156-315.76 Exam Questions

When Load Sharing Multicast mode is defined in a ClusterXL cluster object, how are packets being handled by cluster members?

Which of the following does NOT happen when using Pivot Mode in ClusterXL?

When distributing IPSec packets to gateways in a Load Sharing Multicast mode cluster, which valid Load Sharing method will consider VPN information?

By default, the Cluster Control Protocol (CCP) uses this to send delta sync messages to other cluster members.

To configure the Cluster Control Protocol (CCP) to use Broadcast, the following command is run:

What cluster mode is represented in this case? 1). (local) 172.168.1.1 100$ active 2). 172.14*.1.2 0$ standby

What cluster mode is represented in this case?

Which of the listed load-balancing methods is NOT valid?

Which method of load balancing describes "Round Robin"?

In New Mode HA, the internal cluster IP VIP address is 10.4.8.3. The internal interfaces on two members are 10.4.8.1 and 10.4.8.2. Internal host 10.4.8.108 Pings 10.4.8.3, and rece...

In New Mode HA, the internal cluster IP VIP address is 10.4.8.3. An internal host 10.4.8.108 successfully pings its Cluster and receives replies. Review the ARP table from the inte...

State Synchronization is enabled on both members in a cluster, and the Security Policy is successfully installed. No protocols or services have been unselected for selective sync....

You have two IP Appliances: one IP565 and one IP395. Both appliances have IPSO 6.2 and R76 installed in a distributed deployment. Can they be members of a Gateway Cluster?

You want to upgrade a cluster with two members to VPN-1 NGX. The SmartCenter Server and both members are version VPN-1/Firewall-1 NG FP3, with the latest Hotfix. What is the correc...

Included in the client's network are some switches, which rely on IGMP snooping. You must find a solution to work with these switches. Which of the following answers does NOT lead...

The customer wishes to install a cluster. In his network, there is a switch which is incapable of forwarding multicast. Is it possible to install a cluster in this situation? using...

What could be a reason why synchronization between primary and secondary Security Management Servers does not occur?

What is the proper command for importing users into the R76 User Database?

In a R76 Management High Availability (HA) configuration, you can configure synchronization to occur automatically, when: 1. The Security Policy is installed. 2. The Security Polic...

What is a requirement for setting up R76 Management High Availability?

You are preparing computers for a new ClusterXL deployment. For your cluster, you plan to use three machines with the following configurations: Are these machines correctly configu...

You are preparing computers for a new ClusterXL deployment. For your cluster, you plan to use four machines with the following configurations: Cluster Member 1: OS: SecurePlatform,...

You are establishing a ClusterXL environment, with the following topology: External interfaces 192.168.10.1 and 192.168.10.2 connect to a VLAN switch. The upstream router connects...

What is the reason for the following error?

You find that Gateway fw2 can NOT be added to the cluster object. What are possible reasons for that?

In which ClusterXL Load Sharing mode, does the pivot machine get chosen automatically by ClusterXL?

What configuration change must you make to change an existing ClusterXL cluster object from Multicast to Unicast mode?

In a R76 ClusterXL Load Sharing configuration, which type of ARP related problem can force the use of Unicast Mode (Pivot) configuration due to incompatibility on some adjacent rou...

In Load Sharing Unicast mode, the internal cluster IP address is 10.4.8.3. The internal interfaces on two members are 10.4.8.1 and 10.4.8.2. Internal host 10.4.8.108 Pings 10.4.8.3...

Which of the following commands will stop acceleration on a Security Gateway running on SecurePlatform?

How do new connections get established through a Security Gateway with SecureXL enabled?

Which of the following commands can be used to bind a NIC to a single processor when using a Performance Pack on SecurePlatform?

Review the Rule Base displayed. For which rules will the connection templates be generated in SecureXL?

Your customer asks you about the Performance Pack. You explain to him that a Performance Pack is a software acceleration product which improves the performance of the Security Gate...

Your customer complains of the weak performance of his systems. He has heard that Connection Templates accelerate traffic. How do you explain to the customer about template restric...

Frank is concerned with performance and wants to configure the affinities settings. His gateway does not have the Performance Pack running. What would Frank need to perform in orde...

You are concerned that the processor for your firewall running NGX R71 SecurePlatform may be overloaded. What file would you view to determine the speed of your processor(s)?

Which of the following is NOT a restriction for connection template generation?

In CoreXL, what process is responsible for processing incoming traffic from the network interfaces, securely accelerating authorized packets, and distributing non-accelerated packe...

Due to some recent performance issues, you are asked to add additional processors to your firewall. If you already have CoreXL enabled, how are you able to increase Kernel instance...

Which of the following platforms does NOT support SecureXL?

Which of the following is NOT supported by CoreXL?

If the number of kernel instances for CoreXL shown is 6, how many cores are in the physical machine?

Which of the following is NOT accelerated by SecureXL?

To verify SecureXL statistics you would use the command ________?

How can you disable SecureXL via the command line (it does not need to survive a reboot)?

Which of these is a type of acceleration in SecureXL?

The CoreXL SND (Secure Network Distributor) is responsible for:

How can you verify that SecureXL is running?

Which of the following services will cause SecureXL templates to be disabled?