Exam A
QUESTION 1
Which of the following statements about IKE Encryption are TRUE? (Choose three )
A. The final packet size is increased after it is encrypted.
B. TCP and IP headers are encrypted, along with the payload.
C. IKE uses in-place encryption.
D. IKE can use the FWZ1 encryption algorithm.
E. IKE uses tunneling encryption.
Correct Answer: ABE
QUESTION 2
When upgrading a configuration to NG with Application Intelligence: (Choose the FALSE answer)
A. Upgrade the SmartConsole.
B. Upgrade each module’s version in SmartDashboard manually.
C. Upgrade the VPN-1/Firewall-1 Enforcement Modules.
D. Copy $FWDIR/state from one version of VPN-1/FireWall-1 to another version of VPN-1/FireWall-1.
E. Upgrade the SmartCenter server. The version is set during the upgrade.
Correct Answer: D
QUESTION 3
When you upgrade VPN-1/FireWall-1, what components are carried over to the new version? (Choose two)
A. Licenses
B. VPN-1/FireWall-1 database
C. OPSEC database
D. Backward Compatibility
E. Rule Base
Correct Answer: AB
QUESTION 4
Which of the following isNOT a function of the Internal Certificate Authority (ICA)?
» Read more about: Most Accurate CheckPoint 156-310 Download, Best CheckPoint 156-310 Practice »