A cluster contains two members, with external interfaces 172.28.108.1 and 172.28.108.2. The
internal interfaces are 10.4.8.1 and 10.4.8.2. The external cluster’s IP address is 172.28.108.3,
and the internal cluster’s IP address is 10.4.8.3. The synchronization interfaces are 192.168.1.1
and 192.168.1.2. The Security Administrator discovers State Synchronization is not working
properly, cphaprob if command output displays as follows: What is causing the State
Synchronization problem?

How can you completely tear down a specific VPN tunnel in an intranet IKE VPN deployment?

How can you prevent delay-sensitive applications, such as video and voice traffic, from being

dropped due to long queue using Check Point QoS solution?

You are preparing to deploy a VPN-1 Pro Gateway for VPN-1 NGX. You have five systems to
choose from for the new Gateway, and you must conform to the following requirements:
Operating-system vendor’s license agreement
Check Point’s license agreement
Minimum operating-system hardware specification
Minimum Gateway hardware specification
Gateway installed on a supported operating system (OS)
Which machine meets ALL of the following requirements?

In a Management High Availability (HA) configuration, you can configure synchronization to occur
automatically, when:

1. The Security Policy is installed.
2. The Security Policy is saved.
3. The Security Administrator logs in to the secondary SmartCenter Server, and changes its status
to active.
4. A scheduled event occurs.
5. The user database is installed.
Select the BEST response for the synchronization sequence. Choose one.

Stephanie wants to reduce the encryption overhead and improve performance for her mesh VPN
Community. The Advanced VPN Properties screen below displays adjusted page settings:

What can Stephanie do to achieve her goal?

Steve tries to configure Directional VPN Rule Match in the Rule Base. But the Match column does
not have the option to see the Directional Match. Steve sees the following screen.

What is the problem?

Jerry is concerned that a denial-oF. service (DoS) attack may affect his VPN Communities. He
decides to implement IKE DoS protection. Jerry needs to minimize the performance impact of
implementing this new protection. Which of the following configurations is MOST appropriate for
Jerry?

Where can a Security Administrator adjust the unit of measurement (bps, Kbps or Bps), for Check
Point QoS bandwidth?

You are configuring the VoIP Domain object for an H.323 environment, protected by VPN-1 NGX.
Which VoIP Domain object type can you use?