156-310 Free Dumps Study Materials
Question 18: Vered is a Security Administrator preparing to migrate her organization's IKE VPNs from pre-shared
secrets to PKI with certificates. Vered's organization has client-to-site VPNs between SecureClients and
Enforcement Modules, and site-to-site VPNs between Enforcement Modules. Vered will use the
VPN-1/FireWall-1 Internal Certificate Authority (ICA), to generate and maintain certificates. Which of
the following statements is TRUE?
Vered can:
A. Install and configure an OPSEC-certified Certificate Authority product. Vered cannot use the Internal
Certificate Authority (ICA) to accomplish this task.
B. Migrate the organization's site-to-site VPNs, but she cannot migrate the organization's client-to-site
VPNs.
C. Either migrate the PKI with certificates for her VPNs, or use the ICA for certificate generation and
maintenance. Vered cannot do both.
D. Migrate both the site-to-site VPNs and the client-to-site VPNs. She can use the ICA to generate and
maintain
certificates.
E. Migrate the organization's client-to-site VPNs, if she moves from SecureClient to SecuRemote. She
cannot
migrate the site-to-site VPNs.
Correct Answer: D