Which of the following firewall modes DOES NOT allow for Identity Awareness to be deployed?
A.
Bridge
B. Load Sharing
C.
High Availability
D.
Fail Open
Get 50% Discount on All Your Purchases
at PrepAway.com - Latest Exam Questions
This is ONE TIME OFFER
50%
A)
0
0
D
0
0
It is not A:
Identity Awareness can be deployed in Bridge mode or Route mode
It is not B or C:
Identity awareness supports ClusterXL HA and LS modes.
Therefore D is right!
0
0
D is correct.
0
0
Answer is D. Explanation
Identity Awareness can be deployed in Bridge mode or Route mode.
– In the Bridge mode, it can use an existing subnet with no change to the hosts’ IP addresses.
– In the Route mode, the Security Gateway acts as a router with different subnets connected to its network interfaces.
For redundancy, you can deploy a Security Cluster in Active-Standby (HA) or Active-Active (LS) modes. Identity awareness supports ClusterXL HA and LS modes.
1
0
A
0
0
Identity Awareness can be deployed in Bridge mode or Route mode.
In the Bridge mode, it can use an existing subnet with no change to the hosts’ IP addresses.
In the Route mode, the Security Gateway acts as a router with different subnets connected to its network interfaces.
For redundancy, you can deploy a Security Cluster in Active-Standby (HA) or Active-Active (LS) modes. Identity awareness supports ClusterXL HA and LS modes.
so Answer is “D”
0
0
if fail openen refers to Threat Prevention fail mode, in fail open all connections are allowed, so D
0
0
here is the link. Answer is D
https://sc1.checkpoint.com/documents/R76/CP_R76_IdentityAwareness_AdminGuide/62007.htm
0
0