Check Point Security Administration NGX II Set 4

1.

Which of the following statements is TRUE concerning MEP (Multiple Entry Point) VPN's?

The VPN Client is assigned a Security Gateway to connect to based on a priority list, should the first connection fail. MEP Security Gateways can be managed by separate Management Servers. MEP VPN's are restricted to the location of the gateways. State synchronization between Secruity Gateways is required.

2.

Which of the following statements is TRUE concerning MEP VPN's?

MEP Security Gateways cannot be managed by separate Management Servers. MEP VPN's are restricted to the location of the gateways. The VPN Client selects which Security Gateway takes over, should the first connection fail. State synchronization betweened Secruity Gateways is required.

3.

At what router prompt would you save your OSPF configuration?

localhost.localdomain(config)# localhost.localdomain(config-if)# localhost.localdomain# localhost.localdomain(config-router-ospf)#

4.

What is the router command to save your OSPF configuration?

save memory write config save write mem

5.

What is the command to show OSPF adjacencies?

show ospf interface show ospf summary-address show running-config show ip ospf neighbor

6.

Which of the following operating systems support numbered VTI's?

SecurePlatform Pro Solaris IPSO 4.0 + Windows Server 2008

7.

You have installed SecurePlatform R75 as Security Gateway operating system. As company requirements changed, you need the VTI features of R75. What should you do?

Only IPSO 3.9 supports VTI feature, so you have to replace your Security Gateway with Nokia appliances. In SmartDashboard click on the OS drop down menu and choose SecurePlatform Pro. You have toreboot the Security Gateway in order for the change to take effect. Type pro enable on your Security Gateway and reboot it. You have to re-install your Security Gateway with SecurePlatform Pro R75, as SecurePlatform R75does not support VTIs.

8.

Which operating system(s) support(s) unnumbered VPN Tunnel Interfaces (VTIs) for route-based VPN's?

Solaris 9 and higher IPSO 3.9 and higher Red Hat Linux SecurePlatform for NGX and higher

9.

Which of the following commands would you run to remove site-to-site IKE and IPSec Keys?

vpn tu ikeoff vpn export_p12 vpn accel off

10.

What is the most common cause for a Quick mode packet 1 failing with the error "No Proposal Chosen" error?

The OS and patch level of one gateway does not match the other. The previously established Permanent Tunnel has failed. There is a network connectivity issue. The encryption strength and hash settings of one peer does not match the other.

Check Point Security Administration NGX II Set 4

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

COMPANY

Products

OTHERS

Partner

Check Point Security Administration NGX II Set 4

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

Detail Form

COMPANY

Products

OTHERS

Partner