What needs to be configured if the NAT property ‘Translate destination on client side’ is not enabled in Global properties?

1. A. A host route to route to the destination IP
2. B. Use the file local.arp to add the ARP entries for NAT to work
3. C. Nothing, the Gateway takes care of all details necessary
4. D. Enabling ‘Allow bi-directional NAT’ for NAT to work correctly

Correct Answer: C

What is the BEST method to deploy Identity Awareness for roaming users?

1. A. Use Office Mode
2. B. Use identity agents
3. C. Share user identities between gateways
4. D. Use captive portal

Correct Answer: B
Using Endpoint Identity Agents give you:

Which deployment adds a Security Gateway to an existing environment without changing IP routing?

1. A. Distributed
2. B. Bridge Mode
3. C. Remote
4. D. Standalone

Correct Answer: B

If the Active Security Management Server fails or if it becomes necessary to change the Active to Standby, the following steps must be taken to prevent data loss. Providing the Active Security Management Server is responsible, which of these steps should NOT be performed:

1. A. Rename the hostname of the Standby member to match exactly the hostname of the Active member.
2. B. Change the Standby Security Management Server to Active.
3. C. Change the Active Security Management Server to Standby.
4. D. Manually synchronize the Active and Standby Security Management Servers.

Correct Answer: A

Which information is included in the “Extended Log” tracking option, but is not included in the “Log” tracking option?

1. A. file attributes
2. B. application information
3. C. destination port
4. D. data type information

Correct Answer: B