Check Point Accelerated CCSE NGX Set 10

1.

Which of the following is a supported Sticky Decision function of Sticky Connections for Load Sharing?

Multi-connection support for VPN-1 cluster members Support for Performance Pack acceleration Support for all VPN deployments (except those with third-party VPN peers) Support for SecureClient/SecuRemote/SSL Network Extender encrypted connections

2.

You are a Security Administrator preparing to deploy a new HFA (Hotfix Accumulator) to ten Security Gateways at five geographically separated locations What is the BEST method to implement this HFA?

Send a Certified Security Engineer to each site to perform the update Use a SSH connection to SCP the HFA to each Security Gateway. Once copied locally, initiate a remoteinstallation command and monitor the installation progress with SmartView Monitor. Use SmartUpdate to install the packages to each of the Security Gateways remotely Send a CDROM with the HFA to each location and have local personnel install it

3.

How does a standby SmartCenter Server receive logs from all Security Gateways, when an active SmartCenter Server fails over?

Establish Secure Internal Communications (SIC) between the primary and secondary Servers. The secondary Server can then receive logs from the Gateways, when the active Server fails over. Add the secondary SmartCenter Server object as a backup log server in the "Log Servers" window(under the "Logs and Masters" tab on the Gateway object). Reinstall the Security Policy. The secondary Server's host name and IP address must be added to the Masters file on the remoteGateways. Create a Check Point host object to represent the standby SmartCenter Server. Then select "SecondarySmartCenter Server" and "Log Server", from the list of Check Point Products on the General Properties window.

4.

SmartView Tracker logs the following Security Administrator activities, EXCEPT

Administrator login and logout. Object creation, deletion, and editing. Tracking SLA compliance. Rule Base changes.

5.

What information is found in the SmartView Tracker audit log?

SIC revoke certificate event Number of concurrent IKE negotiations Destination IP address Most accessed Rule Base rule

6.

You want to upgrade a cluster with two members to VPN-1 NGX R65. The SmartCenter Server and both members are version VPN-1/Firewall-1 NG FP3, with the latest Hotfix. What is the correct upgrade procedure?
(1) Change the version, in the General Properties of the gateway-cluster object.
(2) Upgrade the SmartCenter Server, and reboot after upgrade.
(3) Run cpstop on one member, while leaving the other member running. Upgrade one member
At a time, and reboot after upgrade. (4)Reinstall the Security Policy.

1, 3, 2, 4 2, 3, 1, 4 2, 4, 3, 1 3, 2, 1, 4

7.

Which of the following is NOT true for Management High Availability (HA)?

The HA SmartCenter Servers must all be the same OS and OS Service Pack The HA SmartCenter Servers must all be the same Check Point Version If the active SmartCenter Server is down, a standby SmartCenter Servers needs to become active inorder to be able to edit and install the Security Policy The HA SmartCenter Servers are synchronized so matching data is maintained and ready to be used.

8.

An internal host 10.4.8.108 successfully pings its Legacy Mode Cluster and receives replies. The following is the ARP table from the internal Windows host 10.4.8.108. Based on this information, what is the active cluster member's IP address? According to the output, which member is the standby machine?

10.4.8.2 10.4.8.3 The active cluster member's IP address cannot be determined by this arp cache 10.4.8.1

9.

The following is cphaprob state command output from one New Mode High Availability ClusterXL cluster member:Which member will be active after member 192.168.1.2 fails over and is rebooted?

Both members' state will be collision. 192.168.1.1 192.168.1.2 Both members' state will be active.

10.

The following configuration is for VPN-1 NGX R65:ls this configuration correct for Management High Availability?

No, the SmartCenter Servers must be installed on the same operating system. No, the SmartCenter Servers do not have the same number of NICs. No, an NGXR65 SmartCenter Server cannot run on Red Hat Linux 7.3. NO, the SmartCenter Servers must reside on the same network.

Check Point Accelerated CCSE NGX Set 10

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

COMPANY

Products

OTHERS

Partner

Check Point Accelerated CCSE NGX Set 10

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

Detail Form

COMPANY

Products

OTHERS

Partner