4.1 Troubleshoot Misconfigurations Across All Management and On-Box Options NETWORK-SECURITY-ANALYST Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   An administrator is troubleshooting a dataplane issue where traffic is being dropped unexpectedly. Which command would be most useful to verify the dataplane forwarding path?

   • Ashow system resources
   • Bshow session all
   • Cshow routing table
   • Dshow management-plane statistics
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A firewall admin is troubleshooting a misconfiguration where the management interface is unreachable from the network. The admin has verified that the interface has an IP address and is administratively up. What is the next most logical step in the troubleshooting process?

   • AReview the dataplane security policies for the management interface.
   • BCheck the management interface's service profile and access list.
   • CReplace the management interface cable.
   • DReboot the firewall to reset the management plane.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   An organization has a firewall that is supposed to block all traffic from a specific internal subnet. The admin created a security policy rule to deny this traffic, but users from that subnet can still access the internet. What on-box setting is most likely causing this issue?

   • AThe firewall's routing table is misconfigured, sending traffic around the firewall.
   • BThe firewall's dataplane is not processing the traffic.
   • CThe security policy rule is set to 'Allow' instead of 'Deny'.
   • DThe management interface is configured to allow the subnet.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   A firewall is dropping traffic between two internal subnets. The administrator has verified that the security policy allows the traffic. What is the next step to troubleshoot the dataplane issue?

   • AReboot the firewall to clear any stale sessions.
   • BCheck the management interface access list.
   • CDisable the security policy to test if it is the cause.
   • DCheck the routing table for a route to the destination subnet.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   An administrator is about to correct a misconfiguration on a firewall that is handling production traffic. What should they do before making the change to ensure they can revert if needed?

   • AReboot the firewall to clear any cached configurations.
   • BDisable the firewall's security policies.
   • CSave a backup of the current running configuration.
   • DNotify all users to expect downtime.
   Reveal Solution Discussion Select an answer first