CheckPoint 156-215.75 Online Practice Questions and Exam Preparation

CheckPoint 156-215.75 Online Questions & Answers

• Question 381:

  What is a requirement for setting up R75 Management High Availability?

  A. All Security Management Servers must have the same number of NICs.
  B. All Security Management Servers must have the same operating system.
  C. State synchronization must be enabled on the secondary Security Management Server.
  D. All Security Management Servers must reside in the same LAN.
  B. All Security Management Servers must have the same operating system.

• Question 382:

  Which of the following statements is FALSE regarding OSPF configuration on SecurePlatform Pro?

  A. router ospf 1 creates the Router ID for the Security Gateway and should be the same ID for all Gateways.
  B. router ospf 1 creates the Router ID for the Security Gateway and should be different for all Gateways.
  C. router ospf 1 creates an OSPF routing instance and this process ID should be different for each Security Gateway.
  D. router ospf 1 creates an OSPF routing instance and this process ID should be the same on all Gateways.
  D. router ospf 1 creates an OSPF routing instance and this process ID should be the same on all Gateways.

• Question 383:

  Please review the following QoS policy:

  Assume you have 200 Kbps bandwidth available at all times.

  Which statement would describe this policy?

  A. The un-named rule has a total Guarantee of 5 Kbps, which should be 50 and lower the other Guarantees.
  B. Guarantee values are set too high, you have no bandwidth available for anything else besides traffic describe in first rules.
  C. All traffic matching the default rule will have priority
  D. All traffic will receive sufficient bandwidth because the default rule has a low weight value.
  B. Guarantee values are set too high, you have no bandwidth available for anything else besides traffic describe in first rules.

• Question 384:

  Which of the listed load-balancing methods is NOT valid?

  A. Random
  B. Domain
  C. They are all valid
  D. Round Trip
  C. They are all valid

• Question 385:

  Which of the following is the default port for Management Portal?

  A. 4434
  B. 443
  C. 444
  D. 4433
  D. 4433

• Question 386:

  What happens in relation to the CRL cache after a cpstop;spstart has been initiated?

  A. The gateway continues to use the old CRL even if it is not valid, until a new CRL is cached
  B. The gateway continues to use the old CRL, as long as it is valid.
  C. The gateway issues a crl_zap on startup, which empties the cache and forces Certificate retrieval.
  D. The gateway retrieves a new CRL on startup, then discards the old CRL as invalid.
  B. The gateway continues to use the old CRL, as long as it is valid.

• Question 387:

  You have a production implementation of Management High Availability, at version VPN-1 NG with Application Intelligence R55. You must upgrade your two SmartCenter Servers to VPN-1 NGX. What is the correct procedure?

  A. 1. Synchronize the two SmartCenter Servers. 2. Upgrade the secondary SmartCenter Server. 3. Upgrade the primary SmartCenter Server. 4. Configure both SmartCenter Server host objects version to VPN-1 NGX. 5. Synchronize the Servers again.
  B. 1. Synchronize the two SmartCenter Servers. 2. Perform an advanced upgrade on the primary SmartCenter Server. 3. Upgrade the secondary SmartCenter Server. 4. Configure both SmartCenter Server host objects to version VPN-1 NGX. 5. Synchronize the Servers again.
  C. 1. Perform an advanced upgrade on the primary SmartCenter Server. 2. Configure the primary SmartCenter Server host object to version VPN-1 NGX. 3. Synchronize the primary with the secondary SmartCenter Server. 4. Upgrade the secondary SmartCenter Server. 5. Configure the secondary SmartCenter Server host object to version VPN-1 NGX. 6. Synchronize the Servers again.
  D. 1. Synchronize the two SmartCenter Servers. 2. Perform an advanced upgrade on the primary SmartCenter Server. 3. Configure the primary SmartCenter Server host object to version VPN-1 NGX. 4. Synchronize the two Servers again. 5. Upgrade the secondary SmartCenter Server. 6. Configure the secondary SmartCenter Server host object to version VPN-1 NGX. 7. Synchronize the Servers again.
  B. 1. Synchronize the two SmartCenter Servers. 2. Perform an advanced upgrade on the primary SmartCenter Server. 3. Upgrade the secondary SmartCenter Server. 4. Configure both SmartCenter Server host objects to version VPN-1 NGX. 5. Synchronize the Servers again.

• Question 388:

  Which of the following statements is TRUE concerning MEP VPN's?

  A. MEP Security Gateways cannot be managed by separate Management Servers.
  B. MEP VPN's are restricted to the location of the gateways.
  C. The VPN Client selects which Security Gateway takes over, should the first connection fail.
  D. State synchronization betweened Secruity Gateways is required.
  C. The VPN Client selects which Security Gateway takes over, should the first connection fail.

• Question 389:

  Which of the following commands can be used to stop Management portal services?

  A. fw stopportal
  B. cpportalstop
  C. cpstop / portal
  D. smartportalstop
  D. smartportalstop

• Question 390:

  Your organization maintains several IKE VPN's. Executives in your organization want to know which mechanism Security Gateway R75 uses to guarantee the authenticity and integrity of messages. Which technology should you explain to the executives?

  A. Digital signatures
  B. Certificate Revocation Lists
  C. Key-exchange protocols
  D. Application Intelligence
  A. Digital signatures