NO.74 Complete the statement. A security profile can block or allow traffic.

NO.75 An administrator wants to prevent hacking attacks through DNS queries to malicious domains.
Which two DNS policy actions can the administrator choose in the Anti-Spyware Security Profile?
(Choose two.)

NO.76 What is the Anti-Spyware Security profile default action?

NO.77 The firewall sends employees an application block page when they try to access Youtube.
Which Security policy rule is blocking the youtube application?

NO.78 Which operations are allowed when working with App-ID application tags?

NO.79 Four configuration choices are listed, and each could be used to block access to a specific URL. If you configured each choice to block the same URL then which choice would be the last to block access to the URL?

NO.80 Which statement is true regarding a Best Practice Assessment?

NO.81 Given the screenshot, what are two correct statements about the logged traffic? (Choose two.)

NO.82 Which two features can be used to tag a username so that it is included in a dynamic user group?
(Choose two.)

NO.83 When creating a Source NAT policy, which entry in the Translated Packet tab will display the options Dynamic IP and Port, Dynamic, Static IP, and None?

NO.84 An administrator needs to add capability to perform real-time signature lookups to block or sinkhole all known malware domains.
Which type of single unified engine will get this result?

NO.85 Given the cyber-attack lifecycle diagram identify the stage in which the attacker can run malicious code against a vulnerability in a targeted machine.

NO.86 What is considered best practice with regards to committing configuration changes?

NO.87 An administrator would like to override the default deny action for a given application, and instead would like to block the traffic.
Which security policy action causes this?

NO.88 Given the topology, which zone type should zone A and zone B to be configured with?

NO.89 An administrator is troubleshooting traffic that should match the interzone-default rule. However, the administrator doesn’t see this traffic in the traffic logs on the firewall. The interzone-default was never changed from its default configuration.
Why doesn’t the administrator see the traffic?

NO.90 Based on the show security policy rule would match all FTP traffic from the inside zone to the outside zone?

NO.91 An administrator would like to silently drop traffic from the internet to a ftp server.
Which Security policy action should the administrator select?

NO.92 Which three statements describe the operation of Security policy rules and Security Profiles?
(Choose three.)

NO.93 An administrator would like to block access to a web server, while also preserving resources and minimizing half-open sockets. What are two security policy actions the administrator can select? (Choose two.)

NO.94 Which option shows the attributes that are selectable when setting up application filters?

NO.95 Which type of policy allows an administrator to both enforce rules and take action?