PPS Practice Exam V8.02 Killtest Pulse Policy Secure (PPS) Exam

2. The safer , easier way to help you pass any IT exams. 1.IF-MAP recognizes two metadata types that are similar to roles on the Pulse Policy Secure and SA: A. IF-MAP capabilities B. IF-MAP roles C. IF-MAP policy D. IF-MAP realm Answer: A,B 2.SSL modes? A. JITC Mode B. NDcPP C. FIPS Answer: A,B,C PPS Practice Exam V8.02 Killtest Pulse Policy Secure (PPS) Exam D. FortiAnalyser Answer: C 3.3 types enforcement policies 3 A. Host enforcer policies B. Mac enforcement policies C. Ressource access policies D. Ip filtering policies E. Ip security (ipsec) Answer: A,C,E 4.In 802. lx the authentificator is typically A. AP B. Router C. Switch D. Client Answer: A,C 5.To enable identity aware connections for Fortinet. What device is requested? A. FortiProxy B. FortiGuard C. FortiAuthentificator 6.What 4 remediation action you can configure on a host checker policy? A. Delete file, send reason string update software start process B. Custom instruction delete file, send reason string kill process C. Update software, start process, delete file send reason string D. Custom instruction, kill process, delete file, update software Answer: B 7.Pulse secure uses IF-MAP to perform 2 / 6

3. The safer , easier way to help you pass any IT exams. A. Synchronize authorization and resource policies across multiple devices B. all C. Provide seamless sso to corporate ressources D. Share data securely btw devices outside of Pulse secure E. Provision PCS user session into PPS Answer: B 8.ICE license enable full box capacity when needed? A. False B. True Answer: B PPS Practice Exam V8.02 Killtest Pulse Policy Secure (PPS) Exam A. You can define multiple URLs each with different authentication realms but all of the URLs must be extensions of the path (*/) B. You can define multiple URLs each with different authentication roles but all of the URLs must be extensions of the path (*/) Answer: A 9.Only WELF formatted syslog are supported for customer filters A. False B. True Answer: A 10.Configuring pulse profiler at the realm level allows what function? A. Gathering device attributes B. Endpoint security C. Gathering switch attribute D. Gathering user data Answer: A 11.when configuring LDAP, which information? A. Psw B. Admin DN C. Ip address D. Base DN E. Server name Answer: A,B,C,D,E 12.Which statement is true about sign-in URLs? 13.To successfully connect to PPS remote authentication users can: A. Submit a username and password that matches PPS database B. Submit a username and password that matches Radius C. Submit a digital certificate that matches a defines certificate authority D. Submit a username and password that matches an active directory server 3 / 6

4. The safer , easier way to help you pass any IT exams. Answer: A,C,D 14.Which steps must you complete to configure a cluster? A. Add IP Vip B. Modify cluster propreties C. Create cluster D. Join cluster E. Add member Answer: B,C,D,E 15.NDcPP prerequisites A. External DNS Server should be able to resolve the hostnames used in the testing B. External CRL is up and running. C. If you plan to integrate with Pulse One, Pulse One server is up and running. D. External Syslog server is up and running. Answer: A,B,C,D PPS Practice Exam V8.02 Killtest Pulse Policy Secure (PPS) Exam A. Host Checker B. third-party integrity measurement verifier C. Windows Secure Application Manager scriptable launcher D. Juniper Installer Service Answer: D 16.In order to successfully migrate user sessions between PCS and PPS via IF-MAP, the user Roles must match btw both PCS and PPS A. False B. True Answer: A 17.When a switch does not support 802. IX, the following should be used for port based enforcement A. MAC auth B. ARP C. 802.1n D. SNMP Answer: D 18.You must deploy VPN tunneling using Network Connect to multiple Microsoft Windows devices. Due to access restrictions, the users do not have permission to install WSAM. Which component resolves this issue? 19.Which network interface is used for clustering A. Internal B. Management C. External Answer: A 4 / 6

5. The safer , easier way to help you pass any IT exams. 20.Maximum log size A. 500 Mb B. 400 Mb C. 100 Mb D. 200 Mb Answer: A 21.When you have a switch, how are the ways to configure the vlans? A. Trusted B. Trunk C. Access D. Untrusted Answer: B,C PPS Practice Exam V8.02 Killtest Pulse Policy Secure (PPS) Exam 22.Which two characteristics apply to policy Secure Demonstration and training edition (DTE) virtual appliances? A. Can have licenses added to it B. Can upgrade the software C. Fully featured D. Only for 30 days Answer: B,C 23.What layer of the OSI model does IPsec use? A. Layer 8 B. Layer 3 C. Layer 2 D. Layer 7 Answer: B 24.PSA-V supports vmware vmotion for high availability? A. true B. false Answer: A 25.The following needs to be defined prior to config role-mapping: A. Users roles B. Employees roles C. Contractor roles D. Guest roles Answer: A 26.At minimum, to enable guest access, the following must be added to Pulse Policy secure: A. Upload the guest certificates 5 / 6

6. The safer , easier way to help you pass any IT exams. B. Add the WLC as a Radius client C. Install guest licensing D. Pun the guest integration wizard Answer: B 27.Reserved lease duration can be customized A. true B. false Answer: A 28.Which setting can be changed under user role: Chose 2 options A. Session options B. Mapping C. Sign-in D. UI options E. Server Answer: A PPS Practice Exam V8.02 Killtest Pulse Policy Secure (PPS) Exam 29.Which protocol is not supported? A. EAP-TTLS B. MS-CHAP C. EAP-MD5-Challenge D. EAP-FAST Answer: D 30.Which Host checker feature uses a software module running on the PPS device to validate an endpoint compliance? A. Module OPSWOT B. Realms C. Module OPSWAT D. Endpoint security Assessment Plug-in ESAP Answer: D 6 / 6