CheckPoint 156-215.75 Online Practice Questions and Exam Preparation

CheckPoint 156-215.75 Online Questions & Answers

• Question 331:

  In ClusterXL, which of the following processes are defined by default as critical devices?

  A. fwm
  B. cphad
  C. fwd
  D. fwd.proc
  B. cphad

• Question 332:

  The relay mail server configured under Email Notifications is used by the DLP Gateway to: (Choose the BEST answer.)

  A. If UserCheck is configured, there is no need to configure this relay server if there are no Ask User rules and there is no need to notify any Data Owners.
  B. Send e-mail notifications to users and Data Owners.
  C. Define My Organization / DLP Gateway and scan only e-mails that originate from this relay server.
  D. Synchronize with other mail servers in the network.
  B. Send e-mail notifications to users and Data Owners.

• Question 333:

  Restoring a snapshot-created file on one machine that was created on another requires which of the following to be the same on both machines?

  A. Windows version, objects database, patch level, and interface configuration
  B. Windows version, interface configuration, and patch level
  C. State, SecurePlatform version, and patch level
  D. State, SecurePlatform version, and objects database
  C. State, SecurePlatform version, and patch level

• Question 334:

  Which of the following is NOT supported by CoreXL?

  A. SmartView Tracker
  B. Route-based VPN
  C. IPS
  D. IPV4
  B. Route-based VPN

• Question 335:

  Rachel is the Security Administrator for a university. The university's FTP servers have old hardware and software. Certain FTP commands cause the FTP servers to malfunction. Upgrading the FTP servers is not an option at this time. Which of the following options will allow Rachel to control which FTP commands pass through the Security Gateway protecting the FTP servers?

  A. Global Properties > Security Server > Allowed FTP Commands
  B. SmartDefense > Application Intelligence > FTP Security Server
  C. Rule Base > Action Field > Properties
  D. Web Intelligence > Application Layer > FTP Settings
  E. FTP Service Object > Advanced > Blocked FTP Commands
  B. SmartDefense > Application Intelligence > FTP Security Server

• Question 336:

  Which of the following commands can be used to bind a NIC to a single processor when using a Performance Pack on SecurePlatform?

  

  A. sim affinity
  B. splat proc
  C. set proc
  D. fw fat path nic
  A. sim affinity

• Question 337:

  Which protocol is not supported for DLP?

  A. ftp
  B. https
  C. http
  D. smtp
  B. https

• Question 338:

  A connection is said to be Sticky when:

  A. The connection information sticks in the connection table even after the connection has ended.
  B. A copy of each packet in the connection sticks in the connection table until a corresponding reply packet is received from the other side.
  C. A connection is not terminated by either side by FIN or RST packet.
  D. All the connection packets are handled, in either direction, by a single cluster member.
  D. All the connection packets are handled, in either direction, by a single cluster member.

• Question 339:

  Cody is notified by blacklist.org that his site has been reported as a spam relay, due to his SMTP Server being unprotected. Cody decides to implement an SMTP Security Server, to prevent the server from being a spam relay. Which of the following is the most efficient configuration method?

  A. Configure the SMTP Security Server to perform MX resolving.
  B. Configure the SMTP Security Server to perform filtering, based on IP address and SMTP protocols.
  C. Configure the SMTP Security Server to work with an OPSEC based product, for content checking.
  D. Configure the SMTP Security Server to apply a generic "from" address to all outgoing mail.
  E. Configure the SMTP Security Server to allow only mail to or from names, within Cody's corporate domain.
  E. Configure the SMTP Security Server to allow only mail to or from names, within Cody's corporate domain.

• Question 340:

  DRAG DROP

  ABC.com has two sites using certificates-based VPN issued by the ICA. The two sites, Tokyo and Paris, are configured using a simplified VPN policy. You are trying to integrate a new office opening in New Delhi. You must enable all three

  sites to connect via the VPN to each other. Three Security Gateways are managed by the same SmartCenter Server behind the Paris Security Gateway.

  After creating the Dubai Gateway object with the proper VPN domain, what must you do?

  Select and Place: