Online Access Free 156-215-71 Practice Test

Which of the following is TRUE concerning control connections between the Security Management Server and the Gateway in a VPN Community? Control Connections are:

• A.encrypted using SIC and re-encrypted again by the Community regardless of VPN domain configuration.
• B.encrypted using SIC.
• C.not encrypted, only authenticated.
• D.encrypted by the Community.

Which of the following tools is used to generate a Security Gateway R71 configuration report?

• A.licview
• B.cpinfo
• C.infoview
• D.ethereal

You wish to configure a VPN and you want to encrypt not just the data packet, but the original header. Which encryption scheme would you select?

• A.Tunneling-mode encryption
• B.In-place encryption
• C.Both encrypt the data and header

Which utility is necessary for reestablishing SIC?

• A.cplic
• B.cpconfig
• C.fwm sic_reset
• D.sysconfig

You are a Security Administrator who has installed Security Gateway R71 on your network. You need to allow a specific IP address range for a partner site to access your intranet Web server. To limit the partner's access for HTTP and FTP only, you did the following:
1.Created manual Static NAT rules for the Web server.
2.Created the following settings in the Global Properties' Network Address Translation screen
-Allow bi-directional NAT* -Translate destination on client side
Do you above settings limit the partner's access?

• A.Yes, This will ensure that traffic only matches the specific rule configured for this traffic, and that the Gateway translates the traffic after accepting the packet.
• B.No. The first setting is only applicable to automatic NAT rules. The second setting is necessary to make sure there are no conflicts between NAT and anti-spoofing.
• C.No, The first setting is not applicable. The second setting will reduce performance, by translating traffic in the kernel nearest the intranet server.
• D.Yes, Both of these settings are only application to automatically NAT rules.