Which kernel debug flag should you use to troubleshoot NAT connections?
fw ctl debug + xlate xltrc nat table
fw ctl debug + xltrc xlate nat conn
fw ctl debug + xlate xltrc nat conn drop
fw ctl debug + fwx_alloc nat conn drop
Correct answer: C
Question 2
You are working with multiple Security Gateways enforcing an extensive number of rules. To simplify security administration, which action would you choose?
Eliminate all possible contradictory rules such as the Stealth or Cleanup rules
Create a separate Security Policy package for each remote Security Gateway
Create network objects that restrict all applicable rules to only certain networks
Run separate SmartConsole instances to login and configure each Security Gateway directly
Correct answer: B
Question 3
Which type of SecureXL templates is enabled by default on Security Gateways?