CheckPoint CCSA 156-215.75 Questions & Answers

• Question 441:

  Where can you find the Check Point's SNMP MIB file?

  A. $FWDIR/conf/snmp.mib

  B. It is obtained only by request from the TAC.

  C. $CPDIR/lib/snmp/chkpt.mib

  D. There is no specific MIB file for Check Point products.

  Correct Answer: C

• Question 442:

  You intend to upgrade a Check Point Gateway from R65 to R75. Prior to upgrading, you want to backup the Gateway should there be any problems with the upgrade. Which of the following allows for the Gateway configuration to be completely backed up into a manageable size in the least amount of time?

  A. Backup

  B. Snapshot

  C. Upgrade_export

  D. Database_revision

  Correct Answer: A

• Question 443:

  Your network is experiencing connectivity problems and you want to verify if routing problems are present. You need to disable the firewall process but still allow routing to pass through the Gateway running on an IP Appliance running IPSO. What command do you need to run after stopping the firewall service?

  A. fw fwd routing

  B. ipsofwd on admin

  C. fw load routed

  D. ipsofwd slowpath

  Correct Answer: B

• Question 444:

  Which operating systems are supported by a Check Point Security Gateway on an open server?

  A. Check Point SecurePlatform and Microsoft Windows

  B. Sun Solaris, Red Hat Enterprise Linux, Check Point SecurePlatform, IPSO, Microsoft Windows

  C. Check Point SecurePlatform, IPSO, Sun Solaris, Microsoft Windows

  D. Microsoft Windows, Red Hat Enterprise Linux, Sun Solaris, IPSO

  Correct Answer: A

• Question 445:

  Before upgrading SecurePlatform, you should create a backup. To save time, many administrators use the command backup. This creates a backup of the Check Point configuration as well as the system configuration. An administrator has installed the latest HFA on the system for fixing traffic problem after creating a backup file. There is a mistake in the very complex static routing configuration. The Check Point configuration has not been changed. Can the administrator use a restore to fix the errors in static routing?

  A. The restore can be done easily by the command restore and selecting the appropriate backup file.

  B. A backup cannot be restored, because the binary files are missing.

  C. The restore is not possible because the backup file does not have the same build number (version).

  D. The restore is done by selecting Snapshot Management from the boot menu of SecurePlatform.

  Correct Answer: A

• Question 446:

  You are running a R75 Security Gateway on SecurePlatform. In case of a hardware failure, you have a server with the exact same hardware and firewall version installed. What backup method could be used to quickly put the secondary firewall into production?

  A. upgrade_export

  B. manual backup

  C. snapshot

  D. backup

  Correct Answer: C

• Question 447:

  John currently administers a network using single CPU single core servers for the Security Gateways and is running R75. His company is now going to implement VOIP and needs more performance on the Gateways. He is now adding more memory to the systems and also upgrades the CPU to a modern quad core CPU in the server. He wants to use CoreXL technology to benefit from the new performance benchmarks of this technology. How can he achieve this?

  A. Nothing needs to be done. SecurePlatform recognized the change during reboot and adjusted all the settings automatically.

  B. He just needs to go to cpconfig on the CLI and enable CoreXL. Only a restart of the firewall is required to benefit from CoreXL technology.

  C. He needs to reinstall the Gateways because during the initial installation, it was a single-core CPU but the wrong Linux kernel was installed. There is no other upgrade path available.

  D. He just needs to go to cpconfig on the CLI and enable CoreXL. After the required reboot he will benefit from the new technology.

  Correct Answer: D

• Question 448:

  Which CLI command verifies the number of cores on your firewall machine?

  A. fw ctl pstat

  B. fw ctl core stat

  C. fw ctl multik stat

  D. cpstat fw -f core

  Correct Answer: C

• Question 449:

  John currently administers a network using NGX R65.4 on the Security Management Server and NGX R65.2.100 (the VOIP release with the VOIP plug-ins enabled). He wants to upgrade to R75 to get the benefits of Check Point's Software Blades. What would be the best way of doing this?

  A. This can not be done yet as R75 can not manage NGX R65 Gateways due to SmartDefense and IPS mismatch problems.

  B. Run upgrade_export on R65 management, then install R75 on this machine and run upgrade_import and re-license the systems to use software blades.

  C. Just insert the R75 CD-ROM and run the in-place upgrade.

  D. This is not supported today as currently the VOIP Software Blade and VOIP plug-in is not available in R75.

  Correct Answer: D

• Question 450:

  What information is provided from the options in this screenshot?

  

  (i)Whether a SIC certificate was generated for the Gateway (ii)Whether the operating system is SecurePlatform or SecurePlatform Pro (iii)Whether this is a standalone or distributed installation

  A. (i), (ii) and (iii)

  B. (i) and (iii)

  C. (i) and (ii)

  D. (ii) and (iii)

  Correct Answer: D