Check Point-Certified Security Administrator NGX Set 4

You have configured SNX on the Security Gateway. The client connects to the Security Gateway and the user enters the authentication credentials. What must happen after authentication that allows the client to connect to the Security Gateway's VPN domain?

Active-X must be allowed on the client. The SNX client application must be installed on the client. SNX modifies the routing table to forward VPN traffic to the Security Gateway. An office mode address must be obtained by the client.

You have a mesh VPN Community configured to create a site-to-site VPN. Given the displayed VPN properties, what can you conclude about this community?

Change the data-integrity setting for this VPN Community because MD5 is oncompatible with AES. Changing the setting Perform key exchange encryption with from AES-256 to 3DES will enhance theVPN Community's security , and reduce encryption overhead. The VPN Community will perform IKE Phase 1 key-exchange encryption using the longest key SecurityGateway R76 supports. Changing the setting Perform IPsec data encryption with from AES-128 to 3Des will increase theencryption overhead.

How many packets does the IKE exchange use for Phase 1 Aggressive Mode?

1 12 6 3

When using vpn tu, which option must you choose if you only want to clear phase 2 for a specific IP (gateway)?

(8) Delete all IPsec+IKE SAs for a given User (Client) (5) Delete all IPsec SAs for a given peer (GW) (6) Delete all IPsec SAs for a given User (Client) (7) Delete all IPsec+IKE SAs for a given peer (GW)

When using vpn tu, which option must you choose if you want to rebuild your VPN for a specific IP (gateway)?

(6) Delete all IPsec SAs for a given User (Client) (7) Delete all IPsec+IKE SAs for a given peer (GW) (8) Delete all IPsec+IKE SAs for a given User (Client) (5) Delete all IPsec SAs for a given peer (GW)

What statement is true regarding Visitor Mode?

All VPN traffic is tunneled through UDP port 4500. VPN authentication and encrypted traffic are tunneled through port TCP 443. Only ESP traffic is tunneled through port TCP 443. Only Main mode and Quick mode traffic are tunneled on TCP port 443.

If you were NOT using IKE aggressive mode for your IPsec tunnel, how many packets would you see for normal Phase 1 exchange?

9 6 3 2

How many packets does the IKE exchange use for Phase 1 Main Mode?

6 12 1 3

10.

Which of the following actions take place in IKE Phase 2 with Perfect Forward Secrecy disabled?

Peers authenticate using certificates or preshared secrets. The DH public keys are exchanged. Each Security Gateway generates a private Diffie-Hellman (DH) key from random pools. Symmetric IPsec keys are generated.

Check Point-Certified Security Administrator NGX Set 4

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

COMPANY

Products

OTHERS

Partner

Check Point-Certified Security Administrator NGX Set 4

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

Detail Form

COMPANY

Products

OTHERS

Partner