nerdexam
Check_Point

156-815.71 · Question #36

To increase the security of your NOC, you decide to install a NOC firewall and hire a firewall expert to manage it. The firewall expert wants to hide all of the invalid IP addresses of the CMAs, by…

The correct answer is B. No, because Hide NAT does not allow remote Gateways to connect directly to the CMAs. Check Point 156-815.71 Exam

Multi-Domain Security Management and Provider-1

Question

To increase the security of your NOC, you decide to install a NOC firewall and hire a firewall expert to manage it. The firewall expert wants to hide all of the invalid IP addresses of the CMAs, by installing a Hide NAT Policy on the firewall. Will this plan work?

Options

  • ANo, because VPN-1 NGX does not allow Administrators to configure Hide NAT on objects with
  • BNo, because Hide NAT does not allow remote Gateways to connect directly to the CMAs.
  • CYes, but only if Hide NAT is configured with the Hide address of the leading MDS interface.
  • DYes, because the CMAs use virtual IP addresses, and they require a single valid IP address to

How the community answered

(51 responses)
  • A
    4% (2)
  • B
    84% (43)
  • C
    10% (5)
  • D
    2% (1)

Explanation

Check Point 156-815.71 Exam

Topics

#Hide NAT#CMA#NOC firewall#IP addressing

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 156-815.71 Practice