Examice

Exam 156-3158120 All QuestionsBrowse all questions from this exam

Question 62

Is it possible to establish a VPN before the user login to the Endpoint Client.

Yes, you had to set neo_remember_user_password to true in the trac.defaults of the Remote Access Client or you can use the endpoint_vpn_remember_user_password attribute in the trac_client_1.ttm file located in the $FWDIR/conf directory on the Security Gateway

Yes, you had to set neo_always_connected to true in the trac.defaults of the Remote Access Client or you can use the endpoint_vpn_always_connected attribute in the trac_client_1.ttm file located in the $FWDIR/conf directory on the Security Gateway

No, the user must login first.

Yes, you have to enable Machine Authentication in the Gateway object of the Smart Console

Correct Answer: D

Yes, you have to enable Machine Authentication in the Gateway object of the Smart Console. This method allows authentication using a machine certificate, which can occur before the user logs in to the system. This ensures that the VPN connection can be established prior to user login, providing necessary network access for the login process itself.

Discussion

KuKuKu83Option: D

D. Machine-only authentication - Authenticate with a machine certificate only. This mode is available before and after the user logs in to Windows. https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_RemoteAccessVPN_AdminGuide/Topics-VPNRG/Machine-Certificate.htm?tocpath=_____12

RajeshkashiOption: D

Answer is D