CheckPoint 156-215.75 Online Practice Questions and Exam Preparation

CheckPoint 156-215.75 Online Questions & Answers

• Question 221:

  Which of the following commands shows full synchronization status?

  A. fw hastat
  B. cphaprob -i list
  C. cphaprob -a if
  D. fw ctl iflist
  B. cphaprob -i list

• Question 222:

  You have pushed a policy to your firewall and you are not able to access the firewall. What command will allow you to remove the current policy from the machine?

  A. fw purge policy
  B. fw fetch policy
  C. fw purge active
  D. fw unloadlocal
  A. fw purge policy

• Question 223:

  What is a possible reason for the grayed out Restore Version button in the screenshot of the Database Revision Control while trying to restore Old_Structure?

  A. Old_Structure was not approved in SmartWorkflow.
  B. No SmartWorkflow session is started.
  C. With SmartWorkflow active, only SmartWorkflow revisions could be restored.
  D. Self-created versions cannot be restored if there are newer versions created in SmartWorkflow.
  B. No SmartWorkflow session is started.

• Question 224:

  Your company has two headquarters, one in London, one in New York. Each headquarters includes several branch offices. The branch offices only need to communicate with the headquarters in their country, not with each other, and only the headquarters need to communicate directly. What is the BEST configuration for VPN Communities among the branch offices and their headquarters, and between the two headquarters? VPN Communities comprised of:

  A. Two stars and one mesh Community; each star Community is set up for each site, with headquarters as the center of the Community, and branches as satellites. The mesh Communities are between the New York and London headquarters
  B. Three mesh Communities: one for London headquarters and its branches, one for New York headquarters and its branches, and one for London and New York headquarters.
  C. Two mesh Communities, one for each headquarters and their branch offices; and one star Community, in which London is the center of the Community and New York, is the satellite.
  D. Two mesh Communities, one for each headquarters and their branch offices; and one star Community, where New York is the center of the Community and London is the satellite.
  A. Two stars and one mesh Community; each star Community is set up for each site, with headquarters as the center of the Community, and branches as satellites. The mesh Communities are between the New York and London headquarters

• Question 225:

  How many pre-defined exclusions are included by default in SmartEvent R71 as part of the product installation?

  A. 3
  C. 10
  D. 5
  A. 3

• Question 226:

  Given the following protection detailed and the enforcing gateways list, is the Tool many DNS queries with the RD flag set protection enabled on the Gateway R71?

  

  

  Please choose the answer with the correct justification.

  A. yes because it is set to prevent on the Default_Protrction, which R71 gateway has applied.
  B. No because the protection is only supported on IPS-1 Sensor
  C. No enough information to determine one way or other
  D. No, because the Too many DNS queries with the flag set protection is not a valid protection in R71
  B. No because the protection is only supported on IPS-1 Sensor

• Question 227:

  You have an internal FTP server, and you allow downloading, but not uploading. Assume Network Address Translation is set up correctly, and you want to add an inbound rule with:

  Source: Any

  Destination: FTP server

  Service: FTP resources object.

  How do you configure the FTP resource object and the action column in the rule to achieve this goal?

  A. Enable only the "Get" method in the FTP Resource Properties, and use this method in the rule, with action accept.
  B. Enable only the "Get" method in the FTP Resource Properties and use it in the rule, with action drop.
  C. Enable both "Put" and "Get" methods in the FTP Resource Properties and use them in the rule, with action drop.
  D. Disable "Get" and "Put" methods in the FTP Resource Properties and use it in the rule, with action accept.
  E. Enable only the "Put" method in the FTP Resource Properties and use it in the rule, with action accept.
  A. Enable only the "Get" method in the FTP Resource Properties, and use this method in the rule, with action accept.

• Question 228:

  A user cannot authenticate to SSL VPN. You have verified the user is assigned a user group and reproduced the problem, confirming a failed-login session. You do not see an indication of this attempt in the traffic log. The user is not using a client certificate for login. To debug this error, where in the authentication process could the solution be found?

  A. apache
  B. admin
  C. cvpnd
  D. cpauth
  C. cvpnd

• Question 229:

  Which specific R71 GUI would you use to view the length of time a TCP connection was open?

  A. SmartReporter
  B. SmartView Monitor
  C. SmartView Status
  D. SmartView Tracker
  D. SmartView Tracker

• Question 230:

  During a Security Management Server migrate export, the system:

  A. Creates a backup file that includes the SmartEvent database.
  B. Creates a backup file that includes the SmartReporter database.
  C. Creates a backup archive for all the Check Point configuration settings.
  D. Saves all system settings and Check Point product configuration settings to a file.
  C. Creates a backup archive for all the Check Point configuration settings.