CheckPoint Check Point Certified Security Administrator - GAiA - 156-215.13 Exam Practice Test

A. Changing the setting Perform key exchange encryption with from AES-256 to 3DES will enhance the VPN Community's security , and reduce encryption overhead.

B. Change the data-integrity setting for this VPN Community because MD5 is oncompatible with AES.

C. Changing the setting Perform IPsec data encryption with from AES-128 to 3Des will increase the encryption overhead.

D. The VPN Community will perform IKE Phase 1 key-exchange encryption using the longest key Security Gateway R76 supports.

A. XlateDst

B. XlateSrc

C. XlateDPort

D. XlateSPort

A. Active Directory Server object

B. WMI object

C. Check Point Password

D. Windows logon password

A. It defines the DMZ Interface since this information is necessary for Content Control

B. Select this option to automatically configure Anti-Spoofing to this net.

C. Activating this option automatically turns this interface to External.

D. Using restricted Gateways, this option automatically turns off the counting of IP Addresses originating from this interface.

A. Grouping reject and drop rules after the Cleanup Rule

B. Grouping authentication rules with QOS rules

C. Grouping IPS rules with dynamic drop rules

D. Placing more restrictive rules before more permissive rules

A. Hide rules from a SYN/ACK attack.

B. View only a few rules without the distraction of others.

C. Hide rules from read-only administrators.

D. Make rules invisible to incoming packets.

A. Overlapping VPN Domains

B. Secure Internal Communications (SIC)

C. Domain name resolution

D. Connectivity between the R76 Gateway and LDAP server

A. The Gateway Object representing your Gateway was configured as an Externally Managed VPN Gateway.

B. A Stealth Rule has been configured for the R76 Gateway.

C. The Security Policy installed to the Gateway had no rules in it.

D. The Allow Control Connections setting in Policy > Global Properties has been unchecked.