Check Point Accelerated CCSE NGX Set 3

1.

From the following output of cphaprob state, which clusterXL mode is this?

New mode Multicast mode Legacy mode unicast mode

2.

Can end users be forced to authenticate by using client certificates and username password credentials?

yes, but by manually changing the parameters is password warning to true in the $ PWDIR/conf/objects_5_0.c file, to allow for LDAP

No, R71 only supports authentication by client certificates Yes by editing the protection-level settings SSL VPN supports server certificates

3.

Your customer complaints of the weak performance of his systems. He has heard that connection templates accelerate traffic. How do you explain to the customer about template restrictions and how to verify that they are enabled?

To enhance connection-establishment acceleration, a mechanism attempts to "group together" all connections match a particular service and whose sole discriminating element is the destination port. to test if the connection templates are enabled, use the command "fw ct1' templates To enhance connection-establishment acceleration, a mechanism attempts to "group together" allconnections match a particular service and whose sole discriminating element is the secure port. to test if the connection templates are enabled, use the command "fw ct1 To enhance connection-establishment acceleration, a mechanism attempts to "group together" allconnections match a particular service and whose sole discriminating element is the secure port. to test if the connection templates are enabled, use the command "fw ct1 templates To enhance connection-establishment acceleration, a mechanism attempts to "group together" allconnections match a particular service and whose sole discriminating element is the destination port. To test if the connection templates are enabled, use the command "fwaccel templates"

4.

Your customer wishes to install the smart workflow blade on a R70 security management server (secure platform). Which is the correct method? Choose the best answer.

When you install the R70.1 package on an R70 security management server, it will be upgraded to version R70.1 with smartworkflow. The smart workflow works directly on the versions R70.Install the smartworkflow as an add-on.The version of the management server remains R70. You must upgrade the management server to the version R70.1 first before you start the installation ofthe smartworkflow software blade plug-in The smart workflow blade is included in the standard R70 version. you need to enable via cpconfig.

5.

Your customer asks you about the performance pack. you explain to him that a performance pack is software acceleration product which improves the performance of the security gateway. There is two ways to enable or disable the acceleration. the first one is to use command cpconfig (see the fig 1) The second one is to use the command fwaccel on: off (see the figure2) What is the difference between those two commands?

The command cpconfig works on the security platform only. The command fwaccel can be used on all platforms. The fwaccel command determines the default setting. the command cpconfig can dynamically changethe setting but after the reboot it reverts to the default setting. Both the commands have the save function. The cpconfig command enables acceleration. The command fwaccel can dynamically change thesettings, but after reboot it reverts to the default settings.

6.

How is a change approved for implementing in smart workflow?

The change is submitted fir approval and its automatically installed by the approver once approve is clicked. The change is submitted for approval and is manually installed by the original submitter the next time helogs in after the approval of the change. The change is submitted for approval and is manually installed by the approver is clicked.

7.

Which statement is TRUE for route-based VPNs?

IP Pool NAT must be configured on each Gateway Route-based VPNs are a form of partial overlap VPN Domain Dynamic-routing protocols are not required Route-based VPNs replace domain-based VPNs

8.

Management portal should be installed on:
(i) management server
(ii) security gateway
(iii) dedicated server

All are possible solutions (ii) only (iii) only (i) or (iii) only

9.

How many Events can be shown at one tame m the Event preview pane?

5000 15000 30000 1000

10.

What access level cannot be assigned to an administrator in smart event?

Event database Write only No access Read only

Check Point Accelerated CCSE NGX Set 3

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

COMPANY

Products

OTHERS

Partner

Check Point Accelerated CCSE NGX Set 3

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

Detail Form

COMPANY

Products

OTHERS

Partner