• Description:Check Point Certified Security Expert NGX
• Passing Score:0%
• Practice Test - Number of questions:99 questions
• Simulation Test - Number of questions:99 questions
• Simulation Test Duration:120 minutes
• Has explanations:No

Jerry is concerned that a denial-of-service (DoS) attack may affect his VPN Communities. He decides to implement IKE DoS protection. Jerry needs to minimize the performance impact of implementing this new protection. Which of the following configurations is MOST appropriate for Jerry?

Answer(s)

1. Set Support IKE DoS protection from identified source to "Puzzles", and Support IKE DoSprotection from unidentified source to "Stateless".
2. Set Support IKE Dos Protection from identified source, and Support IKE DoS protection fromunidentified source to "Puzzles".
3. Set Support IKE DoS protection from identified source to "Stateless," and Support IKE DoSprotection from unidentified source to "Puzzles".
4. Set "Support IKE DoS protection" from identified source, and "Support IKE DoS protection"from unidentified source to "Stateless".
5. Set Support IKE DoS protection from identified source to "Stateless", and Support IKE DoSprotection from unidentified source to "None".

Set "Support IKE DoS protection" from identified source, and "Support IKE DoS protection"from unidentified source to "Stateless".