Hide Notes 

Slide 1: JN0-570 JNCIS-SSL EXAM Exam: JN0-570 Demo Edition CERT MAGIC 1 http://www.certmagic.com
Slide 2: JN0-570 QUESTION: 1 Which three statements are true regarding split-tunneling modes? (Choose three.) A. Choosing "Enable Split Tunneling with route change monitor" allows Network Connect to update the routing table if a route change is detected. B. Choosing "Disable Split Tunneling" forces all traffic through the Network Connect tunnel. C. Choosing "Enable Split Tunneling" will modify routes on the client so that any networks defined in the split-tunneling policy are routed through Network Connect. D. Choosing "Allow access to local subnet" will not modify the route table on the local client. E. Choosing "Enable Split Tunneling with allowed access to local subnet" requires that local resources be defined in the Network Connect access control list. Answer: B, C, E QUESTION: 2 What should you do when you need to create a meeting on demand to troubleshoot a client issue? A. Schedule an on demand meeting that begins in 10 minutes. B. Schedule an instant meeting through Secure Meeting. C. Start up a support meeting. D. Start a secure meeting through the Microsoft Outlook plug-in. Answer: C QUESTION: 3 Which statement about CRLs is true? A. CRLs are distributed automatically by the CA. B. CDP can be used to automatically validate a CRL. C. The base CRL contains only a subset of the certificates issued by a given CA. D. CRLs contain the serial number, revocation date, and reason code for withdrawn certificates. Answer: D 2 http://www.certmagic.com
Slide 3: JN0-570 QUESTION: 4 What does Cache Cleaner remove by default? A. All content downloaded through the IVE Content Intermediation Engine during the user's IVE session B. The files in the user's Recycle Bin and the Recent Documents list at the end of the user session C. All temporary files created during the user's IVE session D. Any AutoComplete usernames or passwords used during the user's IVE session Answer: A QUESTION: 5 Which three logs are used within the SA solution? (Choose three.) A. Event log B. System log C. Client-Side log D. User Access log E. Security log Answer: A, C, D QUESTION: 6 When conducting meetings with Secure Meeting, your users frequently complain about jitter in the video presentation. How might you attempt to improve performance? A. Ensure that image compression is enabled on the IVE device's Secure Meeting configuration page. B. Limit the presentation video size to 800x600 resolution on the IVE device's Secure Meeting configuration page. C. Enable the Secure Meeting acceleration feature with the optional license upgrade. D. Ensure that 32-bit presentations mode is not enabled on the IVE device's Secure Meeting configuration page. Answer: D 3 http://www.certmagic.com
Slide 4: JN0-570 QUESTION: 7 Your company is rolling out Secure Meeting to assist the helpdesk in troubleshooting desktop issues. Which type of meeting should you enable on the SSL VPN? A. Scheduled meeting B. Technical meeting C. Support meeting D. Instant meeting Answer: C QUESTION: 8 Which three variables can be used for a username in a custom expression? (Choose three.) A. Username B. Username1 C. Username2 D. Username[1] E. Username[2] Answer: A, D, E QUESTION: 9 Which two statements about OCSP are true? (Choose two.) A. The IVE device is an OCSP client. B. OCSP requires the configuration of a CDP server. C. OCSP requires the use of SSL to secure certificate validation. D. OCSP provides real-time certificate verification. Answer: A, D QUESTION: 10 Which three statements are correct when configuring delegated administrator access? (Choose three.) 4 http://www.certmagic.com
Slide 5: JN0-570 A. Modify an existing admin URL. B. Create a new user role. C. Modify role mapping rules. D. Specify role restrictions. E. Select "delegated access" at the role level. Answer: A, C, D QUESTION: 11 Click the Exhibit button. A user browses to https: //partners.acmegizmo.com. Referring to the exhibit, which authentication realm will be available to the user? A. Users B. LDAP Realm C. ALL D. Users and LDAP Realm Answer: A QUESTION: 12 Which Single Sign-On (SSO) policy relies on the IVE domain name? A. SAML B. Headers/Cookies C. Form POST D. Basic Auth/NTLM Answer: D 5 http://www.certmagic.com
Slide 6: JN0-570 QUESTION: 13 Which three configuration data items can you export with the XML Export function? (Choose three.) A. User role mapping rules B. Policy tracing sessions C. Local users accounts D. Delegated administrator roles E. IDP sensors Answer: A, C, D QUESTION: 14 Which statement accurately describes resource profiles? A. Resource profiles are a collection of resources and ACLs. B. Resource profiles are where ACLs are set up for resources. C. Resource profiles are a collection of resources and their descriptions. D. Resource profiles are where the resources, roles, and ACLs are in one location. Answer: D QUESTION: 15 You have just finished creating an IVS on your device. You can log in to your IVS but you cannot access any backend resources. What should you troubleshoot first? A. Verify that you have associated your IVS to the correct virtual IP. B. Verify that you have allocated enough users for your IVS. C. Verify that you have associated your IVS to the correct VLAN. D. Verify that you are not blocked because of an untrusted certificate on the IVS. Answer: C QUESTION: 16 Which custom expression would allow users to login only during business hours (8:00AM to 5:00PM, Monday through Friday)? 6 http://www.certmagic.com
Slide 7: JN0-570 A. (loginTime.day = (Mon - Fri) AND loginTime = (8:00AM - 5:00PM)) B. (loginTime.dayofWeek = (Mon - Fri) AND loginTime in (8:00AM - 5:00PM)) C. (loginTime.dayofWeek = (Mon - Fri) AND loginTime = (08:00 - 17:00)) D. (loginTime.Weekday = (Mon - Fri) AND loginTime in (08:00 - 17:00)) Answer: C QUESTION: 17 Which three proxy scenarios are supported by Network Connect when split tunneling is enabled? (Choose three.) A. Explicit proxy to get to the IVE device B. Support for a Winsock proxy client C. Explicit proxy to get to internal applications D. PAC file to get to internal applications E. Automatic setting detection is configured in the client's browser Answer: A, C, D QUESTION: 18 Which two are valid options for using CRLs to validate a user's certificate? (Choose two.) A. Use LDAP to access the CDP. B. Use the CDP specified in the CA certificate. C. Use the CDP specified in the user certificate. D. Use OCSP to access the CDP. Answer: B, C QUESTION: 19 Which two are valid regarding the deployment of an active/active cluster? (Choose two.) A. It allows you to keep configurations synchronized. B. An external load balancing system is required. C. It can be used to scale the total number of licensed users. D. A virtual IP address must be configured on only one device. 7 http://www.certmagic.com
Slide 8: JN0-570 Answer: A, B QUESTION: 20 Which ActiveX parameter rewrite option does the IVE support? A. Rewrite hostname and port B. Rewrite ClassID C. Rewrite cookies and headers D. Rewrite URL Answer: D 8 http://www.certmagic.com