Online Access Free 156-915.77 Practice Test

Jacob is using a mesh VPN Community to create a sitE. to-site VPN. The VPN properties in this mesh Community display in this graphic: Which of the following statements is TRUE?

• A.Jacob's VPN Community will perform IKE Phase 1 key-exchange encryption, using the longest key VPN-1 NGX supports.
• B.If Jacob changes the setting, "Perform key exchange encryption with" from "3DES" to "DES", he will enhance the VPN Community's security and reduce encryption overhead.
• C.If Jacob changes the setting "Perform IPSec data encryption with" from "AES-128" to "3DES", he will increase the encryption overhead.
• D.Jacob must change the datA. integrity settings for this VPN Community. MD5 is incompatible with AES.

Which OPSEC server is used to prevent users from accessing certain Web sites?

• A.URI
• B.LEA
• C.CVP
• D.UFP
• E.AMON

When configuring an LDAP Group object, which option should you select if you want the gateway to reference the groups defined on the LDAP server for authentication purposes?

• A.Only Group in Branch
• B.OU Accept and select appropriate domain
• C.All Account-Unit's Users
• D.Group Agnostic

Which Check Point address translation method is necessary if you want to connect from a host on the Internet via HTTP to a server with a reserved (RFC 1918) IP address on your DMZ?

• A.Dynamic Source Address Translation
• B.Hide Address Translation
• C.Static Destination Address Translation
• D.Port Address Translation

Which of the following statements is TRUE concerning MEP VPN's?

• A.State synchronization between Security Gateways is NOT required.
• B.MEP VPN's are restricted to the location of the gateways.
• C.The VPN Client is assigned a Security Gateway to connect to based on a priority list, should the first connection fail.
• D.MEP Security Gateways cannot be managed by separate Management Servers.