CertyRush
Đang tải...
C CertyRush
Câu hỏi free preview

Câu 11: C2150-620: IBM Security Network Protection (XGS) V5.3.2 System Administration

A System Administrator is planning to implement SSL Inspection for both outbound user traffic and inbound traffic to a company web server. The requirements are as follows: ✑ SSL Inspection should protect users from connections to fraudulent servers ✑ Outbound SSL Inspection should be limited to select web site categor…

Nội dung câu hỏi

A System Administrator is planning to implement SSL Inspection for both outbound user traffic and inbound traffic to a company web server. The requirements are as follows: ✑ SSL Inspection should protect users from connections to fraudulent servers ✑ Outbound SSL Inspection should be limited to select web site categories ✑ Avoid having to deploy files, configurations, or certificates to user workstationsThe steps to implement this plan are as follows: ✑ Obtain an Inspection license for the XGS ✑ Obtain a certificate from a public CA and upload it to the XGS via Outbound SSL Certificates ✑ Obtain the certificate and private key of the internal web server and upload it to the XGS via Inbound SSL Certificates ✑ Add internal CA certificates for the company intranet to the trusted Certificate Authorities tab in Outbound SSL Inspection Settings ✑ Configure Outbound SSL Inspection Settings to block connections if the server certificate is self-signed or invalid ✑ Create Outbound SSL Inspection rules that inspect only specific Domain Certificate Categories ✑ Create Inbound SSL Inspection rules that only decrypt traffic destined for the internal web server II addressWhat will happen if an internal user attempts to access the company intranet?

Các lựa chọn

Đáp án được giữ gọn theo nhãn A, B, C, D trong phần bình chọn tương tác.

  1. A. The connection will be blocked.
  2. B. The connection will be successful and traffic will be decrypted. — đáp án hiện tại
  3. C. The connection will be successful and the traffic will be blocked.
  4. D. The connection will be successful and the traffic will not be decrypted.

Cộng đồng

0 bình luận công khai. Tên thành viên được ẩn một phần.

Chưa có bình luận. Mở giao diện tương tác để bắt đầu thảo luận.

Câu hỏi liền kề