156-315.13 試験問題を無料オンラインアクセス

Your organization maintains several IKE VPN's. Executives in your organization want to know which mechanism Security Gateway R76 uses to guarantee the authenticity and integrity of messages. Which technology should you explain to the executives?

• A.Certificate Revocation Lists
• B.Application Intelligence
• C.Digital signatures
• D.Key-exchange protocols

Yoav is a Security Administrator preparing to implement a VPN solution for his multi-site organization. To comply with industry regulations, Yoav's VPN solution must meet the following requirements:
Portability: Standard
Key management: Automatic, external PKI
Session keys: Changed at configured times during a connection's lifetime
Key length: No less than 128-bit Data integrity: Secure against inversion and brute force attacks
What is the most appropriate setting Yoav should choose?

• A.IKE VPNs: SHA1 encryption for IKE Phase 1, and MD5 encryption for Phase 2; AES hash
• B.IKE VPNs: AES encryption for IKE Phase 1, and AES encryption for Phase 2; SHA1 hash
• C.IKE VPNs: AES encryption for IKE Phase 1, and DES encryption for Phase 2; SHA1 hash
• D.IKE VPNs: DES encryption for IKE Phase 1, and 3DES encryption for Phase 2; MD5 hash
• E.IKE VPNs: CAST encryption for IKE Phase 1, and SHA1 encryption for Phase 2; DES hash

The ________ Check Point ClusterXL mode must synchronize the physical interface IP and MAC addresses on all clustered interfaces.

• A.Legacy Mode HA
• B.New Mode HA
• C.Pivot Mode Load Sharing
• D.Multicast Mode Load Sharing

Which command would you use to save the routing information before upgrading a SecurePlatform Gateway?

• A.ifconfig > [filename].txt
• B.ipconfig -a > [filename].txt
• C.cp /etc/sysconfig/network.C [location]
• D.netstat -rn > [filename].txt

Check Point New Mode HA is a(n) _________ solution.

• A.hot-standby
• B.acceleration
• C.load-balancing
• D.primary-domain