Which of the following inputs is suitable for debugging HTTPS inspection issues?

1. A. fw debug tls on TDERROR_ALL_ALL=5
2. B. fw ctl debug -m fw + conn drop cptls
3. C. vpn debug cptls on
4. D. fw diag debug tls enable

Correct Answer: A

You are seeing output from the previous kernel debug. What command should you use to avoid that?

1. A. fw ctl clean buffer = 0
2. B. fw ctl debug 0
3. C. fw ctl zdebug disable
4. D. fw ctl debug = 0

Correct Answer: B

You found out that $FWDIR/Iog/fw.log is constantly growing in size at a Security Gateway, what is the reason?

1. A. TCP state logging is enabled
2. B. Its not a problem the gateways is logging connections and also sessions
3. C. fw.log can grow when GW does not have space in logging directory
4. D. The GW is logging locally

Correct Answer: B

Troubleshooting issues with Mobile Access requires the following:

1. A. 'ma_vpnd' process on Security Gateway
2. B. Debug logs of FWD captured with the command - ??fw debug fwd on TDERROR_MOBILE_ACCESS=5'
3. C. Standard VPN debugs, packet captures and debugs of cvpnd1 process on Security Gateway
4. D. Standard VPN debugs and packet captures on Security Gateway, debugs of 'cvpnd' process on Security Management

Correct Answer: C

What are the three main component of Identity Awareness?

1. A. Client, SMS and Secure Gateway
2. B. Identity Source Identity Server (POP) and Identity Enforcement (PEP)
3. C. Identity Awareness Blade on Security Gateway, User Database on Security Management Server and Active Directory
4. D. User, Active Directory and Access Role

Correct Answer: B