4.1 Troubleshoot Misconfigurations Across All Management and On-Box Options NETWORK-SECURITY-ANALYST Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A network admin recently changed the management interface profile on a firewall from 'Ping' to 'HTTPS' only. Now they cannot SSH into the firewall from their workstation, although they can still reach the web interface. The admin's workstation is on a subnet that is explicitly permitted in the management interface access list. What is the most likely cause of the SSH failure?

   • AThe 'Ping' service was removed, and SSH was never enabled in the management interface profile.
   • BThe admin's workstation IP address is not in the management interface's permitted source list.
   • CThe management interface access list was inadvertently removed when the profile was changed.
   • DThe firewall's dataplane is blocking SSH traffic due to a security policy rule.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   A firewall is configured with a service route for DNS that points to an unreachable server. What is the most likely impact on firewall operation?

   • AThe firewall will fail to resolve domain names for features such as URL filtering and dynamic updates.
   • BThe firewall will reboot automatically to recover from the misconfiguration.
   • CThe firewall will disable all security policies until DNS is reachable.
   • DThe firewall will drop all traffic destined to the DNS server's IP.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   An administrator is troubleshooting why they cannot SSH to the firewall's management plane. Which initial step should they take to isolate the issue?

   • AReboot the firewall to reset the management plane.
   • BVerify that the management interface IP is reachable from the administrator's workstation.
   • CReview the security policy logs for denied SSH traffic.
   • DCheck the dataplane interface statistics for errors.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   An administrator wants to verify the current configuration of the management interface using the CLI. Which command should they use?

   • Ashow system info
   • Bshow running config
   • Cshow session all
   • Dshow interface management
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   An administrator is comparing the intended configuration with the actual running configuration. Which tool or method is most effective for this comparison?

   • ACheck the firewall's system logs for configuration changes.
   • BExport the running configuration and compare it with the intended configuration file using a diff tool.
   • CUse the GUI to manually review each setting.
   • DReboot the firewall and observe if the configuration changes.
   Reveal Solution Discussion Select an answer first