Online Access Free C2150-620 Exam Questions

The System Administrator of a company has purchased IP Reputation license for a new XGS appliance. After doing the initial setup of XGS, it is registered to SiteProtector (SP) and IP Reputation license is added in SP agent/module licenses. However, Local Management Interface (LMI) still shows no IP reputation license.
What should the System Administrator do to get the appliance to utilize the license?

• A.Access XGS using CLI and restart "Siteprotector communication" service.
• B.Add a Network Access Policy Rule using "Range Address" object for a range of IP Addresses.
• C.Access XGS using CLI and restart "License and update" service.
• D.Add a network Access Policy rule using Geolocation object.

A System Administrator wants to configure an XGS to send all IPS security event alerts to a remote system using Syslog.
How should the System Administrator configure the XGS?

• A.Edit the IPS Policy object and add a 'Remote Syslog' response object.
• B.Configure 'System Alerts' with 'Remote Syslog' response objects.
• C.Edit the signatures inside the IPS Policy object and add a 'Remote Syslog' response object.
• D.Edit the Network Access policy object and add a 'Remote Syslog' response object.

The System Administrator has configured the Advanced Tuning Parameter
alpsd.ssl.inverse=1 (Man-in-the-Middle (MitM) approach) to allow Diffie-Hellman key exchange usage so traffic to their internal web portal can be decrypted.
Which additional steps need to be taken to configure the XGS?

• A.Configure Outbound SSL Certificates and Inbound SSL Inspection Policy.
• B.Configure Inbound SSL Certificates and Inbound SSL Inspection Policy.
• C.Configure Inbound SSL Certificates and Outbound SSL Inspection Policy.
• D.Configure Outbound SSL Certificates and Outbound SSL Inspection Policy.

A financial company bought an XGS appliance to protect the servers running online trade applications. One XGS is just deployed in the staging environment and the initial setup configuration was done; all Security Policies are factory-default. A junior System Administrator accesses the Local Management Interface and opens the Network Access Policy page, and notices that Network Objects can be Drag/Drop on Rules as in the diagram:

Which three actions can be performed using Drag/Drop? (Choose three.)

• A.Drag Applications folder and drop on Application column of a rule
• B.Drag Inspection folder and drop on Inspection column of a rule
• C.Drag Response folder and drop on response column of a rule
• D.Drag Address folder and drop on Source column of a rule
• E.Drag Schedule Objects folder and drop on Schedule column of a rule
• F.Drag Identity folder and drop on Destination column of a rule

A System Administrator has become aware of a new zero-day vulnerability. There is no current protection on the XGS for this new attack.
How should a customer obtain temporary protection against the new attack?

• A.Use IP reputation blocking against Malware and Bot sources
• B.Contact X-Force via developerWorks and request a temporary signature
• C.Contact customer support for assistance in creating a signature to block the traffic
• D.Research the vulnerability on X-Force Exchange, check for collections, and utilize Open Signature rules if provided.