You set up a mesh VPN Community, so your internal networks can access your partner's network, and vice versa. Your Security Policy encrypts only FTP and HTTP traffic through a VPN tunnel. All other traffic among your internal and partner networks is sent in clear text.
How do you configure the VPN Community?

• A. Disable "accept all encrypted traffic", and put FTP and HTTP in the Excluded services in the Community object. Add a rule in the Security Policy for services FTP and http, with the Community object in the VPN field.
• B. Enable "accept all encrypted traffic", but put FTP and HTTP in the Excluded services in the Community. Add a rule in the Security Policy, with services FTP and http, and the Community object in the VPN field.
• C. Put FTP and HTTP in the Excluded services in the Community object. Then add a rule in the Security Policy to allow Any as the service, with the Community object in the VPN field.
• D. Disable "accept all encrypted traffic" in the Community, and add FTP and HTTP services to the Security Policy, with that Community object in the VPN field.

What is the behavior of ClusterXL in a High Availability environment?

• A. The passive member responds to the virtual IP address, and both members route traffic when using their physical addresses.
• B. The active member responds to the virtual IP address,nd both members pass traffic when using their physical addresses.
• C. Both members respond to the virtual IP address, and both members pass traffic when using their physical addresses.
• D. Both members respond to the virtual IP address, but only the active member is able to pass traffic.
• E. The active member responds to the virtual IP address,nd is the only member that passes traffic

Which of the following actions is most likely to improve the performance of Check Point QoS?

• A. Install Check Point QoS only on the external interfaces of the QoS Module.
• B. Turn "per rule limits" into "per connection limits".
• C. Define weights in the Default Rule in multiples of 10.
• D. Put the most frequently used rules at the bottom of the QoS Rule Base.
• E. Turn "per rule guarantees" into "per connection guarantees".

In a Management High Availability (HA) configuration, you can configure synchronization to occur automatically, when:
1.The Security Policy is installed.
2.The Security Policy is saved.
3.The Security Administrator logs in to the secondary SmartCenter Server, and changes its status to active.
4.A scheduled event occurs.
5.The user database is installed.
Select the BEST response for the synchronization sequence. Choose one.

• A. 1,3,4
• B. 1,2,4
• C. 1,2,5
• D. 1,2,3
• E. 1,2,3,4

Jerry is concerned that a denial-of-service (DoS) attack may affect his VPN Communities.
He decides to implement IKE DoS protection. Jerry needs to minimize the performance impact of implementing this new protection. Which of the following configurations is MOST appropriate for Jerry?

• A. Set Support IKE DoS protection from identified source to "Stateless", and Support IKE DoS protection from unidentified source to "None".
• B. Set Support IKE Dos Protection from identified source, and Support IKE DoS protection from unidentified source to "Puzzles".
• C. Set Support IKE DoS protection from identified source to "Puzzles", and Support IKE DoS protection from unidentified source to "Stateless".
• D. Set Support IKE DoS protection from identified source to "Stateless," and Support IKE DoS protection from unidentified source to "Puzzles".
• E. Set "Support IKE DoS protection" from identified source, and "Support IKE DoS protection" from unidentified source to "Stateless".