drop rule.
B. The implicit drop rule.
C. The policy drop rule.
D. The pseudo drop rule.
117-201 vce Correct Answer: B
QUESTION 55
If you wish to check incoming or outgoing traffic for viruses, do you require 3rd party virus software?
A. No, this can be implemented in the enterprise module.
B. Yes, but the software has to be installed on the Firewall.
C. Yes, but the software has to be installed on the management server.
D. Yes, specify the CVC server in the action tab of the URI definition.
Correct Answer: D
Most Hottest 117-201 Dumps Practice Exam, Real https://www.pass4itsure.com/117-201.html 117-201 Dumps PDF Covers All Key Points, Pass LPI level 2 Exam 201.
Exam Code: 117-201
Exam Name: LPI level 2 Exam 201
Updated: Jun 16, 2017
Q&As: 202
Exam Information: https://www.pass4itsure.com/117-201.html
QUESTION 35
If you change the inspection order of any of the Implied rules under Security Policy of the Properties Setup, does it change the orders of the rules set up in the Policy Editor?
A. Yes
B. No, the Clean-Up Rule is always last.
Correct Answer: A
QUESTION 36
One of the most important task are firewall administrator perform is log maintenance. When selecting File>New from the Log Viewer, the firewall:
A. Purge the current log file and starts a new log.
B. Replicates the current log file named the saved file by date and time, and start a new log.
C. Save the current log file, named the saved by date and time, and start a new log.
D. Prompt the administrator for the named to saved the current log as, and then starts a new log.
E. Place a date-time stamp in the current log to allow are "new" sort.
117-201 exam Correct Answer: C
QUESTION 37
When stating fwpolicy, what information is needed to log on the FireWall-1? (Select the response below that list necessary information)
A. User Name, Password
B. Password, Management Server
C. User Name, Password, Management Server
D. Password, Management Server, Authentication Server
E. User Name, Password, Management Server, Authentication Server
Correct Answer: C
QUESTION 38
Which VPN-1/FireWall-1 GUI program would you use to add a NAT rule?
A. Policy Editor
B. Log Viewer
C. System Status
D. Real Time Monitor
E. None of the above.
117-201 dumps Correct Answer: A
QUESTION 39
When applying a Rule Base to the interface of the firewall in an Inbound direction, which of the following is TRUE?
A. Properties enforces on outgoing packets.
B. Logging is disabled.
C. The numbered rule base and policy properties are enforced on incoming packets.
D. The numbered rule base and properties are enforced an outing packets.
E. Spoof checking is disabled.
Correct Answer: C
QUESTION 40
The system administrator grants special privilege to certain users, regardless of IP address. Which listed below includes the most valid list of services for User Authentications?
A. FTP, HTTP, POP3
B. FTP, HTTP, RLOGIN
C. FTP, POP3, RLOGIN
D. HTTP, POP3, RLOGIN
E. FTP, HTTP, POP3, RLOGIN B.
117-201 pdf Correct Answer: B
QUESTION 41
NAT can be implemented on which of the following lists of objects?
A. Workstations, Networks
B. Workstations, Users
C. Networks, Users
D. Domain Networks
E. Services, Workstations, Networks, Users
Correct Answer: A
QUESTION 42
If the rules are checked Inbound on the firewall, no traffic from the Internal Net is inspected.
A. True
B. False
117-201 vce Correct Answer: B
QUESTION 43
When you create a services group, you must incorporate Services of the same protocols type or that use the same transfer protocol.
A. True
B. False
Correct Answer: B
QUESTION 44
Consider the following Rule Base for VPN-1/Firewall-1:
No. Source Destination Service Action Track 1 Any Web server http Accept Long 2 Any Any Any Drop
Long Assuming the default settings in the policy properties have not been changed ICMP would be
allowed though the firewall.
A. True
B. False
117-201 dumps Correct Answer: B
QUESTION 45
By Default, more than one firewall administrator have a time may log into the Policy Editor with Read/Write permission.
A. True
B. False
Correct Answer: B
QUESTION 46
As a firewall administrator, if you want a log of packets dropped by "implicit drop anything not covered" rules. You must explicitly define a "Clean-Up" rule. Thus must be the last rule in the Rule Base.
A. True
B. False
117-201 exam Correct Answer: A
QUESTION 47
As a VPN-1/FireWall-1 administrator, you have a group of contiguous IP addresses for which you want to perform address translation. You can simplify your effort through the use of ADDRESS RANGES.
A. True
B. False
Correct Answer: A
QUESTION 48
Why would you want to mask a rule?
A. Useful for viewing a few rules, without being distracted by other rules.
B. To prevent conflicts between rules and to test rules.
C. To negate a rule.
D. To block an intruder.
117-201 vce Correct Answer: A
QUESTION 49
In what order are policies and rules matched?
A. Basic Rules, Security Policy's first rule, IP Spoofing
B. Security Policy's first rule, Basic Rules, IP Spoofing
C. IP Spoofing, Security Policy's first rule, Basic Rules
D. IP Spoofing, Basic Rules, Security Policy's first rule
Correct Answer: C
QUESTION 50
When defining an RPC service, what happens if the program number is omitted? If resolution fails, an error message is issued and installation will continue.
A. Firewall-1 will attempt to resolve the program number when the rule base is installed. If resolution fails, an error message is issued and installation will fails.
B. Firewall-1 will attempt to resolve the program number when the rule base is installed.
C. Any rules with the service defined will be disabled and installation will continue.
D. Any rules with the service defined will be disabled and installation will fail.
117-201 pdf Correct Answer: A
QUESTION 51
What are internal authentication schemes?
A. S/KEY
B. RADIUS
C. Firewall-1 Password
D. TACACS
E. OS Password
F. AXENT
Correct Answer: ACE
QUESTION 52
Firewall-1 uses which three types of authentication?
A. User
B. Inband
C. Client
D. Source
E. Session
F. Transparent
117-201 dumps Correct Answer: ACE
QUESTION 53
What is true regarding saving a log file in Log Viewer?
A. The current log entries will be written to file.
Only the records that match the selection criteria will be saved to the file.
B. The current log entries will be written to file. All records will be saved.
C. All entries will be appended to the previous log file called fw.log.
D. The current log entries will be written to file. Entries that are not visible in the window will not be saved.
Correct Answer: A
QUESTION 54
A default rule is added to the end of every rule base. What is this rule?
A. The explicit drop rule.
B. The implicit drop rule.
C. The policy drop rule.
D. The pseudo drop rule.
117-201 vce Correct Answer: B
QUESTION 55
If you wish to check incoming or outgoing traffic for viruses, do you require 3rd party virus software?
A. No, this can be implemented in the enterprise module.
B. Yes, but the software has to be installed on the Firewall.
C. Yes, but the software has to be installed on the management server.
D. Yes, specify the CVC server in the action tab of the URI definition.
Correct Answer: D
Most Hottest 117-201 Dumps Practice Exam, Real https://www.pass4itsure.com/117-201.html 117-201 Dumps PDF Covers All Key Points, Pass LPI level 2 Exam 201.
Comments
Post a Comment