When simulating a problem on CLusterXL cluster with cphaprob -d STOP -s problem -t 0 register, to initiate a failover on an active cluster member, what command allows you remove the problematic state?

• A. cphaprob -d STOP unregister
• B. cphaprob -d unregister STOP
  esting a failover in a controlled manner using following command;
  # cphaprob -d STOP -s problem -t 0 register
  This will register a problem state on the cluster member this was entered on;If you then run;
  # cphaprob list
  this will show an entry named STOP.
  to remove this problematic register run following;
  # cphaprob -d STOP unregister
• C. cphaprob unregister STOP
• D. cphaprob STOP unregister

You have created a Rule Base for firewall, websydney. Now you are going to create a new policy package with security and address translation rules for a second Gateway.

What is TRUE about the new package's NAT rules?

• A. Rules 4 and 5 will appear in the new package.
• B. NAT rules will be empty in the new package.
• C. Rules 1, 2, 3 will appear in the new package.
• D. Only rule 1 will appear in the new package.

Which of these options is an implicit MEP option?

• A. Primary-backup
• B. Load Sharing
  There are three methods to implement implicit MEP:
  First to Respond, in which the first Security Gateway to reply to the peer Security Gateway is chosen. An organization would choose this option if, for example, the organization has two Security Gateways in a MEP configuration - one in London, the other in New York. It makes sense for VPN-1 peers located in England to try the London Security Gateway first and the NY Security Gateway second. Being geographically closer to VPN peers in England, the London Security Gateway is the first to respond, and becomes the entry point to the internal network. See: First to Respond.
  Primary-Backup, in which one or multiple backup Security Gateways provide "high availability" for a primary Security Gateway. The remote peer is configured to work with the primary Security Gateway, but switches to the backup Security Gateway if the primary goes down. An organization might decide to use this configuration if it has two machines in a MEP environment, one of which is stronger than the other. It makes sense to configure the stronger machine as the primary. Or perhaps both machines are the same in terms of strength of performance, but one has a cheaper or faster connection to the Internet. In this case, the machine with the better Internet connection should be configured as the primary. See: Primary-Backup Security Gateways.
  Load Distribution, in which the remote VPN peer randomly selects a Security Gateway with which to open a connection. For each IP source/destination address pair, a new Security Gateway is randomly selected. An organization might have a number of machines with equal performance abilities. In this case, it makes sense to enable load distribution. The machines are used in a random and equal way. See: Random Selection.
• C. Source address based
• D. Round robin

To qualify as an Identity Awareness enabled rule, which column MAY include an Access Role?

• A. User
• B. Track
• C. Action
• D. Source