F50-506 Online Practice Questions and Answers

Which two statements are true about the NAPT option when using a Network Access connection to FirePass? (Choose 2)

A. When enabled, NAPT translates the client source address to the FirePass Address.

B. When enabled, NAPT translates the FirePass virtual Address to the Server Address.

C. On the 600, The NAPT option is used when connecting to the Network Access feature.

D. On the 600, the NAPT option is used when connecting to the SSL VPN Client feature, and translates the client source address to the Server Address.

E. When disabled, NAPT translates the FirePass virtual Address to the real Server Address.

Which three settings can be configured for a Network Access connection? (Choose 3)

A. Client SSL Certificates.

B. Split Tunneling.

C. Gateway for Network Access connection.

D. DNS Server for Network Access connection.

E. FQDN for attached client machine for Network Access connection.

F. IP Address pool for client source address.

What are two valid Source and Destination IP Address combinations as a Network packet traverses the FirePass Server for an established Network Access connection?

Client machine IP Address - 216.34.94.17 VPN Pool Address range - 104.21.47.0 / 24 FirePass Interface Addresses - External 110.121.32.10, Internal 205.229.151.10 Application Server Address

205.229.151.20 NAPT - Off - disabled

For a Network Access connection of Client to Server, the Network Packet address combination at the _____ and _____ is: (Choose 2)

A. Client and FirePass is: Source 216.34.94.17 Destination 110.121.32.10

B. Client and FirePass is: Source 216.34.94.17 Destination 205.229.151.20

C. FirePass and Server is: Source 216.34.94.17 Destination 205.229.151.20

D. Client and FirePass is: Source 104.21.47.12 Destination 110.121.32.10

E. FirePass and Server is: Source 104.21.47.12 Destination 205.229.151.20

F. FirePass and Server is: Source 205.229.151.10 Destination 205.229.151.20

Which statement is true concerning Network connections to a FirePass 600 Controller? (Choose 1)

A. FirePass can connect users to a remote network using another vendor's IPSec Gateway.

B. FirePass can connect users to a remote network using another vendor's SSL VPN Gateway.

C. Remote clients can connect to an internal network through FirePass with an IPSec connection using FirePass client software.

D. Remote clients can connect to an internal network through FirePass with a Network Access connection using FirePass client software.

E. Remote clients can connect to an internal network through FirePass with an SSL VPN connection using other vendors client software.

Network Access connections can be made to which three types of clients? (Choose 3)

A. Clients running Linux.

B. Palm PDA's with browser access.

C. WAP cell phones with browser access.

D. Clients running Windows.

E. Clients running MAC OSX.

F. Clients running MAC OS9.

Which three statements are true concerning the Network Access client download process? (Choose 3)

A. The user cannot un-install the Network Access client software.

B. For Windows clients Network Access installs a new connection document.

C. For IE browsers on Windows clients, a set of ActiveX controls are installed on the client machine.

D. For Linux and MAC OSX clients, a specific client component is self-installed and self-configured for each platform.

E. For all clients, a Java client is installed on the client machine regardless of client OS.

From which sources can users be Imported to FirePass 600? (Choose 2)

A. Radius Server.

B. VASCO Server.

C. Active Directory.

D. Windows Domain Server.

E. UNIX style password file.

Which two statements are true about FirePass 600 Signup templates? (Choose 2)

A. Network Access users must use Signup templates to logon to FirePass.

B. Adding Users to FirePass can be automated by using Signup templates.

C. Signup templates only work for Users authenticated by an External Server.

D. Users can use Signup templates to add additional Client support.

E. Signup templates only work for groups Authenticated by the FirePass internal database.

From which of the following places can a FirePass Admin Console kill a users connection?

A. Admin Console / Reports / Users.

B. Admin Console / Reports / Sessions.

C. Admin Console / Reports / Connections.

D. Admin Console / Device Management / Security / Sessions.

E. Admin Console / Device Management / Security / Connections.

F. Maintenance Console / Restart and Shutdown / User Connections.

With the conditions below set for Network Access policy checks, along with the following clientscenario, what will be the result? (Choose 2)

Policy Checks - Processes to be present - mcshield (McAfee AntiVirus process), Operating system service packs - win2k and svcpk4 or winxp and svcpk1, Custom Messages - Connection Established message set to "Connected to Company Network". Check for Processes Failed message set to "Incorrect or Faulty Virus Program Installed". Client configuration - Windows 2000 Service Pack 5, Norton Antivirus installed but not McAfee.

A. Client will not be able to use Network Access.

B. Client will be able to logon to FirePass only after un-installing Windows Service Pack 5.

C. Client will be able to use Network Access but will receive message Check for Processes Failed on login screen.

D. Client will receive the message Incorrect or Faulty Virus Program Installed when Network Access option is selected.

E. After un-installing Norton AntiVirus, client will be able to logon to FirePass and will receive message Connected to Company Network when Network Access option is selected.

Which two are valid methods to limit access to the FirePass 600 Admin Console? (Choose 2)

A. Limit to SSH.

B. Limit by IP Subnet.

C. Limit by individual IP Address.

D. Limit to Serial Console.

E. Limit by MAC Address.

F. Limit by FirePass Ethernet port.

How many Ethernet ports does a FirePass Controller have? (Choose 3)

A. A FirePass 1000 has 2 Network ports.

B. A FirePass 1000 has 3 Network ports.

C. A FirePass 600 has 2 Network ports.

D. A FirePass 4000 has 6 Network ports.

E. A FirePass 4100 has 5 Network ports.

F. A FirePass 4100 has 10 Network ports.

How many concurrent users can a FirePass Controller Support? (Choose 3)

A. A standalone FirePass 1000 can support 100 users.

B. A standalone FirePass 1000 can support 250 users.

C. A standalone FirePass 4100 can support 1000 users.

D. A standalone FirePass 4100 can support 2500 users.

E. A cluster of FirePass 600's can support 250 users.

F. A standalone FirePass 600 can support 25 users.

Which three statements are true about the options available from the FirePass maintenance console? (Choose 3)

A. It can be used to shutdown and restart the FirePass Controller.

B. It can be used to reset the FirePass Controller to factory defaults.

C. It can be used to add Administrator userids to the FirePass Controller.

D. It can be used to set Administrator passwords for the FirePass Controller.

E. It can be used for Network Diagnostics such as ping, netstat and IP Address settings.

Which two statements are true about FirePass 600 Administrators? (Choose 2)

A. SuperUser logons to FirePass do not need to be Authenticated externally to FirePass.

B. All FirePass Administrators can access the FirePass user console.

C. All FirePass Administrators can access the FirePass user console except the SuperUser.

D. FirePass Administrators with the correct rights can change any FirePass user's password.

E. The FirePass SuperUser can only change FirePass internally Authenticated user's passwords.