CheckPoint 156-215.75 Online Practice Questions and Exam Preparation

CheckPoint 156-215.75 Online Questions & Answers

• Question 271:

  Among the authentication schemes SSL VPN employs for users, which scheme does Check Point recommend so all servers are replicated?

  A. User certificates
  B. LDAP
  C. Username and password
  D. RADIUS
  D. RADIUS

• Question 272:

  Which of the following commands can be used to troubleshoot ClusterXL sync issues?

  A. fw debug cxl connections > file_name
  B. fw tab -s -t connections > file_name
  C. fw tab -u connections > file_name
  D. fw ctl -s -t connections > file_name
  B. fw tab -s -t connections > file_name

• Question 273:

  A customer is calling saying one member's status is Down. What will you check?

  A. cphaprob list (verify what critical device is down)
  B. fw ctl pstat (check sync)
  C. fw ctl debug -m cluster + forward (forwarding layer debug)
  D. tcpdump/snoop (CCP traffic)
  A. cphaprob list (verify what critical device is down)

• Question 274:

  To back up all events stored in the SmartEvent Server, you should back up the contents of which folder(s)?

  A. $FWDIR/distrib
  B. $FWDIR/distrib_db and $FWDIR/events
  C. $RTDIR/distrib and $RTDIR/events_db
  D. $RTDIR/events_db
  C. $RTDIR/distrib and $RTDIR/events_db

• Question 275:

  Which component receives events and assigns severity levels to the events; invokes any defined automatic reactions, and adds the events to the Events Data Base?

  A. SmartEvent Analysis DataServer
  B. SmartEvent Client
  C. SmartEvent Correlation Unit
  D. SmartEvent Server
  D. SmartEvent Server

• Question 276:

  You want to upgrade an NG with Application Intelligence R55 Security Gateway running on SecurePlatform to VPN-1 NGX R65 via SmartUpdate. Which package(s) is(are) needed in the Repository prior to upgrade?

  A. SecurePlatform NGX R65 package
  B. VPN-1 Power/UTM NGX R65 package
  C. SecurePlatform and VPN-1 Power/UTM NGX R65 packages
  D. SVN Foundation and VPN-1 Power/UTM packages
  A. SecurePlatform NGX R65 package

• Question 277:

  Your customer asks you about the Performance Pack. You explain to him that a Performance Pack is a software acceleration product which improves the performance of the Security Gateway. There are two ways to enable or disable this

  acceleration. The first one is to use the command cpconfig (see the Figure 1).

  The second one is to use the command fwaccel on off (see the Figure 2).

  What is the difference between those two commands?

  A. The command cpconfig works on the Security Platform only. The command fwaccel can be used on all platforms.
  B. The fwaccel command determines the default setting. The command cpconfig can dynamically change the setting, but after the reboot it reverts to the default setting.
  C. Both commands have the same function.
  D. The cpconfig command enables acceleration. The command fwaccel can dynamically change the setting, but after the reboot it reverts to the default setting.
  D. The cpconfig command enables acceleration. The command fwaccel can dynamically change the setting, but after the reboot it reverts to the default setting.

• Question 278:

  Included in the client's network are some switches, which rely on IGMP snooping. You must find a solution to work with these switches. Which of the following answers does NOT lead to a successful solution?

  A. Set the value of fwha_enable_igmp_snooping module configuration parameter to 1.
  B. Configure static CAMs to allow multicast traffic on specific ports.
  C. ClusterXL supports IGMP snooping by default. There is no need to configure anything.
  D. Disable IGMP registration in switches that rely on IGMP packets
  C. ClusterXL supports IGMP snooping by default. There is no need to configure anything.

• Question 279:

  In the following cluster configuration; if you reboot sglondon_1 which device will be active when sglondon_1 is back up and running? Why?

  A. Sglondon_1, because it is up again, sglondon_2 took over during reboot
  B. Sglondon_2 because I has highest IP
  C. Sglondon_2 because it has highest priority
  D. Sglondon_1 because it the first configured object with the lowest IP
  C. Sglondon_2 because it has highest priority

• Question 280:

  Which of the following commands shows full synchronization status?

  A. cphaprob -a if
  B. fw ctl iflist
  C. fw hastat
  D. fw ctl pstat
  D. fw ctl pstat