Novell Internet Security Management with BorderManager 3.5: Enterprise Edition.

Transcription

1 Novell Internet Security Management with BorderManager 3.5: Enterprise Edition

2 QUESTION: 165 When using NAT, which ICMP packet types are prevented from reaching your private network? (Choose two) A. Packet Type 3 (Destination Unreachable) B. Packet Type 5 (Redirect) C. Packet Type 8 (Echo) D. Packet Type 9 (Router Advertisement) E. Packet Type 15 (Information Request) Answer: B, D QUESTION: 166 Proxy acceleration is also known as which type of proxy? A. Reverse proxy B. Application proxy C. HTTP transparent proxy D. Telnet transparent proxy Answer: A QUESTION: 167 Where can you read filters and exceptions that have been enabled? (Choose two.) A. Text file B. BDRCFG C. FILTCFG D. INETCFG E. MONITOR Answer: A, C QUESTION:

3 What must you first perform to monitor the implementation of your access rules? A. View the error log. B. Enable rule hit logging. C. View the accounting log. D. View the access control log. Answer: B QUESTION: 169 Which is a benefit of using application proxy? A. Improved response time for Web access requests. B. Reduced response time for client requests, and limited fault tolerance. C. Increased speed and security without the time and administrative expense of configuring each user's browser. D. More control over the traffic related to caching than any other type of proxy cache. Answer: C QUESTION: 170 Which utility would you run to test routes to specific IP destinations? A. PING B. IPCON C. TCPCON D. IPTRACE Answer: D QUESTION: 171 Which statements are true regarding multihoming in a NAT environment? (Choose two.) 69

4 A. It only works with NAT in dynamic mode. B. It requires multiple network interface boards. C. It allows one web server to appear as several web servers. D. It allows one IP address to be connected with several DNS names. E. It allows a server to have more than one IP address per interface. Answer: C, E QUESTION: 172 Which statements are true regarding proxy authentication? (Choose two.) A. If you are running SSL, it is not required to run CLNTRUST on workstations. B. If you are using IP addresses in your rules, rather than NDS names, you must run CLNTRUST. C. If both single sign on and SSL are selected, proxy services tries to authenticate users with SSL first. D. If authentication is not working properly, make sure DWNTRUST is running in the workstation where you are authenticating from. E. If both single sign on and SSL are selected, proxy services tries to authenticate users with SSL if it can't authenticate using single sign on. Answer: A, E QUESTION: 173 Where must the command be placed when adding secondary IP addresses for a web server in the AUTOEXEC.NCF file? A. The last line of the file B. Anywhere after the server name C. After INITSYS and before NSWeb loads D. After the BINDING statement and before the INITSYS E. After the server name and before loading the network board Answer: C QUESTION:

5 What does the command SET NAT DYNAMIC MODE TO PASS THRU = ON accomplish? A. Enables Dynamic Mode. B. Prevents SNMP traffic C. Disables NAT implicit filtering D. Allows NAT to support DNS queries E. Allows access for all ICMP packet types. Answer: C QUESTION: 175 CORRECT TEXT There are 3 NLMs that can be used to set up packet filtering on a BoarderManager server. Name 1. Answer: FILTCFG QUESTION: 176 Which tasks are performed while setting up a Virtual Private Network (VPN)? (Choose 3.) A. Dynamic routing for IPX and IP is disabled. B. The master server administrator chooses a master server for the VPN. C. The master server administrator generates encryption information for the master server. D. FILTCFG is used to prevent all private routes from being advertised through the public interfaces. E. The network administrator for each slave server provides the master server administrator with the encryption information for their respective slave servers. Answer: B, C, E QUESTION: 177 CORRECT TEXT BoarderManager has been installed. You need to configure remote access services 71

6 using PPP. Enter the command that launches the appropriate utility. Answer: NIASCFG QUESTION: 178 When enabling proxy authentication and using single sign on, which executable must be run on all workstations where users will be accessing BoarderManager services? A. PROXY.EXE B. CPFILTER.EXE C. CP_SETUP.EXE D. CLNTRUST.EXE E. DWNTRUST.EXE Answer: D QUESTION: 179 You are setting up BoarderManager access rules. Which statements are true regarding the Deny access mode? (Choose 2.) A. If proxy authentication is enabled, you can configure NDS users or groups to be allowed or denied access. B. After rules are enforced, all traffic to and from the proxy server is allowed, except traffic specifically denied by an access control rule. C. After rules are enforced, all traffic to and from the proxy server is denied, except traffic specifically permitted by an access control rule. D. When Deny is the default access mode, all traffic to and from the proxy server is denied until you select the Enforce Rules option from the server's BoarderManager Setup page. E. When Allow is the default access mode, all traffic to and from the proxy server is denied until you select the Enforce Rules option from the server's BoarderManager Setup page. Answer: A, C 72

7 For More exams visit Kill your exam at First Attempt...Guaranteed!