Which of the following is a new R80.10 Gateway feature that had not been available in R77.X and older?
A. The rule base can be built of layers, each containing a set of the security rules. Layers are inspected in the order in which they are defined, allowing control over the rule base flow and which security functionalities take precedence.
B. Limits the upload and download throughout for streaming media in the company to 1 Gbps.
C. Time object to a rule to make the rule active only during specified times.
D. Sub Policies are sets of rules that can be created and attached to specific rules. If the rule is matched, inspection will continue in the sub policy attached to it rather than in the next rule
|
Download Printable PDF. VALID exam to help you PASS. |
 |
Answer is A:
Security Policy New Architecture
� Policy Layers and Sub-Policies enable flexible control over the security policy behavior.
� Build a rule base with layers, each with a set of the security rules. Layers are inspected in
the order in which they are defined, giving control over the rule base flow and precedence
of security functionality. If an “Accept” action is done in a layer, inspection continues in the
next layer.
� Sub-Policies are sets of rules that you attach to specific rules. If the rule is matched,
inspection continues in the sub-policy attached to the rule. If the rule is not matched, the
sub-policy is skipped.
For example, a sub policy can manage a network segment or branch office.
� Sub-Policies can be managed by specific administrators, according to their permission
profile, allowing easy responsibility delegation in the team.
Should be D.
D describes inline layers.
R77 policy also has layers, however, there is no way to change the order of layers in R77.