VMware NSX Interview Questions and Answers

VMware NSX Interview Questions and Answers

VMware NSX Interview Questions

Q. What is Service Console?

The service console is developed based up on Redhat Linux Operating system, it is used to manage the VMKernel

Q. What are the basic commands to troubleshoot  connectivity between vSphere Client /vCenter to ESX server?

service mgmt–vmware restart  (restarts host agent(vmware–hostd) on vmware esx server)

service vmware-vpxa restrat (restarts Vcenter agent service)

service network restart (restarts management networks on ESX)

Q. What is vCenter Agent?

VC agent is an agent installed on ESX server which enables communication between VC and ESX server. This Agent will be installed on ESX/ESXi will be done when you try to add the ESx host in Vcenter.

Q. What is the command used to restart SSH, NTP & Vmware Web access?

It is very important to understand the  command to start and stop services. So i have covered basic service restart command in the below VMWARE INTERVIEW QUESTIONS.

Service sshd restart

Service ntpd restart

Service vmware–webaccess restart

Q. What are the types of Ports groups in ESX/ESXi?

There are 3 types of port groups in ESX

Service console port group

VMkernel Port group

Virtual machine port group

There are only 2 types of port group in ESXi

Vmkernel Port group

Virtual Machine Port group

Q. What is VMKernel ?

VMWare Kernel is a Proprietary kernel  of vmware and is not based on any of the flavors of Linux operating systems, .VMkernel requires an operating system to boot and manage the kernel. A service console is being provided when VMWare kernel is booted. Only service console is based up on Redhat Linux OS not VMkernel.

Q. What is the use of Service Console port ?

Service console port group required to manage the ESX server and it acts as the management network for the ESX. vCenter/vSphere Client uses the service console IP’s to communicate with the ESX server. This is one of the frequently asked VMware interview questions.

Q. What is the use of VMKernel Port ?

Vmkernel port is used by ESX/ESXi for vmotion, ISCSI & NFS communications. ESXi uses Vmkernel as the management network  since it don’t have service console built with it.

Q. What is the use of Virtual Machine Port Group?

Virtual Machine port group is used by Virtual machine communication.

Q. How Virtual Machine communicates to another servers in Network ?

All the Virtual Machines which are configured in VM Port Group are able to connect to the other machines on the network. So this port group enables communication between vSwitch and Physical Switch by the use of uplink (Physical NIC) associated with the port group.

Q. What is the default number of ports configured with the Virtual Switch?

When the time of Virtual switch created, Vswitch is created with 56 ports by default. We can extend the no of ports by editing the vswitch properties.

Q. What are the different types of Partitions in ESX server?

/ -root

Swap

/var

/Var/core

/opt

/home

/tmp

VMware Interview Questions – Network Security

Q. What is MAC Address changes?

All the virtual machines nics are provide with the MAC address at the time of creation and it is stored in .VMX file. If the packet  doesn’t match with the MAC address as same as in the .VMX  file , it does not allow incoming traffic to the VM by setting this option as reject.

If it is set as Accept,ESX accepts requests to change the effective MAC address to other than the MAC address save din the .VMX file.

Q. What are the Traffic Shaping policies available in the vSwitch?

Understanding the use-cases of Traffic shaping policies are very important part of VMware interview questions. Traffic shaping policies are disabled by default. There are 3 different traffic shaping policy setting

Average Bandwidth

Peak Bandwidth

Burst Size

Q. What are the Load balancing policies available in vswitch?

Route based on the originating virtual switch port ID

Route based on source MAC hash

Route based on IP hash

Route based on the originating virtual switch port ID – Chooses an uplink based on the virtual port where the traffic entered the virtual switch.  The traffic will be always send with that same uplink until that particular uplink is failed and failed over to another NIC.

Route based on source MAC hash – Choose an uplink based on a hash of the source Ethernet MAC address.The traffic will be always send with that same uplink until that particular uplink is failed and failed over to another NIC.

Route based on IP hash – Choose an uplink based on a hash of the source and destination IP addresses of each packet.

Q. What is Forged Transmits?

Which is same as the Mac Address changes setting but it worked for the outgoing traffic but the MAC address changes setting is for incoming traffic.

Q. What is a VLAN?

A VLAN is the VIRTUAL LAN which is used to broke down the Broadcast traffic into many logical groups. Basically, one physical switch comprise of one broadcast domain. VLAN used to separate the one broadcast domain into many small pieces to separate the networks within the broadcast domain.

Q. What are the types of VLAN tagging in Vsphere?

There are 3 types of VLAN tagging available in Vsphere.

Virtual Switch Tagging (VST)

External Switch Tagging (EST)

Virtual Guest Tagging (VGT)

Q. What is VST , EST & VGT?

Please refer my blog post on  VLAN tagging

Q. What are the security options available for ESX vswitch?

Promiscuous Mode – Reject

MAC Address changes – Accept

Forged Transmits – Accept

Q. What is Promiscuous Mode?

If the promiscuous mode set to Accept, all the communication is visible to all the virtual machines, in other words all the packets are sent to all the ports on vSwitch. It can be useful when you are running virtual machines with network sniffers to capture packet in that network.

Q. What are the  types for Network Failover Detection settings?

Link Status only

Beacon Probing

Link Status only – Relies solely on the link status provided by the network adapter. This detects failures, such as cable pulls and physical switch power failures, but it cannot detect configuration errors, such as a physical switch port being blocked by spanning tree or misconfigured to the wrong VLAN or cable pulls on the other side of a physical switch.

Beacon Probing –  Sends out and listens for beacon probes — Ethernet broadcast frames sent by physical adapters to detect upstream network connection failures — on all physical Ethernet adapters in the team. In addition to link status, to determine link failure. This detects many of the failures which are not detected by Link Status.

port groups in vmware esxi | vmware interview questions 2015 | vmware networking interview questions and answers | types of port groups in vmware esxi | virtual machine port group vs vmkernel port | vmkernel port group | default port groups in vmware | service console port group

Top 50 Appian BPM/Technical Interview Questions and Answers For Freshers

Appian Interview Questions

appian technical interview questions, appian bpm interview questions,appian software engineer interview questions,appian certification questions,appian tutorial


Q. What is Appian?

Appian is the BPM expert. Appian margin the market in flexible, delivering comprehensive, BPM innovation and easy-to-use solutions made to measure the needs of governments worldwide and businesses. The Appian Enterprise BPM Suite is a 100 % Web-based solution, real-time analytics, and including integrated knowledge. Appian explains process collaboration between IT and business, allowing all customers to be part of the process of concluding corporate goals. Appian everywhere, the early and only complete BPM Suite usable on-demand, functionality, and distribute all the power of Appian Enterprise along (SaaS) Software-as-a-Service model.

Q. What do you understand by BPM?

Business process management (BPM) is a field in operations management that focuses on improving corporate performance by managing and optimizing a company’s business processes. It can therefore be described as a “process optimization process.”

Q. What is BPM Software?

Technology that automates, executes, and monitors business processes from beginning to end by connecting people to people, applications to applications, and people to applications.

Q. What do you understand by Association?

An Association is used to show relationships between data, text and other Artifacts and flow objects in a process. An association is represented by a dotted line with a lined arrowhead in a Business Process Model.

Q. What do you understand by Business process Diagram(BPD)?

A Business process Diagram is a simple diagram made up of a set of graphical elements that depicts a business process. There are four primary elements of BPD: flow objects, connecting objects, swimlanes, and atifacts.

Q. What do you understand by Business Process Model?

BPMN defines a Business process Model as a network of graphical objects, which are activities, and the flow controls that define their order of performance.

Q. What do you understand by Business Process Modeling Notation?

Business Process Modeling Notation was developed by the Business Process Management Institute to provide a process modeling notation that is understood by all process modelers, users, analysts, etc.

Q. What do you understand by connecting Objects?

Flow Objects are connected together using connecting Objects. There are three types of Connecting Objects: Sequence flow, Message Flow, and Association.

Q. Name any top compatitor of Appian BPM suite?

Pegasystems BPM Suite

Q. What are the top features of Appian BPM suite?

You can find top features here GOO.GL/1YYFIJ

Q. Is BPM Appian an open source application?

No. it is proprietary.

Q. What do you understand by Activities in BPM terms?

An activity is any work that is being performed in a process. An activity is represented by a rounded-corner rectangle in a Business Process Model. There are two types of activities tasks and sub-processes.

Q. What do you understand by Annotations?

Annotations can be used to add textual comments within a process diagram.

Q. What do you understand by Artifacts?

Artifacts allow process designers to extend the basic BPMN notation to include additional information about the process in the process diagram. There are three types of artifacts: data object, group, and annotation.

Q. What do you understand by Data Object?

Data Objects are used to show data is required or produced by activities in a process. Data Objects are represented by a picture of a piece of paper folded at the corner in a Business Process Model.

Q. What do you understand by Events?

Events are anything that “happens” during the course of a business process. Events can have a cause, referred to as a Trigger, and/or an impact, referred to as a Result. Events are based on where they occur in the flow process (start, middle, or end).

NetApp Interview Questions

NetApp Interview Questions

Q. How to improve the Netapp storage performance?

There is no direct answer for this question but we shall do it in several way.

If volume/lun present in ATA/SATA harddisk aggregate, then the volume can be migrated to FC/SAS disk aggregate. Either you can use flash cache to improve performance.
For NFS/CIFS instead of accessing from single interface, multi mode vif can be configured to get better bandwidth and fault tolerance.
Always advised to keep aggr/vol utilization below 90%.
Avoid doing multiple volume backup in single point of time.
Aggr/volume/lun reallocation can be done to re–distribute the data to multiple disk for better striping performance.
Schedule scrubbing and De-duplication scanning after business hours.
Create multiple loops and connect different types of shelf’s to each loop
Avoid mixing up different speeds of disk and different types of disk in a same aggregate.
Always keep sufficient spare disk to replace in case of disk failure. Because reconstruction time will take more time and cause negative performance.
Keep the advised version of firmware/software which is recommended by Netapp.


Q. Unable to map lun to solaris server, but solaris server side no issue. How to resolve the issue?

FROM STORAGE SIDE:

   Verify iscsi/fcp license is added in storage

   Verify iscsi/fcp session is logged in from server side use below command

Netapp> igroup show -v

   Verify luns are mapped to the corresponding igroup

   Verify whether correct host type is mentioned while creating igroup and lun

   Verify whether correct iqn/wwpn number is added to igroup

   Verify zoning is properly configured from switch side, if it is FCP protocol

Q. How to create the LUN for linux server?

lun create –s size –t linux /vol/vol1/lunname

Q. How to create qtree and provide the security?

Netapp>qtree create /vol/vol1/qtreename

Netapp>qtree security /vol/vol1/qtree unix|ntfs|mixed

Q. How to copy volume filer to filer?

ndmpcopy or snapmirror

Q. How to resize the aggregate?

Netapp> aggr add AggName no.of.disk

Q. How to increase the volume?

Traditional Volume

vol add VolName no.of.disk

Flexible Volume

vol size VolName +60g

Q. What is qtree?

qtree is Logical partition of the volume.

Q. What is the default snap reserve in aggregate?

5%

Q. What is snapshot?

A Snapshot copy is a read-only image of a traditional or FlexVol volume, or an aggregate, that captures the state of the file system at a point in time.

Q. What are the raid groups Netapp supporting?, what is the difference between them?

Supported RAID types:

Raid-4
Raid-6
Raid-Dp
Q. What are the protocols you are using?

Say some protocols like NFS, CIFS, ISCSI and FCP

Q. What is the difference between iscsi and fcp?

Iscsi-sending block through. iSCSI does not required dedicated network, it will work on existing network also. it work’s an TCP/IP.

Fcp-send through fibre medium. Required an dedicated FC network.  Performance is so high compare to the iSCSI

Q. What is the iscsi port number?

3260

Q. What is the difference between ndmp copy and vol copy?

Ndmp copy –network data management protocol(used for tape backup)

Vol copy – is used to transfer volume to same or another aggregate

Q. What is the difference between ONTAP 7 & 8?

In ONTAP 7 the individual aggregate is limited to maximum of 16 TB. Where ONTAP 8 supports the new 64 bit aggregate and hence the size of the individual aggregate extends to 100 TB.

Q. If you were troubleshooting and wanted to look at SnapMirror log files, what is the path to these files?

/vol/vol0/etc/log/

Q. Which statement describes the results of the SnapMirror resynce command?

Resynchronization finds the newest common snapshot shared by the two volumes or qtree, and removes all newer information on the storage system on which the command is run.

Q. What are the steps need to perform to configure SnapMirror?

The SnapMirror configuration process consists of the following four steps:

Refer Topic

Install the SnapMirror license on the source and destination systems:

license add <code>

On the source, specify the host name or IP address of the SnapMirror destination systems you wish to authorize to replicate this source system.

options snapmirror.access host=dst_hostname1,dst_hostname2

For each source volume or qtree to replicate, perform an initial baseline transfer. For volume SnapMirror

restrict the destination volume first: vol restrict dst_vol

Then initialize the volume SnapMirror baseline, using the following syntax on the destination:

snapmirror initialize -S src_hostname:src_v

oldst_hostname:dst_vol

For a qtree SnapMirror baseline transfer, use the following syntax on the destination:

snapmirror initialize –S src_hostname:/vol/src_vol/src_qtree

dst_hostname:/vol/dst_vol/dst_qtree

Q. While doing baseline transfer you’re getting error message. What are the troubleshooting steps you’ll do?

Check both the hosts are reachable by running “ping” command

Check whether the TCP port 10566 & 10565 are open from firewall

Check whether the snapmirror license are installed in both filers

Q. Explain the different types of replication modes..?

The SnapMirror Async mode replicates Snapshot copies from a source volume or qtree to a destination. It will support to replicate more than 800Kms Long. volume or qtree. Incremental updates are based on a schedule or are performed manually using the snapmirror update command. Async mode works with both volume SnapMirror and qtree SnapMirror.

SnapMirror Sync mode replicates writes from a source volume to a destination volume at the same time it is written to the source volume. SnapMirror Sync is used in environments that have zero tolerance for data loss. it will note support more then 300Kms long.

SnapMirror Semi-Sync provides a middle-ground solution that keeps the source and destination systems more closely synchronized than Async mode, but with less impact on performance.

Q. How do you configure multiple path in Snapmirror?

Add a connection name line in the snapmirror.conf file

/etc/snapmirror.conf

FAS1_conf = multi (FAS1-e0a,FAS2-e0a) (FAS1-e0b,FAS2-e0b)

Q. Explain how De-Duplication works?

In the context of disk storage, De-duplication refers to any algorithm that searches for duplicate data objects (for example, blocks, chunks, files) and discards those duplicates. When duplicate data is detected, it is not retained, but instead a “data pointer” is modified so that the storage system references an exact copy of the data object already stored on disk. This De-duplication feature works well with datasets that have lots of duplicated date (for example, full backups).

Q. What is the command used to see amount of space saved using De-duplication?

df –s <volume name>

Q. Command used to check progress and status of De-duplication?

sis status

Q. How do you setup Snapvault Snapshot schedule?

pri> snapvault snap sched vol1 sv_hourly 22@0-22

This schedule is for the home directories volume vol1

Creates hourly Snapshot copies, except 11:00 p.m.

Keeps nearly a full day of hourly copies

Q. What is metadata?

Metadata is defined as data providing information about one or more aspects of the data,

Inode file
Used block bitmap file
Free block bitmap file


Q. How do you shutdown filer through RLM?

ssh “rlm ip address”

RLM_Netapp> system power on

Q. After creating LUN (iSCSI) & mapped the LUN to particular igroup, the client not able to access the LUN. What are the trouble shooting steps you take?

Check whether IQN number specified is correct
Check whether the created LUN is in “restrict” mode
Check the iscsi status
Un-map and map the LUN once again
Check Network connectivity communication
Q. In CIFS how do you check who is using most?

cifs top

Q. What is VServer..?

A Vserver is defined as logical container which holds the volumes. A 7 mode vfiler is called as a vserver in Clustered mode .

Q. What is junction path..?

This is a new term in cluster mode and this is used for mounting.Volume junctions are a way to join individual volumes together into a single, logical namespace to enable data access to NAS clients.

Q. How to check cifs performance statistics.?

cifs stat

Q. What do you do if a customer reports a particular CIFS share is responding slow?

Check the r/w using “cifs stat” & “sysstat -x 1”.

If disk & cpu utilization is more then problem is with filer side only.

CPU utilization will be high if more disk r/w time, i.e.,during tape backup & also during scrub activities.

Q. What is the diff bet cf takeover and cf force takeover?

If partner shelf power is off, if you try to takeover it will not take. if you do as force using (-f) it will work

Q. What is LIF.?

LIF ( Logical interface) :

As the name suggest its a logical interface which is created from physical interface of NetApp controllers.

Q. What is infinite volumes..?

NetApp Infinite Volume is a software abstraction hosted over clustered Data ONTAP

Q. What is the difference between NAS & SAN?

The main difference between NAS and SAN is that NAS is an Ethernet based while SAN is Fabric based.

NAS- Network Attached Storage

It enters data on file level and develops space to host in the form of folder of shared networks.

SAN- Storage Area Network

It enters data on block level and develops space to host in the form of a disk.

Q. What is Network Attached Storage (NAS)?

Network Attached Storage is nothing but a hard disk storage, which is having its own network address and not being attached to the computer department, which serves applications to a user’s of network’s workstation. Both application files and programming can be served faster, this is done by removing management and storage access from the department server because they are not competing for the resources of the same processor. The NAS device is assigned an IP address and attached to the local area network. The file request is sent to the NAS file server by the main server. NAS consists of multi disk RAID systems, software for mapping and configuring file locations to the NAS and hard disk storage.

Q. What is Storage Area Network (SAN)?

SAN is a special purpose high speed network,  which connects various kinds of data storage devices with data servers on behalf of the users of larger networks. SAN supports retrieval and archival of data, restore and backup, disk mirroring, sharing of data and data migration from one device to another. SAN is a part of the overall network of resources of computing for an enterprise. It can incorporate subnet works with NAS systems.

Q. How to improve the Netapp storage performance?

If volume/lun present in ATA/SATA harddisk aggregate, then the volume can be migrated to FC/SAS disk aggregate.
For NFS/CIFS instead of accessing from single interface, multi mode vif can be configured to get better bandwidth and fault tolerance.
Always advised to keep aggr/vol utilization below 90%.
Avoid doing multiple volume backup in single point of time.
Aggr/volume/lun reallocation can be done to re–distribute the data to multiple disk for better striping performance.
Schedule scrubbing and deduplication scanning after business hours.
Avoid connecting different types of shelf in a same loop.
Avoid mixing up different speeds of disk and different types of disk in a same aggregate.
Always keep sufficient spare disk to replace incase of disk failure. Because reconstruction time will take more time and cause negative performance.
Keep the advised version of firmware/software which is recommended by netapp.
Better to have nearstore functionality to avoid backing up data from source filer.
Q. What is an HBA?

HBA is a Host Bus Adapters which are needed to connect the server to the storage.

Q. What is storage virtualization?

Storage virtualization is the process of uniting multiple devices of network storage into a single storage unit.

Q. What is zoning?

It is a managed  service of fabric which can be used to create logical subsets of devices within a SAN. It allows portioning of resources for access control and management purpose.

Q. Explain the different types of replication modes?

SnapMirror semi-sync: It offers a middle ground solution which keeps the destination and source systems more synchronized than Async mode, but it will focus less on performance.

SnapMirror Sync mode: At the same time, It performs write function from a source volume to a destination volume. This mode is used in a case,  where there is zero tolerance for data loss.

SnapMirror Async mode: It transfers snapshot copies from either qtree or source volume to a destination. Using the snapmirror update command, rising updates are performed manually or based on a schedule. It performs with both Qtree snapmirror and volume snapmirror.

Q. What are the raid groups netapp supporting?, what is the difference between them?

Raid_dp(double parity,diagonal parity) ,raid4(striping&dedicated parity)

Q. What is the difference between ndmp copy and vol copy?

Ndmp copy –network data management protocol(used for tape backup)

Vol copy – is used to transfer volume to same or another aggr

HTTP://NETAPPLINES.BLOGSPOT.IN/2012/05/COMPARISON-OF-VOL-COPY-NDMPCOPY-AND.HTML

Q. What are the steps need to perform to configure SnapMirror?

The SnapMirror configuration process consists of the following four steps:

a) Install the SnapMirror license on the source and destination systems: license add <code>

b) On the source, specify the host name or IP address of the SnapMirror destination systems you wish to authorize to replicate this source system.

options snapmirror.access host=dst_hostname1,dst_hostname2

c) For each source volume or qtree to replicate, perform an initial baseline transfer. For volume SnapMirror,

restrict the destination volume first: vol restrict dst_vol

Then initialize the volume SnapMirror baseline, using the following syntax on the destination:

snapmirror initialize -S src_hostname:src_v

oldst_hostname:dst_vol

For a qtree SnapMirror baseline transfer, use the following syntax on the destination:

snapmirror initialize –S src_hostname:/vol/src_vol/src_qtree

dst_hostname:/vol/dst_vol/dst_qtree

d) After the initial transfer completes, set the SnapMirror mode of replication by creating the

/etc/snapmirror.conf file in the destination’s root volume.

For reference:

HTTP://NETAPPLINES.BLOGSPOT.IN/2012/01/SNAPMIRROR-SCHEDULE-CONFIGURATION.HTML

HTTP://NETAPPLINES.BLOGSPOT.IN/2011/11/SNAPMIRROR-PRIMARY-CONF.HTML

HTTP://NETAPPLINES.BLOGSPOT.IN/2011/11/SNAPMIRROR-SECONDARY-CONF.HTML

Q. what is degraded mode? If you don’t have parity for failed disks then?

If the spare disk is not added within 24hours,then filer will be shutdown automatically to avoid further disk failures and data loss.

Q. Did you ever do ontap upgrade? From which version to which version and for what reason?

Yes i have done ontap upgrade from version 7.2.6.1 to 7.3.3 due to lot of bugs in old version.

Q. How do you create a lun?

lun create -s <lunsize> -t <host type> <lunpath>

Q. How do you monitor the filers?

Using DFM(Data Fabric Manager) or also using SNMP you can monitor the filer. Using any monitoring systems like .i.e.Nagios

Q. What are the prerequisites for a cluster?

cluster interconnect cable should be connected.
shelf connect should be properly done for both the controllers with Path1 and Path2
cluster license should be enabled on both the nodes
Interfaces should be properly configured for fail over
cluster should be enabled
Q. Which two cp types would indicate a busy storage system? (Choose two).

cp_from_log_full

cp_from_cp

CheckPoint Interview Questions

CheckPoint Interview Questions

Q. Where you can view the results of the checkpoint?

You can view the results of the checkpoints in the Test Result Window.

Note: If you want to retrieve the return value of a checkpoint (a boolean value that indicates whether the checkpoint passed or failed) you must add parentheses around the checkpoint argument in the statement in the Expert View.

Q. What’s the Standard Checkpoint?

Standard Checkpoints checks the property value of an object in your application or web page.

Q. Which environment are supported by Standard Checkpoint?

Standard Checkpoint are supported for all add-in environments.

Q. Explain how a biometric device performs in measuring metrics, when attempting to authenticate subjects?

False Rejection Rate
Crossover Error Rate
False Acceptance Rate
Q. A(n) ______ is an abstract machine, which mediates all access subjects have to objects.

Reference monitor

Q. What’s the Image Checkpoint?

Image Checkpoint check the value of an image in your application or web page.

Q. Which environments are supported by Image Checkpoint?

Image Checkpoint are supported only Web environment.

Q. What’s the Bitmap Checkpoint?

Bitmap Checkpoint checks the bitmap images in your web page or application.

Q. Which environment are supported by Bitmap Checkpoints?

Bitmap checkpoints are supported all add-in environment.

Q. What’s the Table Checkpoints?

Table Checkpoint checks the information with in a table.

Q. Which environments are supported by Table Checkpoint?

Table Checkpoints are supported only ActiveX environment.

Q. What’s the Text Checkpoint?

Text Checkpoint checks that a test string is displayed in the appropriate place in your application or on web page.

Q. Which environment are supported by Test Checkpoint?

Text Checkpoint are supported all add-in environments

Q. What is Stealth Rule in checkpoint firewall.

Stealth Rule Protect Checkpoint firewall from direct access any traffic. Its rule should be place on the top of Security rule base. In this rule administrator denied all traffic to access checkpoint firewall.

Q. What is Cleanup rule In Checkpoint Firewall.

Cleanup rule place at last of the security rule base, Its used to drop all traffic which not match with above rule and Logged. Cleanup rule mainly created for log purpose. In this rule administrator denied all the traffic and enable log.

Q. What is Explicit rule In Checkpoint Firewall.

Its a rule in ruse base which is manually created by network security administrator that called Explicit rule.

Q. What is 3 trier architecture component of Checkpoint Firewall.

Smart Console.
Security Management.
Security Gateway.
Q. What is the Packet Flow of Checkpoint firewall.

SAM Database.
Address Spoofing.
Session Lookup.
Policy Lookup.
Destination NAT.
Route Lookup.
Source NAT.
Layer 7 Inspection.
VPN.
Routing.
Q. Explain Which type of Business Continuity Plan (BCP) test involves shutting down a primary site, bringing an alternate site on-line, and moving all operations to the alternate site?

Full interruption.

Q. Explain Which encryption algorithm has the highest bit strength?

AES

Q. Explain Which type of Business Continuity Plan (BCP) test involves shutting down a primary site, bringing an alternate site on-line, and moving all operations to the alternate site?

Full interruption

Q. A(n) _____ is an unintended communication path that can be used to violate a system security policy.

Covert channel

Q. Virtual corporations typically use a(n) _______ for maintaining centralized information assets.

Colocation

Q. Give an example for simple, physical-access control?

Lock

Q. A _______ attack uses multiple systems to launch a coordinated attack.

Distributed denial-of-service

Q. Which of the following is NOT an auditing function that should be performed regularly?

Reviewing performance logs

Q. _______ can mimic the symptoms of a denial-of-service attack, and the resulting loss in productivity can be no less devastating to an organization.

Insufficient bandwidth

Q. Explain How do virtual corporations maintain confidentiality?

Encryption

Q. Explain What type of document contains information on alternative business locations, IT resources, and personnel?

Business continuity plan

Q. A _______ is the first step for determining which technical information assets should be protected.

Network diagram

Q. Explain Which of the following is the BEST method for managing users in an enterprise?

Place them in a centralized Lightweight Directory Access Protocol.

Q. What are enterprise Business Continuity Plan (BCP)?

Accidental or intentional data deletion

Severe weather disasters

Minor power outages

Q. Explain Which type of Business Continuity Plan (BCP) test involves practicing aspects of the BCP, without actually interrupting operations or bringing an alternate site on-line?

Simulation