CheckPoint 156-215.75 Online Practice Questions and Exam Preparation

CheckPoint 156-215.75 Online Questions & Answers

• Question 261:

  While using the SmartProvisioning Wizard to create a new profile, you cannot continue because there are no devices to select. What is a possible reason for this? i) All devices already have a profile assigned to them ii) Provisioning Blade is not enabled on the devices iii) No UTM- 1/Power- 1/Secure Platform devices are defined in SmartDashboard iv) SIC is not established on the devices.

  A. (ii), (iii) or (iv)
  B. (ii) only
  C. (iii) or (iv)
  D. (i) or (iii)
  D. (i) or (iii)

• Question 262:

  Which of the following commands will stop acceleration on a Security Gateway running on SecurePlatform?

  A. splat_accel off
  B. perf_pack off
  C. fw accel off
  D. fwaccel off
  D. fwaccel off

• Question 263:

  You are preparing to deploy a VPN-1 Pro Gateway for VPN-1 NGX. You have five systems to choose from for the new Gateway, and you must conform to the following requirements: Operating-system vendor's license agreement Check Point's license agreement Minimum operating-system hardware specification Minimum Gateway hardware specification Gateway installed on a supported operating system (OS) Which machine meets ALL of the following requirements?

  A. Processor: 1.1 GHz RAM: 512MB Hard disk: 10 GB OS: Windows 2000 Workstation
  B. Processor: 2.0 GHz RAM: 512MB Hard disk: 10 GB OS: Windows ME
  C. Processor: 1.5 GHz RAM: 256 MB Hard disk: 20 GB OS: Red Hat Linux 8.0
  D. Processor: 1.67 GHz RAM: 128 MB Hard disk: 5 GB OS: FreeBSD
  E. Processor: 2.2 GHz RAM: 256 MB Hard disk: 20 GB OS: Windows 2000 Server
  E. Processor: 2.2 GHz RAM: 256 MB Hard disk: 20 GB OS: Windows 2000 Server

• Question 264:

  If a digital signature is used to achieve both data-integrity checking and verification of sender, digital signatures are only used when implementing:

  A. A symmetric-encryption algorithm
  B. CBL-DES
  C. Triple DES
  D. An asymmetric-encryption algorithm
  D. An asymmetric-encryption algorithm

• Question 265:

  Which of the following files is used to allow only specific IPs or networks to access the Management Portal?

  A. hosts.allow
  B. portal.ips
  C. cpportal_allowips
  D. allowedips.portal
  A. hosts.allow

• Question 266:

  How do you enable SecureXL (command line) on SecurePlatform?

  A. fw securexl on
  B. fw accel on
  C. fwaccel on
  D. fwsecurexl on
  C. fwaccel on

• Question 267:

  Yoav is a Security Administrator preparing to implement a VPN solution for his multi-site organization. To comply with industry regulations, Yoav's VPN solution must meet the following requirements: Portability: Standard Key management: Automatic, external PKI Session keys: Changed at configured times during a connection's lifetime Key length: No less than 128-bit Data integrity: Secure against inversion and brutE. force attacks What is the most appropriate setting Yoav should choose?

  A. IKE VPNs: AES encryption for IKE Phase 1, and DES encryption for Phase 2; SHA1 hash
  B. IKE VPNs: SHA1 encryption for IKE Phase 1, and MD5 encryption for Phase 2; AES hash
  C. IKE VPNs: CAST encryption for IKE Phase 1, and SHA1 encryption for Phase 2; DES hash
  D. IKE VPNs: AES encryption for IKE Phase 1, and AES encryption for Phase 2; SHA1 hash
  E. IKE VPNs: DES encryption for IKE Phase 1, and 3DES encryption for Phase 2; MD5 hash
  D. IKE VPNs: AES encryption for IKE Phase 1, and AES encryption for Phase 2; SHA1 hash

• Question 268:

  Using IPS, how do you notify the Security Administrator that malware is scanning specific ports? By enabling:

  A. Malware Scan protection
  B. Sweep Scan protection
  C. Host Port Scan
  D. Malicious Code Protector
  B. Sweep Scan protection

• Question 269:

  What is NOT true about Management Portal?

  A. Choosing Accept control connections in Implied Rules includes Management Portal access
  B. Management Portal requires a license
  C. Default Port for Management Portal access is 4433
  D. Management Portal could be reconfigured for using HTTP instead of HTTPS
  A. Choosing Accept control connections in Implied Rules includes Management Portal access

• Question 270:

  When using migrate to upgrade a Secure Management Server, which of the following is included in the migration?

  A. SmartEvent database
  B. SmartReporter database
  C. classes.C file
  D. System interface configuration
  C. classes.C file