CheckPoint. Check Point Certified Security Administrator R71

Transcription

1 Dumps Braindumps Real Questions Practice Test dumps free CheckPoint Check Point Certified Security Administrator R71

2 230 Answer: C QUESTION: 555 Which of the following commands can be used to remove site-to-site IPsec Security Association (SA)? A. fw ipsec tu B. vpn ipsec C. vpn debug ipsec D. vpn tu QUESTION: 556 In which IKE phase are IKE SA's negotiated? A. Phase 4 B. Phase 1 C. Phase 3 D. Phase 2 QUESTION: 557 In which IKE phase are IPsec SA's negotiated? A. Phase 3 B. Phase 1 C. Phase 2 D. Phase 4 Answer: C QUESTION: 558 Which operating system is not supported by SecureClient? 229

3 231 A. MacOS X B. Windows XP SP2 C. Windows Vista D. IPSO 3.9 QUESTION: 559 Match the remote-access VPN Connection mode features with their descriptions. A. A - 2, B - 4, C - 3, D - 1 B. A - 1, B - 3, C - 4, D - 2 C. A - 3, B - 4, C - 2, D - 1 D. A - 2, B - 3, C - 4, D - 1 QUESTION: 560 In the SmartView Tracker you receive the error, peer send invalid ID information while trying to establish an IKE VPN tunnel. Where does this error normally result from and how can you solve it? This error normally results from: A. a mismatch in the authentication algorithms used in IKE phase one and can be corrected by changing them to match. B. an invalid IP address configured on one tunnel endpoint; normally the internal one in the General tab. This can be solved with link selection or by changing this IP to the one facing the other tunnel endpoint. C. an invalid IP address configured on one tunnel endpoint, normally the internal one in the General tab. This can be resolved by adding the correct IPs to the Topology tab of both Gateways on both sites. D. a mismatch in the IPs of the VPN tunnel endpoints and can not be resolved. 230

4 232 QUESTION: 561 When using vpn tu, which option must you choose if you only want to clear phase 2 for a specific IP (gateway)? A. (6) Delete all IPsec SAs for a given User (Client) B. (7) Delete all IPsec+IKE SAs for a given peer (GW) C. (8) Delete all IPsec+IKE SAs for a given User (Client) D. (5) Delete all IPsec SAs for a given peer (GW) QUESTION: 562 When using vpn tu, which option must you choose if you want to rebuild your VPN for a specific IP (gateway)? A. (6) Delete all IPsec SAs for a given User (Client) B. (7) Delete all IPsec+IKE SAs for a given peer (GW) C. (5) Delete all IPsec SAs for a given peer (GW) D. (8) Delete all IPsec+IKE SAs for a given User (Client) QUESTION: 563 Which type of authentication will require users to TELNET to port port 900 to be authenticated for a service? A. Session authentication B. TCP authentication C. User authentication D. Client authentication E. IP authentication 231

5 233 QUESTION: 564 The default cluster administrator user name is: A. Supervisor B. Adminstrator C. cadmin D. Admin E. clusteradmin Answer: C QUESTION: 565 VPN routing provides a way of controlling how VPN traffic is directed. There are two methods for doing this. Which of these two methods will Route VPN traffic based on the encryption domain behind each Gateway in the community? A. Dynamic Based VPN B. Domain Based VPN C. Static Based VPN D. Route Based VPN E. Routing Based VPN 232

6 For More exams visit Kill your exam at First Attempt...Guaranteed!