VPN Link Selection will perform the following when the primary VPN link goes down?

• A.The Firewall will drop the packets.
• B.The Firewall can update the Link Selection entries to start using a different link for the same tunnel.
• C.The Firewall will send out the packet on all interfaces.
• D.The Firewall will inform the client that the tunnel is down.

Correct Answer: B

Explanation
VPN Link Selection is a feature that allows the Security Gateway to select the best link for each VPN tunnel based on the network topology and the Link Selection configuration1. When the primary VPN link goes down, the Firewall can update the Link Selection entries to start using a different link for the same tunnel, as long as the remote peer supports this feature and has multiple IP addresses configured2. This way, the VPN tunnel can be maintained without interruption or renegotiation. The other options are not correct because:

Firewall
A). The Firewall will not drop the packets, but will try to send them over another link if possible.

Firewall
C). The Firewall will not send out the packet on all interfaces, but will use the routing table to determine the best interface for each destination.

Firewall
D). The Firewall will not inform the client that the tunnel is down, but will try to keep the tunnel up by switching to another link.
References: IPSec VPN - Link Selection, Outgoing VPN Link Selection on a gateway with multiple external interfaces

Comment: *

Name: *

Email: *

Verification: *

Which of the following blades is NOT subscription-based and therefore does not have to be renewed on a regular basis?

• A.Threat Emulation
• B.Advanced Networking Blade
• C.Application Control
• D.Anti-Virus

Comment: *

Name: *

Email: *

Verification: *

After having saved the Clish Configuration with the "save configuration config.txt" command, where can you find the config.txt file?

• A.You will find it in the home directory of your user account (e.g. /home/admin/)
• B.You can locate the file via SmartConsole > Command Line.
• C.You have to launch the WebUI and go to "Config" -> "Export Config File" and specifiy the destination directory of your local file system.
• D.You cannot locate the file in the file system since Clish does not have any access to the bash file system

Comment: *

Name: *

Email: *

Verification: *

Which command is used to add users to or from existing roles?

• A.Add rba user <User Name> roles <List>
• B.Add user <User Name>
• C.Add rba user <User Name>
• D.Add user <User Name> roles <List>

Comment: *

Name: *

Email: *

Verification: *

GAiA Software update packages can be imported and installed offline in situation where:

• A.Security Gateway with GAiA does NOT have SSH access to Internet.
• B.The desired CPUSE package is ONLY available in the Check Point CLOUD.
• C.Security Gateway with GAiA does NOT have access to Internet.
• D.Security Gateway with GAiA does NOT have SFTP access to Internet

Comment: *

Name: *

Email: *

Verification: *