CheckPoint 156-215.75 Online Practice Questions and Exam Preparation

CheckPoint 156-215.75 Online Questions & Answers

• Question 141:

  Choose the BEST sequence for configuring user management in SmartDashboard, using an LDAP server.

  A. Configure a workstation object for the LDAP server, configure a server object for the LDAP Account Unit, and enable LDAP in Global Properties.
  B. Configure a server object for the LDAP Account Unit, and create an LDAP resource object.
  C. Enable LDAP in Global Properties, configure a host-node object for the LDAP server, and configure a server object for the LDAP Account Unit.
  D. Configure a server object for the LDAP Account Unit, enable LDAP in Global Properties, and create an LDAP resource object.
  C. Enable LDAP in Global Properties, configure a host-node object for the LDAP server, and configure a server object for the LDAP Account Unit.

• Question 142:

  Check Point recommends that you back up systems running Check Point products. Run your back ups during maintenance windows to limit disruptions to services, improve CPU usage, and simplify time allotment. Which back up method does Check Point recommend every couple of months, depending on how frequently you make changes to the network or policy?

  A. backup
  B. migrate export
  C. upgrade_export
  D. snapshot
  A. backup

• Question 143:

  You are a SSL VPN administrator. Your users complain that their Outlook Web Access is running extremely slowly, and their overall browsing experience continues to worsen. You suspect it could be a logging problem. Which of the following logs does Check Point recommend you turn off?

  A. Alert
  B. Event
  C. Trace
  D. Traffic
  C. Trace

• Question 144:

  What are the 3 main components of the SmartEvent Software Blade? 1) Correlation Unit 2) Correlation Client 3) Correlation Server 4) Analyzer Server 5) Analyzer Client 6) Analyzer Unit

  A. 1, 3, 4
  B. 1, 4, 5
  C. 1, 2, 3
  D. 4, 5, 6
  B. 1, 4, 5

• Question 145:

  Which DLP action would describe the following action: The data transmission event is logged in SmartView Tracker. Administrators with permission can view the data that was sent. The traffic is passed.

  A. Detect
  B. Ask User
  C. Inform User
  D. Prevent
  A. Detect

• Question 146:

  Which of the following are valid reasons for beginning with a fresh installation VPN-1 NGX R65, instead of upgrading a previous version to VPN-1 NGX R65? Select all that apply.

  A. You see a more logical way to organize your rules and objects
  B. You want to keep your Check Point configuration.
  C. Your Security Policy includes rules and objects whose purpose you do not know.
  D. Objects and rules' naming conventions have changed over time.
  A. You see a more logical way to organize your rules and objects
  C. Your Security Policy includes rules and objects whose purpose you do not know.
  D. Objects and rules' naming conventions have changed over time.

• Question 147:

  For proper system operation, the Administrator has to configure the DLP Portal and define its DNS name for which of the following conditions?

  A. If the DLP Policy is applied to HTTP traffic.
  B. If there are one or more Inform Rules.
  C. If there are one or more Ask User rules.
  D. If the action of all rules is Detect and no Data Owners are configured.
  C. If there are one or more Ask User rules.

• Question 148:

  Which of the following statements is TRUE concerning MEP VPN's?

  A. State synchronization between Secruity Gateways is required.
  B. MEP VPN's are not restricted to the location of the gateways.
  C. The VPN Client is assigned a Security Gateway to connect to based on a priority list, should the first connection fail.
  D. MEP Security Gateways cannot be managed by separate Management Servers.
  B. MEP VPN's are not restricted to the location of the gateways.

• Question 149:

  Problems sometimes occur when distributing IPSec packets to a few machines in a Load Sharing Multicast mode cluster, even though the machines have the same source and destination IP addresses. What is the best Load Sharing method for preventing this type of problem?

  A. Load Sharing based on IP addresses, ports, and serial peripheral interfaces (SPI)
  B. Load Sharing based on SPIs only
  C. Load Sharing based on IP addresses only
  D. Load Sharing based on SPIs and ports only
  E. Load Sharing based on IP addresses and ports
  E. Load Sharing based on IP addresses and ports

• Question 150:

  When configuring an LDAP Group object, which option should you select if you want the gateway to reference the groups defined on the LDAP server for authentication purposes?

  A. Only Group in Branch
  B. Only Sub Tree
  C. OU Auth and select Group Name
  D. All Account-Unit's Users
  A. Only Group in Branch