When you have your directional VPN enforcement rule set to ''Internal_Clear'' , what does this represent?

AAll interfaces are designated ''External''

BVOIP traffic

CDo not perform directional VPN enforcements on this traffic

DAll interfaces are designated as ''Internal''

Answer : D

You are trying to set ''VPN Directional Match'' on the VPN column but the ''Directional Match Condition'' option is not there. Why is this missing?

AThe peer does not support this feature.

BThis can only be done in Traditional Mode.

CYou must turn this feature on through Global Properties > VPN > Advanced, then select Enable VPN Directional Match in VPN column.

DThis must be enabled on the Gateway in ''Advanced Settings''.

Answer : C

How do you designate the ''enforcement point gateway'' for the peers involved in ''VPN Directional Enforcement''?

AFrom the WebUI's of the peers add a static route to the ''designated enforcement point''.

BIn the file $FWDIR/conf/user.def on each peer with a route entry to the enforcement point gateway.

CDesignate this gateway in the VPN community properties.

DEditing file $FWDIR/conf/vpn_route.conf on each peer with a route entry to the enforcement point gateway.

Answer : D

How does the ''Directional Enforcement'' rule manage subsequent packet inspection?

A''Directional Enforcement'' is only applied to the first packet of the connection, including packets in the opposite direction.

B''Directional Enforcement'' is applied to all packets in the connection.

C''Directional Enforcement'' applies only to the first packet of the connection, but does not include the packets in the opposite direction.

D''Directional Enforcement'' is considered trusted traffic and therefore is not inspected.

Answer : A

How do you add the route entry for the ''Enforcement Point Gateway'' on the Management Server?

ADesignate this gateway in the VPN community properties.

BUpdate file $FWDIR/conf/user.def on each peer with a route entry to the enforcement point gateway.

CEdit file $FWDIR/conf/vpn_route.conf with a new route entry.

DEdit peers' WebUI to add a static route to the ''designated enforcement point''.

Answer : C

Free 156-115.77 Questions for CheckPoint 156-115.77 Exam as PDF & Practice Test Software