935 お客様のコメント
質問 1：
You want only RAS signals to pass through H.323 Gatekeeper and other H.323 protocols, passing directly between end points. Which routing mode in the VoIP Domain Gatekeeper do you select?
A. Direct
B. Direct and Call Setup
C. Call Setup and Call Control
D. Call Setup
正解：A
質問 2：
You are preparing computers for a new ClusterXL deployment. For your cluster, you plan to use three machines with the following configurations:Are these machines correctly configured for a ClusterXL deployment?
A. No, QuadCards are not supported with ClusterXL.
B. Yes, these machines are configured correctly for a ClusterXL deployment.
C. No, a cluster must have an even number of machines.
D. No, all machines in a cluster must be running on the same OS.
E. No, ClusterXL is not supported on Red Hat Linux.
正解：D
質問 3：
Which OPSEC server is used to prevent users from accessing certain Web sites?
A. LEA
B. UFP
C. URI
D. CVP
E. AMON
正解：B
質問 4：
When you add a resource service to a rule, which ONE of the following actions occur?
A. VPN-1 SecureClient users attempting to connect to the object defined in the Destination column of the rule will receive a new Desktop Policy from the resource.
B. All packets that match the resource in the rule will be dropped.
C. Users attempting to connect to the destination of the rule will be required to authenticate.
D. All packets matching that rule are either encrypted or decrypted by the defined resource.
E. All packets matching the resource service rule are analyzed or authenticated, based on the resource properties.
正解：E
質問 5：
Wayne configures an HTTP Security Server to work with the content vectoring protocol to screen forbidden sites. He has created a URI resource object using CVP with the following settings:
Use CVP
Allow CVP server to modify content
Return data after content is approved
He adds two rules to his Rule Base: one to inspect HTTP traffic going to known forbidden sites, the other to allow all other HTTP traffic.
Wayne sees HTTP traffic going to those problematic sites is not prohibited.
What could cause this behavior?
A. The Security Server is communicating with the CVP server, but no restriction is defined in the CVP server.
B. The Security Server is not configured correctly.
C. The Security Server Rule is after the general HTTP Accept Rule.
D. The Security Server is not communicating with the CVP server.
正解：C
質問 6：
Stephanie wants to reduce the encryption overhead and improve performance for her mesh VPN Community. The Advanced VPN Properties screen below displays adjusted page settings:What can Stephanie do to achieve her goal?
A. Check the box "Support IP compression".
B. Check the box "Use aggressive mode".
C. Change the setting "Use Diffie-Hellman group" to "Group 5 (1536 bit)".
D. Check the box "Use Perfect Forward Secrecy".
E. Reduce the setting "Renegotiate IKE security associations every" to "720".
正解：A
You want only RAS signals to pass through H.323 Gatekeeper and other H.323 protocols, passing directly between end points. Which routing mode in the VoIP Domain Gatekeeper do you select?
A. Direct
B. Direct and Call Setup
C. Call Setup and Call Control
D. Call Setup
正解：A
質問 2：
You are preparing computers for a new ClusterXL deployment. For your cluster, you plan to use three machines with the following configurations:Are these machines correctly configured for a ClusterXL deployment?
A. No, QuadCards are not supported with ClusterXL.
B. Yes, these machines are configured correctly for a ClusterXL deployment.
C. No, a cluster must have an even number of machines.
D. No, all machines in a cluster must be running on the same OS.
E. No, ClusterXL is not supported on Red Hat Linux.
正解：D
質問 3：
Which OPSEC server is used to prevent users from accessing certain Web sites?
A. LEA
B. UFP
C. URI
D. CVP
E. AMON
正解：B
質問 4：
When you add a resource service to a rule, which ONE of the following actions occur?
A. VPN-1 SecureClient users attempting to connect to the object defined in the Destination column of the rule will receive a new Desktop Policy from the resource.
B. All packets that match the resource in the rule will be dropped.
C. Users attempting to connect to the destination of the rule will be required to authenticate.
D. All packets matching that rule are either encrypted or decrypted by the defined resource.
E. All packets matching the resource service rule are analyzed or authenticated, based on the resource properties.
正解：E
質問 5：
Wayne configures an HTTP Security Server to work with the content vectoring protocol to screen forbidden sites. He has created a URI resource object using CVP with the following settings:
Use CVP
Allow CVP server to modify content
Return data after content is approved
He adds two rules to his Rule Base: one to inspect HTTP traffic going to known forbidden sites, the other to allow all other HTTP traffic.
Wayne sees HTTP traffic going to those problematic sites is not prohibited.
What could cause this behavior?
A. The Security Server is communicating with the CVP server, but no restriction is defined in the CVP server.
B. The Security Server is not configured correctly.
C. The Security Server Rule is after the general HTTP Accept Rule.
D. The Security Server is not communicating with the CVP server.
正解：C
質問 6：
Stephanie wants to reduce the encryption overhead and improve performance for her mesh VPN Community. The Advanced VPN Properties screen below displays adjusted page settings:What can Stephanie do to achieve her goal?
A. Check the box "Support IP compression".
B. Check the box "Use aggressive mode".
C. Change the setting "Use Diffie-Hellman group" to "Group 5 (1536 bit)".
D. Check the box "Use Perfect Forward Secrecy".
E. Reduce the setting "Renegotiate IKE security associations every" to "720".
正解：A
Fujisaki -
ゼロから丁寧に解説されていて解りやすい。この1冊に詰まっています。改めて実感します。