What is the behavior of ClusterXL in a High Availability environment?

Which Check Point QoS feature marks the Type of Service (ToS) byte in the IP header?

You plan to incorporate OPSEC servers, such as Websense and Trend Micro, to do content
filtering. Which segment is the BEST location for these OPSEC servers, when you consider
Security Server performance and data security?

VPN-1 NGX supports VoIP traffic in all of the following environments, EXCEPT which
environment?

The following rule contains an FTP resource object in the Service field:
Source: local_net
Destination: Any
Service: FTP-resource object
Action: Accept
How do you define the FTP Resource Properties > Match tab to prevent internal users from
receiving corporate files from external FTP servers, while allowing users to send files?

Cody is notified by blacklist.org that his site has been reported as a spam relay, due to his SMTP
Server being unprotected. Cody decides to implement an SMTP Security Server, to prevent the
server from being a spam relay. Which of the following is the most efficient configuration method?

You want to upgrade a SecurePlatform NG with Application Intelligence (Al) R55 Gateway to
SecurePlatform NGX R60 via SmartUpdate. Which package is needed in the repository before

upgrading?

Your current stanD. alone VPN-1 NG with Application Intelligence (Al) R55 installation is running
on SecurePlatform. You plan to implement VPN-1 NGX in a distributed environment, where the
existing machine will be the VPN-1 Pro Gateway. An additional machine will serve as the
SmartCenter Server. The new machine runs on a Windows Server 2003. You need to upgrade the
NG with Al R55 SmartCenter Server configuration to VPN-1 NGX.
How do you upgrade to VPN-1 NGX?

If you check the box “Use Aggressive Mode”, in the IKE Properties dialog box:

DShield is a Check Point feature used to block which of the following threats?