CheckPoint 156-215.75 Online Practice Questions and Exam Preparation

CheckPoint 156-215.75 Online Questions & Answers

• Question 231:

  Your primary Security Management Server runs on SecurePlatform. What is the easiest way to back up your Security Gateway R75 configuration, including routing and network configuration files?

  A. Using the native SecurePlatform back up utility from command line or in the Web-based user interface.
  B. Using the command upgrade_export.
  C. Run the command pre_upgrade_verifier and save the file *.tgz to the directory c:/temp.
  D. Copying the directories $FWDIR/conf and $FWDIR/lib to another location.
  A. Using the native SecurePlatform back up utility from command line or in the Web-based user interface.

• Question 232:

  Steve is troubleshooting a connection problem with an internal application. If he knows the source IP address is 192.168.4.125, how could he filter this traffic?

  A. Run fw monitor -e "accept dsrc=192.168.4.125;"
  B. Run fw monitor -e "accept dst=192.168.4.125;"
  C. Run fw monitor -e "accept ip=192.168.4.125;"
  D. Run fw monitor -e "accept src=192.168.4.125;"
  D. Run fw monitor -e "accept src=192.168.4.125;"

• Question 233:

  You are a SSL VPN Administrator. Your users complain that their Outlook Web Access is running extremely slowly, and their overall browsing experience continues to worsen. You suspect it could be a logging problem. Which of the following log files does Check Point recommend you purge?

  A. httpd*.log
  B. event_ws.log
  C. mod_ws_owd.log
  D. alert_owd.log
  A. httpd*.log

• Question 234:

  The process that performs the authentication for Remote Access is:

  A. cpd
  B. vpnd
  C. fwm
  D. cvpnd
  B. vpnd

• Question 235:

  Provisioning Profiles can NOT be applied to:

  A. UTM-1 EDGE Appliances
  B. UTM-1 Appliances
  C. IP Appliances
  D. Power-1 Appliances
  C. IP Appliances

• Question 236:

  The SmartEvent Server:

  A. analyzes each IPS log entry as it enters the Log server.
  B. displays the received events.
  C. forwards what is known as an event to the SmartEvent Server.
  D. assigns a severity level to an event.
  D. assigns a severity level to an event.

• Question 237:

  Which Check Point QoS feature marks the ToS byte in the IP header?

  A. Differentiated Services
  B. Guarantees
  C. Weighted Fair Queuing
  D. Low Latency Queuing
  A. Differentiated Services

• Question 238:

  You want only RAS signals to pass through H.323 Gatekeeper and other H.323 protocols, passing directly between end points. Which routing mode in the VoIP Domain Gatekeeper do you select?

  A. Direct
  B. Direct and Call Setup
  C. Call Setup
  D. Call Setup and Call Control
  A. Direct

• Question 239:

  Jon is explaining how the inspection module works to a colleague. If a new connection passes through the inspection module and the packet matches the rule, what is the next step in the process?

  A. Verify if the packet should be moved through the TCP/IP stack.
  B. Verify if any logging or alerts are defined.
  C. Verify if the packet should be rejected.
  D. Verify if another rule exists.
  B. Verify if any logging or alerts are defined.

• Question 240:

  You start the configuration of SmartWorkflow. SmartWorkflow is enabled, but you are not able to select Open New Session because it is greyed out. What must be done to open a new session? Choose the BEST answer.

  A. Sessions in the Manage menu of SmartDashboard must be selected and enabled.
  B. The use of sessions must be enabled by the CLI command: SWF_session start.
  C. A rule which allows the SmartWorkflow traffic must be placed on the top of the Rule Base.
  D. The Work with sessions in Global Properties must be set.
  D. The Work with sessions in Global Properties must be set.