Exam4Training

Pulse Secure PPS Pulse Policy Secure (PPS) Deployment Implementation and Configuration Online Training

Question #1

IF-MAP recognizes two metadata types that are similar to roles on the Pulse Policy Secure and SA:

  • A . IF-MAP capabilities
  • B . IF-MAP roles
  • C . IF-MAP policy
  • D . IF-MAP realm

Reveal Solution Hide Solution

Correct Answer: A,B
Question #2

SSL modes?

  • A . JITC Mode
  • B . NDcPP
  • C . FIPS

Reveal Solution Hide Solution

Correct Answer: A,B,C
Question #3

3 types enforcement policies 3

  • A . Host enforcer policies
  • B . Mac enforcement policies
  • C . Ressource access policies
  • D . Ip filtering policies
  • E . Ip security (ipsec)

Reveal Solution Hide Solution

Correct Answer: A,C,E
Question #4

In 802. lx the authentificator is typically

  • A . AP
  • B . Router
  • C . Switch
  • D . Client

Reveal Solution Hide Solution

Correct Answer: A,C
Question #5

To enable identity aware connections for Fortinet.

What device is requested?

  • A . FortiProxy
  • B . FortiGuard
  • C . FortiAuthentificator
  • D . FortiAnalyser

Reveal Solution Hide Solution

Correct Answer: C
Question #6

What 4 remediation action you can configure on a host checker policy?

  • A . Delete file, send reason string update software start process
  • B . Custom instruction delete file, send reason string kill process
  • C . Update software, start process, delete file send reason string
  • D . Custom instruction, kill process, delete file, update software

Reveal Solution Hide Solution

Correct Answer: B
Question #7

Pulse secure uses IF-MAP to perform

  • A . Synchronize authorization and resource policies across multiple devices
  • B . all
  • C . Provide seamless sso to corporate ressources
  • D . Share data securely btw devices outside of Pulse secure
  • E . Provision PCS user session into PPS

Reveal Solution Hide Solution

Correct Answer: B
Question #8

ICE license enable full box capacity when needed?

  • A . False
  • B . True

Reveal Solution Hide Solution

Correct Answer: B
Question #9

Only WELF formatted syslog are supported for customer filters

  • A . False
  • B . True

Reveal Solution Hide Solution

Correct Answer: A
Question #10

Configuring pulse profiler at the realm level allows what function?

  • A . Gathering device attributes
  • B . Endpoint security
  • C . Gathering switch attribute
  • D . Gathering user data

Reveal Solution Hide Solution

Correct Answer: A

Question #11

when configuring LDAP, which information?

  • A . Psw
  • B . Admin DN
  • C . Ip address
  • D . Base DN
  • E . Server name

Reveal Solution Hide Solution

Correct Answer: A,B,C,D,E
Question #12

Which statement is true about sign-in URLs?

  • A . You can define multiple URLs each with different authentication realms but all of the URLs must be extensions of the path (*/)
  • B . You can define multiple URLs each with different authentication roles but all of the URLs must be extensions of the path (*/)

Reveal Solution Hide Solution

Correct Answer: A
Question #13

To successfully connect to PPS remote authentication users can:

  • A . Submit a username and password that matches PPS database
  • B . Submit a username and password that matches Radius
  • C . Submit a digital certificate that matches a defines certificate authority
  • D . Submit a username and password that matches an active directory server

Reveal Solution Hide Solution

Correct Answer: A,C,D
Question #14

Which steps must you complete to configure a cluster?

  • A . Add IP Vip
  • B . Modify cluster propreties
  • C . Create cluster
  • D . Join cluster
  • E . Add member

Reveal Solution Hide Solution

Correct Answer: B,C,D,E
Question #15

NDcPP prerequisites

  • A . External DNS Server should be able to resolve the hostnames used in the testing
  • B . External CRL is up and running.
  • C . If you plan to integrate with Pulse One, Pulse One server is up and running.
  • D . External Syslog server is up and running.

Reveal Solution Hide Solution

Correct Answer: A,B,C,D
Question #16

In order to successfully migrate user sessions between PCS and PPS via IF-MAP, the user Roles must match btw both PCS and PPS

  • A . False
  • B . True

Reveal Solution Hide Solution

Correct Answer: A
Question #17

When a switch does not support 802. IX, the following should be used for port based enforcement

  • A . MAC auth
  • B . ARP
  • C . 802.1n
  • D . SNMP

Reveal Solution Hide Solution

Correct Answer: D
Question #18

You must deploy VPN tunneling using Network Connect to multiple Microsoft Windows devices. Due to access restrictions, the users do not have permission to install WSAM.

Which component resolves this issue?

  • A . Host Checker
  • B . third-party integrity measurement verifier
  • C . Windows Secure Application Manager scriptable launcher
  • D . Juniper Installer Service

Reveal Solution Hide Solution

Correct Answer: D
Question #19

Which network interface is used for clustering

  • A . Internal
  • B . Management
  • C . External

Reveal Solution Hide Solution

Correct Answer: A
Question #20

Maximum log size

  • A . 500 Mb
  • B . 400 Mb
  • C . 100 Mb
  • D . 200 Mb

Reveal Solution Hide Solution

Correct Answer: A

Question #21

When you have a switch, how are the ways to configure the vlans?

  • A . Trusted
  • B . Trunk
  • C . Access
  • D . Untrusted

Reveal Solution Hide Solution

Correct Answer: B,C
Question #22

Which two characteristics apply to policy Secure Demonstration and training edition (DTE) virtual appliances?

  • A . Can have licenses added to it
  • B . Can upgrade the software
  • C . Fully featured
  • D . Only for 30 days

Reveal Solution Hide Solution

Correct Answer: B,C
Question #23

What layer of the OSI model does IPsec use?

  • A . Layer 8
  • B . Layer 3
  • C . Layer 2
  • D . Layer 7

Reveal Solution Hide Solution

Correct Answer: B
Question #24

PSA-V supports vmware vmotion for high availability?

  • A . true
  • B . false

Reveal Solution Hide Solution

Correct Answer: A
Question #25

The following needs to be defined prior to config role-mapping:

  • A . Users roles
  • B . Employees roles
  • C . Contractor roles
  • D . Guest roles

Reveal Solution Hide Solution

Correct Answer: A
Question #26

At minimum, to enable guest access, the following must be added to Pulse Policy secure:

  • A . Upload the guest certificates
  • B . Add the WLC as a Radius client
  • C . Install guest licensing
  • D . Pun the guest integration wizard

Reveal Solution Hide Solution

Correct Answer: B
Question #27

Reserved lease duration can be customized

  • A . true
  • B . false

Reveal Solution Hide Solution

Correct Answer: A
Question #28

Which setting can be changed under user role: Chose 2 options

  • A . Session options
  • B . Mapping
  • C . Sign-in
  • D . UI options
  • E . Server

Reveal Solution Hide Solution

Correct Answer: A
Question #29

Which protocol is not supported?

  • A . EAP-TTLS
  • B . MS-CHAP
  • C . EAP-MD5-Challenge
  • D . EAP-FAST

Reveal Solution Hide Solution

Correct Answer: D
Question #30

Which Host checker feature uses a software module running on the PPS device to validate an endpoint compliance?

  • A . Module OPSWOT
  • B . Realms
  • C . Module OPSWAT
  • D . Endpoint security Assessment Plug-in ESAP

Reveal Solution Hide Solution

Correct Answer: D

Question #31

Host Checker policies are supported on which endpoint operating system?

  • A . All
  • B . Windows
  • C . Android
  • D . IOS
  • E . Mac

Reveal Solution Hide Solution

Correct Answer: A
Question #32

PPS support client side logging for which features?

  • A . Mac auth
  • B . Host checker
  • C . Active supplicant
  • D . Pulse desktop client

Reveal Solution Hide Solution

Correct Answer: B,D
Question #33

Roles should be configured so that each user matches?

  • A . Multiple hierarchical roles may match
  • B . Roles based on employee type only
  • C . Only none role can match
  • D . Role mapping is up to the user preference

Reveal Solution Hide Solution

Correct Answer: A
Question #34

Which three steps are required to add web compression to your existing ressources profile

  • A . Add the policy
  • B . Click show all autopolicy Types
  • C . Add the resource with the action set to compress

Reveal Solution Hide Solution

Correct Answer: A,B,C
Question #35

PPS supports policy enforcement devices.

  • A . False
  • B . True

Reveal Solution Hide Solution

Correct Answer: A
Question #36

Pulse Secure supports google cloud deployment?

  • A . True
  • B . False

Reveal Solution Hide Solution

Correct Answer: B
Question #37

What functions does the admission control template parses the events perform?

  • A . Logos of events on admission control equipment
  • B . The events based on the variables such as source IP, source user, rule name, and severity

Reveal Solution Hide Solution

Correct Answer: B
Question #38

Which system log type contains information about active sync proxy events?

  • A . User Access
  • B . Client Logs
  • C . Event

Reveal Solution Hide Solution

Correct Answer: C
Question #39

What is the remediation actions that you can configure on a host checker policy?

  • A . Delete files, kill process, upload and Send Reason Strings
  • B . Delete files, kill process, Custom instructions, Send Reason Strings
  • C . Upload, delete files, kill process, Custom instructions, Send Reason Strings

Reveal Solution Hide Solution

Correct Answer: B
Question #40

Sign-in policies define the login URL and what other element?

  • A . Sign-in Notifications
  • B . Sign-in Pages
  • C . Sign-in Policies

Reveal Solution Hide Solution

Correct Answer: A
Exit mobile version