CheckPoint 156-215.75 Online Practice Questions and Exam Preparation

CheckPoint 156-215.75 Online Questions & Answers

• Question 131:

  Your customer wishes to install the SmartWorkflow Software Blade on a R70 Security Management server (SecurePlatform). Which is the correct method?

  A. When you install the R70.1 package on an R70 Security Management server, it will be upgraded to version R70.1 with SmartWorkflow.
  B. The SmartWorkflow works directly on the version R70. Install the SmartWorkflow as an add-on. The version of the Management server remains R70.
  C. You must upgrade the Management Server to the version R70.1 first before you start the installation of the SmartWorkflow Software Blade plug-in.
  D. The SmartWorkflow Software Blade is included in the standard R70 version. You need to enable it via cpconfig.
  A. When you install the R70.1 package on an R70 Security Management server, it will be upgraded to version R70.1 with SmartWorkflow.

• Question 132:

  When do modifications to the Event Policy take effect?

  A. When saved on the Correlation Units, and pushed as a policy.
  B. As soon as the Policy Tab window is closed.
  C. When saved on the SmartEvent Client, and installed on the SmartEvent Server.
  D. When saved on the SmartEvent Server and installed to the Correlation Units.
  D. When saved on the SmartEvent Server and installed to the Correlation Units.

• Question 133:

  A VPN Tunnel Interface (VTI) is defined on SecurePlatform Pro as: vpn shell interface add numbered 10.10.0.1 10.10.0.2 madrid.cp What do you know about this VTI?

  A. 10.10.0.1 is the local Gateway's internal interface, and 10.10.0.2 is the internal interface of the remote Gateway.
  B. The peer Security Gateway's name is madrid.cp.
  C. The VTI name is madrid.cp.
  D. The local Gateway's object name is madrid.cp.
  B. The peer Security Gateway's name is madrid.cp.

• Question 134:

  Organizations are sometimes faced with the need to locate cluster members in different geographic locations that are distant from each other. A typical example is replicated data centers whose location is widely separated for disaster recovery purposes. What are the restrictions of this solution?

  A. There are no restrictions.
  B. There is one restriction: The synchronization network must guarantee no more than 150 ms latency (ITU Standard G.114).
  C. There is one restriction: The synchronization network must guarantee no more than 100 ms latency.
  D. There are two restrictions: 1. The synchronization network must guarantee no more than 100ms latency and no more than 5% packet loss. 2. The synchronization network may only include switches and hubs.
  D. There are two restrictions: 1. The synchronization network must guarantee no more than 100ms latency and no more than 5% packet loss. 2. The synchronization network may only include switches and hubs.

• Question 135:

  The following configuration is for VPN-1 NGX:1s this configuration correct for Management High Availability (HA)?

  

  A. No, the SmartCenter Servers must be installed on the same operating system.
  B. No, a VPN-1 NGX SmartCenter Server cannot run on Red Hat Linux 7.3.
  C. No, the SmartCenter Servers must reside on the same network.
  D. No, A VPN-1 NGX SmartCenter Server can only be in a Management HA configuration, if the operating system is Solaris.
  E. No, the SmartCenter Servers do not have the same number of NICs.
  A. No, the SmartCenter Servers must be installed on the same operating system.

• Question 136:

  Which of the following would be a result of having more than one active Security Management Server in a Management High Availability (HA) configuration?

  A. The need to manually synchronize the secondary Security Management Server with the Primary Security Management Server is eliminated.
  B. Allows for faster seamless failover: from active-to-active instead of standby-to-active.
  C. An error notification will popup during SmartDashboard login if the two machines can communicate indicating Collision status.
  D. Creates a High Availability implementation between the Gateways installed on the Security Management Servers.
  C. An error notification will popup during SmartDashboard login if the two machines can communicate indicating Collision status.

• Question 137:

  When synchronizing clusters, which of the following statements is NOT true?

  A. The state of connections using resources is maintained by a Security Server, so these connections cannot be synchronized.
  B. In the case of a failover, accounting information on the failed member may be lost despite a properly working synchronization.
  C. Only cluster members running on the same OS platform can be synchronized.
  D. Client Authentication or Session Authentication connections through a cluster member will be lost if the cluster member fails.
  D. Client Authentication or Session Authentication connections through a cluster member will be lost if the cluster member fails.

• Question 138:

  Assume an intruder has compromised your current IKE Phase 1 and Phase 2 keys. Which of the following options will end the intruder's access, after the next Phase 2 exchange occurs?

  A. Phase 3 Key Revocation
  B. Perfect Forward Secrecy
  C. MD5 Hash Completion
  D. SHA1 Hash Completion
  E. DES Key Reset
  B. Perfect Forward Secrecy

• Question 139:

  Each entry in SmartDirectory has a unique _______________ ?

  A. Distinguished Name
  B. Organizational Unit
  C. Port Number Association
  D. Schema
  A. Distinguished Name

• Question 140:

  VPN-1 NGX supports VoIP traffic in all of the following environments, EXCEPT which environment?

  A. H.323
  B. SIP
  C. MEGACO
  D. SCCP
  E. MGCP
  C. MEGACO