CheckPoint 156-215.75 Online Practice Questions and Exam Preparation

CheckPoint 156-215.75 Online Questions & Answers

• Question 91:

  After you add new interfaces to a cluster, how can you check if the new interfaces and the associated virtual IP address are recognized by ClusterXL?

  

  A. By running the command cphaprob state on both members
  B. By running the command cpconfig on both members
  C. By running the command cphaprob -I list on both members
  D. By running the command cphaprob -a if on both members
  D. By running the command cphaprob -a if on both members

• Question 92:

  Which of the following QoS rule action properties is an Advanced action type, only available in Traditional mode?

  A. Guarantee Allocation
  B. Rule weight
  C. Apply rule only to encrypted traffic
  D. Rule limit
  E. Rule guarantee
  A. Guarantee Allocation

• Question 93:

  What is NOT a valid LDAP use in Check Point SmartDirectory?

  A. Retrieve gateway CRL's
  B. External users management
  C. Enforce user access to internal resources
  D. Provide user authentication information for the Security Management Server
  C. Enforce user access to internal resources

• Question 94:

  A user attempts to initialize a network application using SSL Network Extender. The application fails to start. What is the MOST LIKELY solution?

  A. Select the option Auto-detect client capabilities.
  B. Select the option Enable SSL Network Extender Application Mode only.
  C. Select the option Turn off all SSL tunneling clients.
  D. Select the option Enable SSL Network Extender Network Mode only.
  B. Select the option Enable SSL Network Extender Application Mode only.

• Question 95:

  There are times when you want to use Link Selection to manage high-traffic VPN connections. With Link Selection you can:

  A. Probe links for availability.
  B. Use links based on Day/Time.
  C. Assign links to specific VPN communities.
  D. Use links based on authentication method.
  A. Probe links for availability.

• Question 96:

  Which technology is responsible for assembling packet streams and passing ordered data to the protocol parsers in IPS?

  A. Pattern Matcher
  B. Content Management Infrastructure
  C. Accelerated INSPECT
  D. Packet Streaming Layer
  D. Packet Streaming Layer

• Question 97:

  When Load Sharing Multicast mode is defined in a ClusterXL cluster object, how are packets being handled by cluster members?

  A. All members receive all packets. The Security Management Server decides which member will process the packets. Other members delete the packets from memory.
  B. All cluster members process all packets and members synchronize with each other.
  C. All members receive all packets. All members run an algorithm which determines which member processes packets further and which members delete the packet from memory.
  D. Only one member at a time is active. The active cluster member processes all packets.
  C. All members receive all packets. All members run an algorithm which determines which member processes packets further and which members delete the packet from memory.

• Question 98:

  How can you completely tear down a specific VPN tunnel in an intranet IKE VPN deployment?

  A. Run the command vpn tu on the Security Gateway, and choose the option "Delete all IPSec+IKE SAs for ALL peers and users".
  B. Run the command vpn tu on the SmartCenter Server, and choose the option "Delete all IPSec+IKE SAs for ALL peers and users".
  C. Run the command vpn tu on the Security Gateway, and choose the option "Delete all IPSec+IKE SAs for a given peer (GW)".
  D. Run the command vpn tu on the Security Gateway, and choose the option "Delete all IPSec SAs for a given user (Client)".
  E. Run the command vpn tu on the Security Gateway, and choose the option "Delete all IPSec SAs for ALL peers and users".
  C. Run the command vpn tu on the Security Gateway, and choose the option "Delete all IPSec+IKE SAs for a given peer (GW)".

• Question 99:

  In a particular IPS protection in R71 in the Logging Settings, what does the Capture Packets option do?

  A. This is not a valid selection in R71
  B. Attaches a packet capture of the traffic that matches this particular protection to each log that the protection generates.
  C. Starts a packet capture at the time of policy install to capture all of the traffic until this protection is hit.
  D. Collects all of the logs for packets that have matched this protection within the last 30 days
  B. Attaches a packet capture of the traffic that matches this particular protection to each log that the protection generates.

• Question 100:

  In a "zero downtime" scenario, which command do you run manually after all cluster members are upgraded?

  A. cphaconf set_ccp broadcast
  B. cphaconf set clear_subs
  C. cphaconf set mc_relod
  D. cphaconf set_ccp multicast
  D. cphaconf set_ccp multicast