You plan to incorporate OPSEC servers, such as Websense and Trend Micro, to do content
filtering. Which segment is the BEST location for these OPSEC servers, when you consider
Security Server performance and data security?

How can you completely tear down a specific VPN tunnel in an intranet IKE VPN deployment?

The following rule contains an FTP resource object in the Service field:
Source: local_net
Destination: Any
Service: FTP-resource object
Action: Accept
How do you define the FTP Resource Properties > Match tab to prevent internal users from
receiving corporate files from external FTP servers, while allowing users to send files?

The following rule contains an FTP resource object in the Service field:
Source: local_net Destination: Any Service: FTP-resource object Action: Accept
How do you define the FTP Resource Properties > Match tab to prevent internal users from
sending corporate files to external FTP servers, while allowing users to retrieve files?

You have an internal FTP server, and you allow uploading, but not downloading. Assume Network
Address Translation (NAT) is set up correctly and you want to add an inbound rule with:
Source: Any
Destination: FTP server
Service: an FTP resource object.
How do you configure the FTP resource object and the action column in the rule to achieve this
goal?

VPN-1 NGX supports VoIP traffic in all of the following environments, EXCEPT which
environment?

Where can a Security Administrator adjust the unit of measurement (bps, Kbps or Bps), for Check
Point QoS bandwidth?

Cody is notified by blacklist.org that his site has been reported as a spam relay, due to his SMTP
Server being unprotected. Cody decides to implement an SMTP Security Server, to prevent the
server from being a spam relay. Which of the following is the most efficient configuration method?

You want to upgrade a SecurePlatform NG with Application Intelligence (Al) R55 Gateway to
SecurePlatform NGX R60 via SmartUpdate. Which package is needed in the repository before
upgrading?

You configure a Check Point QoS Rule Base with two rules: an H.323 rule with a weight of 10, and
the Default Rule with a weight of 10. The H.323 rule includes a per-connection guarantee of 384
Kbps, and a per-connection limit of 512 Kbps. The per-connection guarantee is for four
connections, and no additional connections are allowed in the Action properties. If traffic passing
through the QoS Module matches both rules, which of the following statements is true?