156-115.77 Leak Questions

Check Point Certified Security Master Questions and Answers

Question 21

Why would you choose to combine dynamic routing protocols and VPNs?

All options listed.

In the case of one tunnel failure, other tunnels may be used to route the traffic.

Dynamic-routing information can propagate over the VPN, utilizing the VPN as just another point-to-point link in the network.

The VPN device can be automatically updated with network changes on any VPN peer Gateway without the need to update the VPN Domain's configuration.

Question 22

Where can you configure Wire mode?

In Global properties

In the gateway object on the “IPSec VPN” > “VPN Advanced” page

In sysconfig

In CLISH

Question 23

When configuring a Numbered VPN-Tunnel, what parameters are necessary?

VPN Tunnel ID, Local Address, Remote Address

Peer, Local Address, Remote Address

VPN Tunnel ID, Peer, Local Address, Remote Address

VPN Tunnel ID, Peer, Physical Device

Question 24

Where would an administrator set an email alert for a specific permanent VPN tunnel?

Edit the file vpnconf.

Run sysconfig.

In the Tunnel Properties select Mail Alert.

You can only enable logging or SNMP traps.