Examice

Exam 156-31581 All QuestionsBrowse all questions from this exam

Question 190

Is it possible to establish a VPN before the user login to the Endpoint Client.

yes, you had to set neo_remember_user_password to true in the trac.defaults of the Remote Access Client or you can use the endpoint_vpn_remember_user_password attribute in the trac_client_1.ttm file located in the $FWDIR/conf directory on the Security Gateway.

no, the user must login first.

yes, you had to set neo_always_connected to true in the trac.defaults of the Remote Access Client or you can use the endpoint_vpn_always_connected attribute in the trac_client_1.ttm file located in the $FWDIR/conf directory on the Security Gateway.

yes, you had to enable Machine Authentication in the Gateway object of the Smart Console.

Correct Answer: D

It is possible to establish a VPN before the user logs in to the Endpoint Client by enabling Machine Authentication in the Gateway object of the Smart Console. This allows the machine itself, using a machine certificate, to authenticate to the VPN, which can be done regardless of the user login state.

Discussion

McBeanoOption: D

D. Machine-only authentication - Authenticate with a machine certificate only. This mode is available before and after the user logs in to Windows. https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_RemoteAccessVPN_AdminGuide/Topics-VPNRG/Machine-Certificate.htm?tocpath=_____12

ShahrouzOption: D

I think D is correct

BasselhOption: D

D is correct