VNX326 Practice Tests - Versa Security Specialist

Prévia do material em texto

Download Valid VNX326 PDF Questions with Answers to Study
1 / 4
Exam : VNX326
Title :
https://www.passcert.com/VNX326.html
Versa Certified Administrator
- Security Specialist
Download Valid VNX326 PDF Questions with Answers to Study
2 / 4
1.After upgrading to the latest Security Package (SPack), you observe that the VOS device is still not
detecting certain new applications mentioned in the SPack release notes.
How would you solve this problem?
A. Reboot the VOS device to load the new application signatures.
B. Manually download and install the latest OS Security Package (OS SPack) and reboot the VOS device.
C. Manually install the application identification library updates and restart services on the VOS device.
D. Enable cloud lookup to help identify the application.
Answer: B
2.You have discovered a newly identified vulnerability on the Versa Analytics software.
In this scenario, which two steps should be taken? (Choose two.)
A. Upgrade the Security Package (SPack) on Analytics.
B. Upgrade the software release on Analytics.
C. Upgrade the OA Security Package (OS SPack) on Analytics.
D. Configure Advanced Threat Protection (ATP) on Analytics.
Answer: BC
3.Which two functions does a VOS device support in an 802.1x environment? (Choose two.)
A. 802.1x authentication control
B. supplicant
C. authenticator
D. authenticator server
Answer: BC
4.A security audit team asks you to disable the graphical user interface (GUI) of the Versa controllers
deployed in your data centers. In this scenario, what should you do?
A. Disable the UI of the Versa controller from Versa Director.
B. Disable the eth0 interface on the Versa controller.
C. fun secure mode with the disable ~nodejs~ option.
D. Ask for a business case exception from the security team since Versa controllers need the UI for
operation.
Answer: C
5.Which two types of security hardening are accomplished when running secure mode on VOS software?
(Choose two.)
A. Implement a password policy for the shell user.
B. Disable shell users.
C. Use SSH options.
D. Implement a password policy for the CLI user.
Answer: AC
6.You want to ensure that your internal network traffic is regularly inspected for unusual events or trends
in network activity. In this scenario, which VOS security component should be used?
A. antivirus
Download Valid VNX326 PDF Questions with Answers to Study
3 / 4
B. IP filtering
C. Intrusion Detection and Prevention (IDP)
D. DHCP snooping
Answer: C
7.You need to request a certificate for the VOS decryption feature from your company’s IT department for
a VOS branch. The company-issued laptops have the IT root certificate already preinstalled.
In this scenario, which type of certificate should you request from the IT department?
A. a client certificate signed by the enterprise CA
B. an intermediate CA certificate
C. a codesigning certificate
D. an SSL certificate
Answer: B
8.Which two statements are true about DoS protection in a stateful firewall policy? (Choose two.)
A. DoS protection can protect and deny scanning activities in a network.
B. DoS protection is used against SYN-based TCP attacks.
C. DoS protection uses L3/L4/L7 properties for protection
D. DoS protection uses L3/L4 properties for protection only.
Answer: BD
9.You are asked to protect against attacks originated from the internal LAN.
Which three actions would help to achieve the first level of defense in this scenario? (Choose three.)
A. Derive a baseline for different types of traffic passing through the device, before configuring the zone
protection’s flood threshold values.
B. Enable the appropriate “Packet based Attack Protection” fields on the zone protection profiles.
C. Configure the zone protection profiles with the flood settings enabled and the map to all the WAN
zones.
D. Enable DoS profiles for all LAN interfaces.
E. Enable alerting of network scan activities to get notified in Analytics.
Answer: ABE
10.You must apply security policies to allow secure Web traffic towards a hosted Web server from specific
countries.
In this scenario, which statement is correct?
A. You cannot achieve this task using the stateful firewall service: you need to upgrade to Next
Generation Firewall services.
B. You can configure a stateful firewall to identify secure Web traffic using predefined services but you
cannot select IP addresses from the source countries.
C. You can select IP addresses from specific countries from the source address list. But you cannot select
secure Web traffic.
D. You can select IP addresses from specific countries using the source address list and then select the
secure Web traffic from predefined services.
Answer: D
Download Valid VNX326 PDF Questions with Answers to Study
4 / 4
11.Your organization needs protection from ICMP fragmentation attacks.
In this scenario, which feature must be configured?
A. Intrusion Detection System (IDS)
B. Zone Protection profile
C. DoS policy
D. URL filtering policy
Answer: B
12.You are asked to protect Web servers at a LAN site from volumetric attacks. The requirements include
the ability to perform protection based on the destination address of the attacks.
How would you accomplish this task?
A. Configure a NextGen firewall application filter.
B. Configure and apply a zone protection profile.
C. Configure and apply a DoS protection profile
D. Configure a class of service filter.
Answer: C
13.What is the effect of a security rule that matches traffic on the ptvi destination zone?
A. All DIA traffic s matched by this security rule.
B. All control plane traffic is matched by this rule.
C. All LAN traffic is matched by this rule.
D. All SD-WAN traffic going to a remote branch matched by this rule.
Answer: B
14.Review the exhibit.
Referring to the exhibit, which statement is true about the NAT configuration on the hub VOS device?
A. The session is initiated from a remote SD-WAN branch.
B. The session has invalid port numbers and will fail.
C. The session is a destination NAT session to an internal server.
D. The NAT process is looking for sessions to default port numbers.
Answer: C