Online Access Free 156-315 Exam Questions

Steve tries to configure Directional VPN Rule Match in the Rule Base. But the Match column does not have the option to see the Directional Match. Steve sees the following screen. What is the problem?

• A.Steve must enable Advanced Routing on each Security Gateway.
• B.Steve must enable VPN Directional Match on the gateway object's VPN tab.
• C.Steve must enable a dynamic-routing protocol, such as OSPF, on the Gateways.
• D.Steve must enable directional_match(true) in the objects_5_0.C file on SmartCenter Server.
• E.Steve must enable VPN Directional Match on the VPN Advanced screen, in Global properties.

Regarding QoS guarantees and limits, which of the following statements is FALSE?

• A.If a guarantee is defined in a sub-rule, a guarantee must be defined for the rule above it.
• B.If both a rule and per-connection limit are defined for a rule, the per-connection limit must not be greater than the rule limit.
• C.The guarantee of a sub-rule cannot be greater than the guarantee defined for the rule above it.
• D.A rule guarantee must not be less than the sum defined in the guarantees' sub-rules.
• E.If both a limit and guarantee per rule are defined in a QoS rule, the limit must be smaller than the guarantee.

You plan to migrate a VPN-1 NG with Application Intelligence (AI) R55 SmartCenter Server to VPN-1 NGX. You also plan to upgrade four VPN-1 Pro Gateways at remote offices, and one local VPN-1 Pro Gateway at your company's headquarters. The SmartCenter Server configuration must be migrated. What is the correct procedure to migrate the configuration?

• A.1. Upgrade the five remote Gateways via SmartUpdate.
  2. Upgrade the SmartCenter Server, using the VPN-1 NGX CD.
• B.1. From the VPN-1 NGX CD in the SmartCenter Server, select "advance upgrade".
  2. After importing the SmartCenter configuration into the new NGX SmartCenter, reboot.
  3. Upgrade all licenses and software on all five remote Gateways via SmartUpdate.
• C.1. Upgrade the SmartCenter Server, using the VPN-1 NGX CD.
  2. Reinstall and update the licenses of the five remote Gateways.
• D.1. Copy the $FWDIR\conf directory from the SmartCenter Server.
  2. Save directory contents to another directory.
  3. Uninstall the SmartCenter Server, and install a new SmartCenter Server.
  4. Move directory contents to $FWDIR\conf.
  5. Reinstall all gateways using NGX and install a policy.
• E.Upgrade the SmartCenter Server and the five remote Gateways via SmartUpdate, at the same time.

In a distributed VPN-1 Pro NGX environment, where is the Internal Certificate Authority (ICA) installed?

• A.On the Security Gateway
• B.On the Smart View Monitor
• C.On the Policy Server
• D.On the primary SmartCenter Server
• E.Certificate Manager Server

You must set up SIP with a proxy for your network. IP phones are in the 172.16.100.0 network. The Registrar and proxy are installed on host 172.16.100.100. To allow handover enforcement for outbound calls from SIP-net to network Net_B on the Internet, you have defined the following objects:
Network object: SIP-net: 172.16.100.0/24
SIP-gateway: 172.16.100.100
VoIP Domain object: VoIP_domain_A
1.End-point domain: SIP-net
2.VoIP gateway installed at: SIP-gateway host object
How would you configure the rule?

• A.VoIP_domain_A/Net_B/sip_any, and sip/accept
• B.VoIP_Gateway_A/Net_B/sip/accept
• C.VoIP_domain_A/Net_B/sip_any/accept
• D.SIP-Gateway/Net_B/sip/accept
• E.SIP-Gateway/Net_B/sip_any/accept