CheckPoint 156-215.75 Online Practice Questions and Exam Preparation

CheckPoint 156-215.75 Online Questions & Answers

• Question 351:

  Which of the following is TRUE concerning unnumbered VPN Tunnel Interfaces (VTIs)?

  A. VTIs must be assigned a proxy interface.
  B. VTIs can only be physical, not loopback.
  C. VTIs are only supported on SecurePlatform.
  D. Local IP addresses are not configured, remote IP addresses are configured.
  A. VTIs must be assigned a proxy interface.

• Question 352:

  You enable Sweep Scan Protection and Host port scan in IPS to determine if a large amount of traffic from a specific internal IP address is a network attack, or a user's system is infected with a worm. Will you get all the information you need from these actions?

  A. Yes. IPS will limit the traffic impact from the scans, and identify if the pattern of the traffic matches any known worms.
  B. No. These IPS protections will only block the traffic, but it will not provide a detailed analysis of the traffic.
  C. No. To verify if this is a worm or an active attack, you must also enable TCP attack defenses.
  D. No. The logs and alert can provide some level of information, but determining whether the attack is intentional or a worm, requires further research.
  D. No. The logs and alert can provide some level of information, but determining whether the attack is intentional or a worm, requires further research.

• Question 353:

  Which Check Point QoS feature is used to dynamically allocate relative portions of available bandwidth?

  A. Guarantees
  B. Weighted Fair Queuing
  C. Low Latency Queuing
  D. Differentiated Services
  B. Weighted Fair Queuing

• Question 354:

  After repairing a SmartWorkflow session:

  A. The session moves to status Repaired and a new session can be started.
  B. The session moves to status Awaiting Repair and must be resubmitted.
  C. The session is continued with status Not approved and a new session must be started.
  D. The session is discarded and a new session is automatically started.
  A. The session moves to status Repaired and a new session can be started.

• Question 355:

  Which of the following access options would you NOT use when configuring Captive Portal?

  A. Through the Firewall policy
  B. From the Internet
  C. Through all interfaces
  D. Through internal interfaces
  B. From the Internet

• Question 356:

  What access level cannot be assigned to an Administrator in SmartEvent?

  A. No Access
  B. Write only
  C. Read only
  D. Events Database
  B. Write only

• Question 357:

  Wayne configures an HTTP Security Server to work with the content vectoring protocol to screen forbidden sites. He has created a URI resource object using CVP with the following settings:

  Use CVP

  Allow CVP server to modify content

  Return data after content is approved

  He adds two rules to his Rule Base: one to inspect HTTP traffic going to known forbidden sites, the other to allow all other HTTP traffic.

  Wayne sees HTTP traffic going to those problematic sites is not prohibited.

  What could cause this behavior?

  A. The Security Server Rule is after the general HTTP Accept Rule.
  B. The Security Server is not communicating with the CVP server.
  C. The Security Server is not configured correctly.
  D. The Security Server is communicating with the CVP server, but no restriction is defined in the CVP server.
  A. The Security Server Rule is after the general HTTP Accept Rule.

• Question 358:

  In SmartDirectory, what is each LDAP server called?

  A. Account Server
  B. Account Unit
  C. LDAP Server
  D. LDAP Unit
  B. Account Unit

• Question 359:

  When migrating the SmartEvent data base from one server to another, the first step is to back up the files on the original server. Which of the following commands should you run to back up the SmartEvent data base?

  A. migrate export
  B. snapshot
  C. backup
  D. eva_db_backup
  D. eva_db_backup

• Question 360:

  You are establishing a ClusterXL environment, with the following topology:

  

  External interfaces 192.168.10.1 and 192.168.10.2 connect to a VLAN switch. The upstream router connects to the same VLAN switch. Internal interfaces 172.16.10.1 and 172.16.10.2 connect to a hub. 10.10.10.0 is the synchronization network. The Security Management Server is located on the internal network with IP 172.16.10.3. What is the problem with this configuration?

  A. Cluster members cannot use the VLAN switch. They must use hubs.
  B. The Cluster interface names must be identical across all cluster members.
  C. There is an IP address conflict.
  D. The Security Management Server must be in the dedicated synchronization network, not the internal network.
  C. There is an IP address conflict.