Online Access Free FCNSP.v5 Exam Questions

The following ban list entry is displayed through the CLI.
get user ban list
id cause src-ip-addr dst-ip-addr expires created
531 protect_client 10.177.0.21 207.1.17.1 indefinite Wed Dec 24 :21:33 2008
Based on this command output, which of the following statements is correct?

• A.A DLP rule has been matched.
• B.An attack has been repeated more than once during the holddown period; the expiry time has been reset to indefinite.
• C.This diagnostic entry results from the administrator running the diag ips log test command. This command has no effect on traffic.
• D.The administrator has specified the Attack and Victim Address method for the quarantine.

Review the CLI configuration below for an IPS sensor and identify the correct statements regarding this configuration from the choices below. (Select all that apply.)
config ips sensor edit "LINUX_SERVER" set comment '' set replacemsg-group '' set log enable config entries edit 1 set action default set application all set location server set log enable set log-packet enable set os Linux set protocol all set quarantine none set severity all set status default next end next
end

• A.The sensor will match all traffic from the address object 'LINUX_SERVER'.
• B.The sensor will log all server attacks for all operating systems.
• C.The sensor will include a PCAP file with a trace of the matching packets in the log message of any matched signature.
• D.The sensor will reset all connections that match these signatures.
• E.The sensor only filters which IPS signatures to apply to the selected firewall policy.

Identify the statement which correctly describes the output of the following command:
diagnose ips anomaly list

• A.Lists the configured DoS policy.
• B.List the real-time counters for the configured DoS policy.
• C.Lists the errors captured when compiling the DoS policy.

In which of the following report templates would you configure the charts to be included in the report?

• A.Schedule Template
• B.Layout Template
• C.Data Filter Template
• D.Output Template

Review the IKE debug output for IPsec shown in the Exhibit below.

Which one of the following statements is correct regarding this output?

• A.The output captures the Dead Gateway Detection packets.
• B.The output is a Phase 1 negotiation.
• C.The output is a Phase 2 negotiation.
• D.The output captures the Dead Peer Detection messages.