Symantec
250-530 · Question #73
An organization's security policy requires Host Integrity checks to run only when the client is connecting through a VPN concentrator whose internal interface is attached to a Gateway Enforcer…
The correct answer is C. Select "Only do Host-Integrity checking through the Gateway or DHCP Enforcer". See the full explanation below for the reasoning.
Question
An organization's security policy requires Host Integrity checks to run only when the client is connecting through a VPN concentrator whose internal interface is attached to a Gateway Enforcer. Which setting should be configured to only check Host Integrity on these external clients, but not check clients on the local network?
Options
- AApply the Host Integrity agent to the external computers only.
- BAdd the IP addresses of the internal clients that need not be checked to the "Trusted Internal IP Address Range".
- CSelect "Only do Host-Integrity checking through the Gateway or DHCP Enforcer".
- DBlock port UDP 39999 on the client firewalls of the internal clients, so that they cannot be challenged by the
How the community answered
(34 responses)- A9% (3)
- B15% (5)
- C74% (25)
- D3% (1)
Community Discussion
No community discussion yet for this question.