Unified Security Policies JN0-232 Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   In a unified security policy, what is the role of match conditions?

   • AThey specify the logging and statistics settings for the policy.
   • BThey determine the action to take when traffic matches the policy.
   • CThey define which traffic the policy applies to, such as source, destination, and application.
   • DThey define the order in which policies are evaluated.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   An administrator has two unified security policies configured between the same zones. Policy 1 permits HTTP traffic, and Policy 2 denies all traffic. The administrator wants HTTP traffic to be denied. What must be done to ensure this happens?

   • APlace Policy 1 before Policy 2 in the policy list.
   • BPlace Policy 2 before Policy 1 in the policy list.
   • CRemove Policy 1 and keep only Policy 2.
   • DChange Policy 1 to deny HTTP traffic.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   What is the effect of the 'reject' action in a unified security policy?

   • AThe traffic is logged and then permitted.
   • BThe traffic is silently dropped without any notification.
   • CThe traffic is dropped and a TCP RST or ICMP unreachable message is sent to the sender.
   • DThe traffic is forwarded to the next policy for evaluation.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   How do you enable logging for a unified security policy?

   • ABy setting 'log' under the policy's 'match' clause.
   • BBy setting 'session-log' under the policy's 'then' clause.
   • CBy enabling 'traceoptions' on the security policy.
   • DBy using the 'set security policies log' command.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   What is the purpose of integrating security services like IDP into a unified security policy?

   • ATo apply intrusion detection and prevention to traffic that matches the policy.
   • BTo automatically block all traffic from unknown applications.
   • CTo provide encryption for traffic passing through the policy.
   • DTo replace the need for antivirus software on endpoints.
   Reveal Solution Discussion Select an answer first