CheckPoint 156-215.75 Online Practice Questions and Exam Preparation

CheckPoint 156-215.75 Online Questions & Answers

• Question 441:

  When using ClusterXL in Load Sharing, what is the default method?

  A. IPs, Ports, SPIs
  B. IPs
  C. IPs, Ports
  D. IPs, SPIs
  A. IPs, Ports, SPIs

• Question 442:

  Which of the following is TRUE concerning numbered VPN Tunnel Interfaces (VTIs)?

  A. VTIs are assigned only local addresses, not remote addresses
  B. VTIs are only supported on IPSO
  C. VTIs cannot share IP addresses
  D. VTIs cannot use an already existing physical-interface IP address
  D. VTIs cannot use an already existing physical-interface IP address

• Question 443:

  To configure a client to properly log in to the user portal using a certificate, the Administrator MUST:

  A. Create an internal user in the admin portal.
  B. Install an R71 internal Certificate Authority certificate.
  C. Create a client certificate from SmartDashboard.
  D. Store the client certificate on the SSL VPN Gateway.
  A. Create an internal user in the admin portal.

• Question 444:

  What is a task of the SmartEvent Client?

  A. Add events to the events database.
  B. Display the received events.
  C. Assign a severity level to an event.
  D. Analyze each IPS log entry as it enters the Log server.
  B. Display the received events.

• Question 445:

  Check Point New Mode HA is a(n) _________ solution.

  A. primary-domain
  B. hot-standby
  C. acceleration
  D. load-balancing
  B. hot-standby

• Question 446:

  You use the snapshot feature to store your Connectra SSL VPN configuration. What do you expect to find?

  A. Nothing; snapshot is not supported in Connectra SSL VPN.
  B. The management configuration of the current product, on a management or stand-alone machine
  C. A complete image of the local file system
  D. Specified directories of the local file system.
  C. A complete image of the local file system

• Question 447:

  What cluster mode is represented in this case? 1). (local) 172.168.1.1 100$ active 2). 172.14*.1.2 0$ standby

  A. Load Sharing (multicast mode)
  B. HA (New mode).
  C. 3rd party cluster
  D. Load Sharing Unicast (Pivot) mode
  B. HA (New mode).

• Question 448:

  You are using SmartUpdate to fetch data and perform a remote upgrade of an NGX Security Gateway. Which of the following statements is FALSE?

  A. If SmartDashboard is open during package upload and upgrade, the upgrade will fail.
  B. A remote installation can be performed without the SVN Foundation package installed on a remote NG with Application Intelligence Security Gateway
  C. SmartUpdate can query the SmartCenter Server and VPN-1 Gateway for product information
  D. SmartUpdate can query license information running locally on the VPN-1 Gateway
  B. A remote installation can be performed without the SVN Foundation package installed on a remote NG with Application Intelligence Security Gateway

• Question 449:

  Which of the following log files contains information about the negotiation process for encryption?

  A. ike.elg
  B. iked.elg
  C. vpnd.elg
  D. vpn.elg
  A. ike.elg

• Question 450:

  Which command can be used to verify SecureXL statistics?

  A. fwaccel top
  B. fwaccel stats
  C. fw ctl pstat
  D. cphaprob stat
  B. fwaccel stats