Check Point Accelerated CCSE NGX Set 1

1.

Where do Gateways managed by SmartProvisioning fetch their assigned profiles?

The Smartview Monitor The standalone SmartProvisioning server The Security Management server or CMA They are fetched locally from the individual device

2.

When synchronizing clusters, which of the following statements is NOT true?

Client Auth or Session Auth connections through a cluster member will be lost if the cluster member fails. The stare of connection using resources is maintained by a Security Server, so there connectionscannot be synchronized. Only cluster members running on me same OS platform can be synchronized. In the case of a failover, accounting information on the failed member may be lost despite a properlyworking synchronization.

3.

What command will allow you to disable sync on a cluster firewall member?

fw ctl setaync 0 fw ctl syncsatat stop fw ctl syncstat off fw ctl setsync off

4.

By default, a standby Security Management Server is automatically synchronized by an active Security Management Server, when:

The Security Policy is saved. The Security Policy is installed. The user database is installed. The standby Security Management Server starts for the first time.

5.

A customer is calling saying one member's status is Down. What will you check?

cphaprob list (verify what critical device is down) Fw ctl debug m cluster + forward (forwarding layer debug) tcpdump/snoop (CCP traffic) fw ctl pstat (check sync)

6.

You have a High Availability ClusterXL configuration. Machines are not synchronizer. What happens to connections on failover?

It is not possible to configure High Availability that is not synchronized. Old connections are lost but can be reestablished. Connection cannot be established until cluster members are fully synchronized. Old connections are lost but are automatically recovered whenever the failed machine recovers.

7.

When using ClusterXl in load sharing, what method is used be default?

IPs, SPIs IPs, Ports, SPIs IPs IPs, Ports

8.

John is configuring a new R17 Gateway cluster but he cannot configure the cluster as Third Party IP Clustering in Gateway Cluster Properties: 10 What's happening?

John is not using third party hardware as IP Clustering is part of Check Point's IP Appliance. Third Party Clustering is not available for R71 Security Gateways. ClusterXL needs to be unsetected to permit 3nd party clustering configuration. John has an invalid ClusterXL license

9.

A customer calls saying that a load-sharing cluster shows drops with the error First packet is not SYN. Complete the following sentence. I will recommend:

Change the load on each member. configuring flush and ack turning off SDF (Sticky Decision Function) turning on SDF (Sticky Decision Function)

10.

Which at the following commands shows full synchronization status?

cphaprob -i list. fw ctl if list Fw hastat cphaprob a if

Check Point Accelerated CCSE NGX Set 1

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

COMPANY

Products

OTHERS

Partner

Check Point Accelerated CCSE NGX Set 1

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

Detail Form

COMPANY

Products

OTHERS

Partner