Check Point-Certified Security Administrator NGX Set 5

Question - 15 Maximum mark : - 29

Home
All Exams
Check Point-Certified Security Administrator NGX Online Practice Exams
Check Point-Certified Security Administrator NGX Set 5

Your primary Security Gateway runs on SecurePlatform. What is the easiest way to back up your Security Gateway R76 configuration, including routing and network configuration files?

Using the native SecurePlatform backup utility from command line or in the Web based user interface. ✘ Copying the directories $FWDIR/conf and $FWDIR/lib to another location. ✘ Using the command upgrade_export. ✘ Run the pre_upgrade_verifier and save the .tgz file to the directory /temp. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

You need to back up the routing, interface, and DNS configuration information from your R76 GAiA Security Gateway. Which backup-and-restore solution do you use?

GAiA back up utilities ✘ upgrade_export and upgrade_import commands ✘ Database Revision Control ✘ Manual copies of the directory $FWDIR/conf ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

You are running a R76 Security Gateway on SecurePlatform. In case of a hardware failure, you have a server with the exact same hardware and firewall version installed. What back up method could be used to quickly put the secondary firewall into production?

manual backup ✘ snapshot ✘ upgrade_export ✘ backup ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

Before upgrading SecurePlatform, you should create a backup. To save time, many administrators use the command backup. This creates a backup of the Check Point configuration as well as the system configuration. An administrator has installed the latest HFA on the system for fixing traffic problem after creating a backup file. There is a mistake in the very complex static routing configuration. The Check Point configuration has not been changed. Can the administrator use a restore to fix the errors in static routing?

The restore is done by selecting Snapshot Management from the boot menu of GAiA. ✘ A backup cannot be restored, because the binary files are missing. ✘ The restore can be done easily by the command restore and selecting the file netconf.C. ✘ The restore is not possible because the backup file does not have the same build number (version). ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

You intend to upgrade a Check Point Gateway from R71 to R76. Prior to upgrading, you want to back up the Gateway should there be any problems with the upgrade. Which of the following allows for the Gateway configuration to be completely backed up into a manageable size in the least amount of time?

upgrade_export ✘ snapshot ✘ backup ✘ database revision ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

Which of these attributes would be critical for a site-to-site VPN?

Strong data encryption ✘ Centralized management ✘ Scalability to accommodate user groups ✘ Strong authentication ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

Which of the following is NOT true for Clientless VPN?

User Authentication is supported. ✘ Secure communication is provided between clients and servers that support HTTP. ✘ The Gateway accepts any encryption method that is proposed by the client and supported in the VPN. ✘ The Gateway can enforce the use of strong encryption. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

You want to establish a VPN, using certificates. Your VPN will exchange certificates with an external partner. Which of the following activities should you do first?

Manually import your partner's Access Control List. ✘ Manually import your partner's Certificate Revocation List. ✘ Create a new logical-server object to represent your partner's CA. ✘ Exchange exported CA keys and use them to create a new server object to represent your partner'sCertificate Authority (CA). ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

Your company is still using traditional mode VPN configuration on all Gateways and policies. Your manager now requires you to migrate to a simplified VPN policy to benefit from the new features. This needs to be done with no downtime due to critical applications which must run constantly. How would you start such a migration?

This can not be done as it requires a SIC- reset on the Gateways first forcing an outage. ✘ This cannot be done without downtime as a VPN between a traditional mode Gateway and a simplifiedmode Gateway does not work. ✘ Convert the required Gateway policies using the simplified VPN wizard, check their logic and thenmigrate Gateway per Gateway. ✘ You first need to completely rewrite all policies in simplified mode and then push this new policy to allGateways at the same time. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

10.

Your manager requires you to setup a VPN to a new business partner site. The administrator from the partner site gives you his VPN settings and you notice that he setup AES 128 for IKE phase 1 and AES 256 for IKE phase 2. Why is this a problematic setup?

All is fine as the longest key length has been chosen for encrypting the data and a shorter key length for higher performance for setting up the tunnel. ✘ All is fine and can be used as is. ✘ The two algorithms do not have the same key length and so don't work together. You will get the error.... No proposal chosen.... ✘ Only 128 bit keys are used for phase 1 keys which are protecting phase 2, so the longer key length inphase 2 only costs performance and does not add security due to a shorter key in phase 1. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

Prev Next

Congratulations

you have successfully completed the test

Back to Question View Result

Detail Form

We will send your result on your email id and phone no. please fill detail

Name

Email ID Note: Report will be send to the above Email ID

Phone No

Check Point-Certified Security Administrator NGX Set 5

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

COMPANY

Products

OTHERS

Partner