920-449 Exam

It can be downloaded after you paying for it without any delay!

Free 920-449 Dumps Download

VisualExams offer 920-449 practice test,it will help you pass the exam.Also we offer free 920-449 test demo. They are a part of the full questions,you can view the question on our test engine before you decide to purchase.Click the link below to download our test engine,install it,search 920-449,then click download demo.

Free download Test Engine

Free download 920-449 PDF

　
　
Exam : Nortel 920-449
Title : NNCSE Contivity Security


1. A Contivity has two private interfaces (LAN and DMZ) and one public interfaces (INT). Workstation1 with an IP address of 10.10.10.1/24 is in the network that is directly attached to the private interface LAN. Workstation2 with an IP address of 20.20.20.1/24 is in the network that is directly attached to private interface DMZ. The requirement is to block only traffic from workstation1 to workstation2 using interface filters to be applied to the private interface DMZ. Select the most appropriate filter action, direction, and address for the access control filter.
A. Filter action = Deny ; Direction = Inbound ; Address = 20.20.20.1
B. Filter action = Deny ; Direction = Inbound ; Address = 10.10.10.1
C. Filter action = Deny ; Direction = Outbound ; Address = 10.10.10.1
D. Filter action = Deny ; Direction = Outbound ; Address = 20.20.20.1
Answer: C

2. Contivity Stateful Firewall has been enabled on a customer's Contivity system. The customer wants to extend user authentication on traffic between branch office connections in their VPN environment and a technician has set up Firewall User Authentication (FWUA). How will this affect system users?
A. Users will now have transparent access to the Contivity Stateful Firewall.
B. Users will be automatically authenticated for internal authorization services such as LDAP.
C. Users will be automatically authenticated for external authorization services such as RADIUS.
D. Users will be required to log into the Contivity Stateful Firewall before they are granted network access.
Answer: D

3. A technician is setting up a rule base for a Contivity Stateful Firewall configuration. The technician plans to enable a Lockdown rule. What will be the impact of this rule?
A. non-tunneled traffic will be blocked
B. access to the firewall will be blocked
C. outgoing traffic through the firewall will be blocked
D. incoming traffic through the firewall will be blocked
Answer: B

4. A Contivity configuration has two private interfaces (LAN 0 and LAN 1) and one public interface (LAN 3) with Application servers residing on LAN 0. An administrator needs to create a default rule in order to allow users from LAN 1 and tunneled users from LAN 3 to access the application servers in LAN 0. What would be the most secure interface classification for the source interface?
A. Any
B. Trusted
C. Tunnel: Any
D. LAN 1 and LAN 3
Answer: B

5. A company has a main office and three branch offices. Each branch office has a branch office tunnel (BOT) connection to the main office. The following conditions exist: - Contivity firewall is disabled but each BOT has a default setting of ermit all?tunnel filter configured under the group profile. - Contivity firewall is disabled but each BOT has a default setting of ?ermit all?tunnel filter configured under the group profile. - The company has their own internal/private DNS server which resides in the main office. - Contivity from each branch offices is acting as DNS proxy. - Workstations from the branch offices are pointing to their local Contivity as the default gateway and DNS server. All workstations from the branch offices can reach all devices in the main office via IP address but cannot reach them through DNS names. What is the most likely cause of the problem?
A. The access control of ermit all?given to the BOT group is enough to allow DNS to pass through the tunnel so the DNS server could be The access control of ?ermit all?given to the BOT group is enough to allow DNS to pass through the tunnel so the DNS server could be down.
B. DNS server is up but main office's Contivity has DNS setting unchecked under the allow management traffic for remote servers portion of the permit all rule.
C. DNS server is up but branch offices' Contivity has DNS setting unchecked under the allow management traffic for remote servers portion of the permit all rule.
D. Main office's Contivity has DNS setting checked under the allow management traffic for remote servers portion of the permit all rule but DNS server could be down.
Answer: C

VisualExams 920-449 Exam Description

920-449 exam training is available in various formats to best suit your needs and learning style from VisualExams. Whether you are a hands-on tactile learner, visually or even a textbook training veteran, we has the 920-449 resources that will guarantee you to pass your 920-449 practice exam at the first time!

Guarantee to Pass Your 920-449 Exam

We provide the latest high quality 920-449 practice exam for the customers,we guarantee your success at the first attempt with only our 920-449 exam questions, if somehow you do not pass the exam at the first time, we will Free update for you!

The Tenet Of VisualExams

Our on-site online training experts create all of the Nortel 920-449 exam products available through Actual-Exams. Our main goal is that you get more kownleage with less money.You will find our price is very cheap.

After-sales Service

Once you purchase our products,we will offer you the best service.After you purchase our product, we will offer free update in time for 90 days.Whatever you have any questions,we will help you solve it. And in 3 weeks we will offer you free updates,so please pay attention our site at all times.

Acquiring Nortel NCSE certifications are becoming a huge task in the field of I.T. More over these exams like 920-449 exam are now continuously updating and accepting this challenge is itself a task. This 920-449 practice test is an important part of Nortel certifications and at NCSE braindumps we have the resources to prepare you for this. The 920-449 exam is essential and core part of Nortel certifications and once you clear the exam you will be able to solve the real time problems yourself.Wamt to take advantage of the Real 920-449 Value Pack and save time and money while developing your skills to pass your Nortel Certified Network Associate (NCSE) Exam'? Let VisualExams help you climb that ladder of success and pass your 920-449 now!