Question 1.
You need to publish SecurePlatform routes using the ospf routing protocol. 

What is the correct command structure, once entering the route command, to implement ospf successfully?

A. Run cpconfig utility to enable ospf routing
B. ip route ospf
    ospf network1
    ospf network2
C. Enable
    Configure terminal
    Router ospf [id]
    Network [network] [wildmask] area [id]
D. Use DBedit utility to either the objects_5_0.c file

Answer: C

Explanation: 

Question 2.
Control connections between the Security Management Server and the Gateway are not encrypted by the VPN Community. 

How are these connections secured?

A. They are encrypted and authenticated using SIC.
B. They are not encrypted, but are authenticated by the Gateway
C. They are secured by PPTP
D. They are not secured.

Answer: D

Explanation: 

Question 3.
How does a cluster member take over the VIP after a failover event?

A. Ping the sync interface
B. if list -renew
C. Broadcast storm
D. Gratuitous ARP

Answer: D

Explanation: 

Question 4.
You want to verify that your Check Point cluster is working correctly. 

Which command line tool can you use?

A. cphaconf state
B. cphaprob state
C. cphainfo-s
D. cphastart -status

Answer: B

Explanation: 

Question 5.
________is a proprietary Check Point protocol. it is the basis for Check Point ClusterXL intermodule communication.

A. RDP
B. CCP
C. CKPP
D. HA OPCODE

Answer: B

Explanation: 

Question 6.
John is configuring a new R71 Gateway cluster but he can not configure the cluster as Third Party IP Clustering because this option is not available in Gateway Cluster Properties:
 
What's happening?

A. John is not using third party hardware as IP Clustering is part of Check Point's IP Appliance 
B .Third Party Clustering is not available for R71 Security Gateways.
B. ClusterXL needs to be unselected to permit 3rd party clustering configuration.
C. John has an invalid ClusterXL license.

Answer: C

Explanation: 

Question 7.
You are MegaCorp Security Administrator. This company uses a firewall cluster, consisting of two cluster members. The cluster generally works well but one day you find that the cluster is behaving strangely. You assume that there is a connectivity problem with the cluster synchronization cluster link (cross-over cable).

Which of the following commands is the best for testing the connectivity of the crossover cable?

A. telnet 
B. arping 
C. ifconfig –a
D. Ping 

Answer: B

Explanation: 

Question 8.
Organizations are sometimes faced with the need to locate cluster members in different geographic locations that are distant from each other. A typical example is replicated data centers whose location is widely separated for disaster recovery purposes.

What are the restrictions of this solution?

A. There are no restrictions.
B. There is one restriction: The synchronization network must guarantee no more than 150 ms latency (ITU Standard G.114).
C. There is one restriction: The synchronization network must guarantee no more than 100 ms latency.
D. There are two restrictions: 1. The synchronization network must guarantee no more than 100ms latency and no more than 5% packet loss. 2. The synchronization network may only include switches and hubs.

Answer: D

Explanation: 

Question 9.
You are establishing a ClusterXL environment, with the following topology:
External interfaces 192.168.10.1 and 192.168.10.2 connect to a VLAN switch. The upstream router connects to the same VLAN switch. Internal interfaces 172.16 10.1 and 172.16.10.2 connect to a hub. 10.10.10.0 is the synchronization network. The Security Management Server is located on the internal network with IP 172.16.10.3. 

What is the problem with this configuration?

A. There is an IP address conflict
B. The Security Management Server must be in the dedicated synchronization network, not the internal network.
C. The Cluster interface names must be identical across all cluster members.
D. Cluster members cannot use the VLAN switch. They must use hubs.

Answer: B

Explanation: 

Question 10.
Refer to Exhibit:
Match the ClusterXL Modes with their configurations

A. A-3, B-2, C-1, D-4
B. A-3, B-2, C-4, D-1
C. A-2, B-3, C-4, D-1
D. A-2, B-3, C-1, D-4

Answer: C

Explanation: 

	Web www.certsbraindumps.com