The following is cphaprob state command output from a ClusterXL New mode High Availability
memberWhen member 192.168.1.2 fails over and restarts, which member will become active?

What is the command to upgrade a SecurePlatform NG with Application Intelligence (Al) R55
SmartCenter Server to VPN-1 NGX using a CD?

You have a production implementation of Management High Availability, at version VPN-1 NG with
Application Intelligence R55. You must upgrade your two SmartCenter Servers to VPN-1 NGX.
What is the correct procedure?

Your primary SmartCenter Server is installed on a SecurePlatform Pro machine, which is also a
VPN-1 Pro Gateway. You want to implement Management High Availability (HA). You have a
spare machine to configure as the secondary SmartCenter Server. How do you configure the new
machine to be the standby SmartCenter Server, without making any changes to the existing
primary SmartCenter Server? (Changes can include uninstalling and reinstalling.)

You are preparing computers for a new ClusterXL deployment. For your cluster, you plan to use
four machines with the following configurations:
Cluster Member 1: OS: SecurePlatform, NICs: QuadCard, memory: 256 MB, Security Gateway
version: VPN-1 NGX

Cluster Member 2: OS: SecurePlatform, NICs: four Intel 3Com, memory: 512 MB, Security
Gateway version: VPN-1 NGX
Cluster Member 3: OS: SecurePlatform, NICs: four other manufacturers, memory: 128 MB,
Security Gateway version: VPN-1 NGX
SmartCenter Pro Server: MS Windows Server 2003, NIC: Intel NIC (one), Security Gateway and
primary SmartCenter Server installed version: VPN-1 NGX
Are these machines correctly configured for a ClusterXL deployment?

You set up a mesh VPN Community, so your internal networks can access your partner’s network,
and vice versa. Your Security Policy encrypts only FTP and HTTP traffic through a VPN tunnel. All
other traffic among your internal and partner networks is sent in clear text. How do you configure
the VPN Community?

How does a standby SmartCenter Server receive logs from all Security Gateways, when an active
SmartCenter Server fails over?

You want only RAS signals to pass through H.323 Gatekeeper and other H.323 protocols, passing
directly between end points. Which routing mode in the VoIP Domain Gatekeeper do you select?

Which component functions as the Internal Certificate Authority for VPN-1 NGX?

You are configuring the VoIP Domain object for a Skinny Client Control Protocol (SCCP)

environment protected by VPN-1 NGX. Which VoIP Domain object type can you use?