747 お客様のコメント
質問 1：
Which of the following statements is TRUE concerning MEP VPN's?
A. MEP Security Gateways can be managed by separate Management Servers.
B. The VPN Client is assigned a Security Gateway to connect to based on a priority list, should the first connection fail.
C. State synchronization between Secruity Gateways is required.
D. MEP VPN's are restricted to the location of the gateways.
正解：A
質問 2：
SmartWorkflow has been enabled with the following configuration:
If a security administrator opens a new session and after making changes to policy, submits the session for approval will be displayed as:
A. Not Approved
B. In progress
C. Awaiting Approval
D. Approved
正解：B
質問 3：
A VPN Tunnel Interface (VTI) is defined on SecurePlatform Pro as:
vpn shell interface add numbered 10.10.0.1 10.10.0.2 madrid.cp
What do you know about this VTI?
A. The local Gateway's object name is madrid.cp.
B. 10.10.0.1 is the local Gateway's internal interface, and 10.10.0.2 is the internal interface of the remote Gateway.
C. The peer Security Gateway's name is madrid.cp.
D. The VTI name is madrid.cp.
正解：C
質問 4：
What tools CANNOT be launched from SmartUpdate NGX R65?
A. cpinfo
B. Nokia Voyager
C. SecurePlatform Web UI
D. snapshot
正解：D
質問 5：
Which of the following SSL Network Extender server-side prerequisites are correct? Select all that apply.
A. The VPN1-Gateway must be configured to work with Visitor Mode
B. To use Integrity Clientless Security (ICS), you must install the ICS server or configuration tool.
C. The specific VPN-1 Security Gateway must be configured as a member of the VPN-1 Remote Access Community.
D. There are distinctly separate access rules required for SecureClient users vs. SSL Network Extender users.
正解：A,B,C
質問 6：
Rachel is the Security Administrator for a university. The university's FTP servers have old hardware and software. Certain FTP commands cause the FTP servers to malfunction. Upgrading the FTP servers is not an option at this time. Which of the following options will allow Rachel to control which FTP commands pass through the Security Gateway protecting the FTP servers?
A. Web Intelligence > Application Layer > FTP Settings
B. Rule Base > Action Field > Properties
C. FTP Service Object > Advanced > Blocked FTP Commands
D. Global Properties > Security Server > Allowed FTP Commands
E. SmartDefense > Application Intelligence > FTP Security Server
正解：E
質問 7：
Which type of routing relies on a VPN Tunnel Interface (VTI) to route traffic?
A. Host-based VPN
B. Subnet-based VPN
C. Route-based VPN
D. Domain-based VPN
正解：C
質問 8：
Which external user authentication protocols are supported in SSL VPN?
A. LDAP, RADIUS, TACACS, SecurID
B. LDAP, RADIUS, Active Directory, SecurID
C. DAP, SecurID, Check Point Password, OS Password, RADIUS, TACACS
D. LDAP, Active Directory, SecurID
正解：C
Which of the following statements is TRUE concerning MEP VPN's?
A. MEP Security Gateways can be managed by separate Management Servers.
B. The VPN Client is assigned a Security Gateway to connect to based on a priority list, should the first connection fail.
C. State synchronization between Secruity Gateways is required.
D. MEP VPN's are restricted to the location of the gateways.
正解：A
質問 2：
SmartWorkflow has been enabled with the following configuration:
If a security administrator opens a new session and after making changes to policy, submits the session for approval will be displayed as:
A. Not Approved
B. In progress
C. Awaiting Approval
D. Approved
正解：B
質問 3：
A VPN Tunnel Interface (VTI) is defined on SecurePlatform Pro as:
vpn shell interface add numbered 10.10.0.1 10.10.0.2 madrid.cp
What do you know about this VTI?
A. The local Gateway's object name is madrid.cp.
B. 10.10.0.1 is the local Gateway's internal interface, and 10.10.0.2 is the internal interface of the remote Gateway.
C. The peer Security Gateway's name is madrid.cp.
D. The VTI name is madrid.cp.
正解：C
質問 4：
What tools CANNOT be launched from SmartUpdate NGX R65?
A. cpinfo
B. Nokia Voyager
C. SecurePlatform Web UI
D. snapshot
正解：D
質問 5：
Which of the following SSL Network Extender server-side prerequisites are correct? Select all that apply.
A. The VPN1-Gateway must be configured to work with Visitor Mode
B. To use Integrity Clientless Security (ICS), you must install the ICS server or configuration tool.
C. The specific VPN-1 Security Gateway must be configured as a member of the VPN-1 Remote Access Community.
D. There are distinctly separate access rules required for SecureClient users vs. SSL Network Extender users.
正解：A,B,C
質問 6：
Rachel is the Security Administrator for a university. The university's FTP servers have old hardware and software. Certain FTP commands cause the FTP servers to malfunction. Upgrading the FTP servers is not an option at this time. Which of the following options will allow Rachel to control which FTP commands pass through the Security Gateway protecting the FTP servers?
A. Web Intelligence > Application Layer > FTP Settings
B. Rule Base > Action Field > Properties
C. FTP Service Object > Advanced > Blocked FTP Commands
D. Global Properties > Security Server > Allowed FTP Commands
E. SmartDefense > Application Intelligence > FTP Security Server
正解：E
質問 7：
Which type of routing relies on a VPN Tunnel Interface (VTI) to route traffic?
A. Host-based VPN
B. Subnet-based VPN
C. Route-based VPN
D. Domain-based VPN
正解：C
質問 8：
Which external user authentication protocols are supported in SSL VPN?
A. LDAP, RADIUS, TACACS, SecurID
B. LDAP, RADIUS, Active Directory, SecurID
C. DAP, SecurID, Check Point Password, OS Password, RADIUS, TACACS
D. LDAP, Active Directory, SecurID
正解：C
川*栞 -
この問題集を購入してから２週間程度勉強して今日試験を受けに行きました。
見事、試験に合格できました！！
とても質の良い問題集でした。かなりお勧めです！！
ありがとうございました。