Check Point-Security Administration Featuring GAiA R77 (2) Set 4

1.

Which of the following actions take place in IKE Phase 2 with Perfect Forward Secrecy disabled?

Symmetric IPsec keys are generated. Each Security Gateway generates a private Diffie-Hellman (DH) key from random pools. The DH public keys are exchanged. Peers authenticate using certificates or preshared secrets.

2.

Which of the following commands can be used to remove site-to-site IPsec Security Association (SA)?

vpn debug ipsec vpn ipsec fw ipsec tu vpn tu

3.

How many packets are required for IKE Phase 2?

12 2 6 3

4.

Which of the following actions do NOT take place in IKE Phase 1?

Peers agree on encryption method. Diffie-Hellman key is combined with the key material to produce the symmetrical IPsec key. Peers agree on integrity method. Each side generates a session key from its private key and the peer's public key.

5.

Which SmartConsole component can Administrators use to track changes to the Rule Base?

WebUI SmartView Tracker SmartView Monitor SmartReporter

6.

UDP packets are delivered if they are ___________.

a stateful ACK to a valid SYN-SYN/ACK on the inverse UDP ports and IP a valid response to an allowed request on the inverse UDP ports and IP bypassing the kernel by the forwarding layer of ClusterXL referenced in the SAM related dynamic tables

7.

The INSPECT engine inserts itself into the kernel between which two OSI model layers?

Session and Transport Physical and Data Presentation and Application Datalink and Network

8.

Your company has two headquarters, one in London, and one in New York. Each office includes several branch offices. The branch offices need to communicate with the headquarters in their country, not with each other, and only the headquarters need to communicate directly. What is the BEST configuration for establishing VPN Communities for this company? VPN Communities comprised of:

One star Community with the option to mesh the center of the star: New York and London Gateways added to the center of the star with the mesh center Gateways option checked; all London branch offices defined in one satellite window, but, all New York branch offices defined in another satellite window. Two mesh and one star Community: One mesh Community is set up for each of the headquarters and its branch offices. The star Community is configured withLondon as the center of the Community and New York is the satellite. Two star and one mesh Community: One star Community is set up for each site, with headquarters as the Community center, and its branches as satellites. Themesh Community includes only New York and London Gateways. Three mesh Communities: One for London headquarters and its branches, one for New York headquarters and its branches, and one for London and New Yorkheadquarters.

9.

Your company has two headquarters, one in London, one in New York. Each of the headquarters includes several branch offices. The branch offices only need to communicate with the headquarters in their country, not with each other, and the headquarters need to communicate directly. What is the BEST configuration for establishing VPN Communities among the branch offices and their headquarters, and between the two headquarters? VPN Communities comprised of:

Three mesh Communities: one for London headquarters and its branches; one for New York headquarters and its branches; and one for London and New York headquarters. Two mesh and one star Community: Each mesh Community is set up for each site between headquarters their branches. The star Community has New York asthe center and London as its satellite. Two star communities and one mesh: A star community for each city with headquarters as center, and branches as satellites. Then one mesh community for thetwo headquarters. One star Community with the option to mesh the center of the star: New York and London Gateways added to the center of the star with the "mesh centerGateways?? option checked; all London branch offices defined in one satellite window; but, all New York branch offices defined in another satellite window.

10.

Certificates for Security Gateways are created during a simple initialization from _____________.

sysconfig The ICA management tool SmartUpdate SmartDashboard

Check Point-Security Administration Featuring GAiA R77 (2) Set 4

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

COMPANY

Products

OTHERS

Partner

Check Point-Security Administration Featuring GAiA R77 (2) Set 4

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

Detail Form

COMPANY

Products

OTHERS

Partner