Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

CheckPoint Exam 156-215.81 Topic 6 Question 37 Discussion

Actual exam question for CheckPoint's 156-215.81 exam
Question #: 37
Topic #: 6
[All 156-215.81 Questions]

You had setup the VPN Community NPN-Stores' with 3 gateways. There are some issues with one remote gateway(l .1.1.1) and an your local gateway. What will be the best log filter to see only the IKE Phase 2 agreed networks for both gateways.

Show Suggested Answer Hide Answer
Suggested Answer: A

This log filter will show only the logs that have the action of ''Key Install'', which means that the Security Gateway installed a new encryption key for the VPN tunnel1. It will also show only the logs that have the IP address of 1.1.1.1, which is the remote gateway that has some issues.Finally, it will show only the logs that have the Quick Mode, which is the IKE Phase 2 negotiation that establishes the agreed networks for both gateways2.

The other log filters are not correct because they either include the Main Mode, which is the IKE Phase 1 negotiation that establishes the secure channel between the gateways2, or they do not specify the IP address of the remote gateway.

Logging and Monitoring R81.20 Administration Guide

Remote Access VPN R81.20 Administration Guide

Remote Access VPN R81 Administration Guide


by Beckie at Apr 08, 2024, 06:49 AM

Limited Time Offer

25%

Off

Get Premium 156-215.81 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel
Denae
8 months ago
I think option D) Blade:''VPN''AND VPN-Stores AND Quick Mode could also be a valid choice as it specifically mentions Quick Mode
upvoted 0 times
...
Yolande
8 months ago
I agree with User1, option A) makes sense because we need to see the IKE Phase 2 agreed networks
upvoted 0 times
...
Yolando
8 months ago
I disagree, I believe option C) action:''Key Install'' AND 1.1.1.1 AND Main Mode would be more appropriate
upvoted 0 times
...
Sabra
8 months ago
I think the best log filter would be option A) action:''Key Install' AND 1.1.1.1 AND Quick Mode
upvoted 0 times
...
Cherry
8 months ago
I see your point, option A does make more sense for this scenario.
upvoted 0 times
...
Noelia
8 months ago
That's true, maybe option A is the right one after all.
upvoted 0 times
...
Tracey
9 months ago
But option C includes Main Mode, we only need to see IKE Phase 2 agreed networks.
upvoted 0 times
...
Cherry
10 months ago
I'm not so sure, I think option C might be the better choice.
upvoted 0 times
...
Noelia
10 months ago
I agree with Tracey, option A seems to be the most appropriate.
upvoted 0 times
...
Tracey
10 months ago
I think the best log filter would be option A.
upvoted 0 times
...
Lindy
11 months ago
Hmm, I don't know, you guys. I'm kind of drawn to option B. The Blade:''VPN'' and the VPN-Stores part seems pretty specific to the scenario. And Main Mode is the way to go for IKE Phase 2, like Crista said.
upvoted 0 times
...
Tracie
11 months ago
Ooh, good point, Tennie. I'm kinda leaning towards option A too. At least it's got the right gateway and the right action. Can't be too picky with these VPN questions, am I right?
upvoted 0 times
Anisha
9 months ago
Yeah, I agree. Option A seems to be the most specific and relevant.
upvoted 0 times
...
Verdell
9 months ago
I think option A is the best choice. It includes the correct gateway and action.
upvoted 0 times
...
...
Tennie
11 months ago
Hold up, guys. What about option A? Doesn't that also mention the Key Install action and the 1.1.1.1 gateway? I'm not sure Quick Mode is the right choice, but it's worth considering.
upvoted 0 times
...
Crista
11 months ago
Yeah, I agree with you, Alyce. Plus, Main Mode is the way to go for IKE Phase 2, not Quick Mode. That's just basic VPN protocol knowledge, right?
upvoted 0 times
...
Alyce
11 months ago
Hmm, let's see. I'm thinking option C might be the best way to go. The key install action and the 1.1.1.1 gateway seem like the most relevant info to filter on for IKE Phase 2.
upvoted 0 times
...
Pansy
11 months ago
Whoa, this is a tricky one! VPN issues can be such a headache, you know? But I like how they're really testing our knowledge on the nitty-gritty details here.
upvoted 0 times
...

Save Cancel