CheckPoint 156-215.75 Online Practice Questions and Exam Preparation

CheckPoint 156-215.75 Online Questions & Answers

• Question 451:

  How would you configure a rule in a Security Policy to allow SIP traffic from end point Net_Ato end point Net_B, through an NGX Security Gateway?

  A. Net_A/Net_B/sip/accept
  B. Net_A/Net_B/sip and sip_any/accept
  C. Net_A/Net_B/VolP_any/accept
  D. Net_A/Net_BM3lP/accept
  A. Net_A/Net_B/sip/accept

• Question 452:

  Which of the following is a supported Sticky Decision Function of Sticky Connections for Load Sharing?

  A. Multi-connection support for VPN-1 cluster members
  B. Support for all VPN deployments (except those with third-party VPN peers)
  C. Support for SecureClient/SecuRemote/SSL Network Extender encrypted connections
  D. Support for Performance Pack acceleration
  C. Support for SecureClient/SecuRemote/SSL Network Extender encrypted connections

• Question 453:

  Which type of routing relies on a VPN Tunnel Interface (VTI) to route traffic?

  A. Domain-based VPN
  B. Route-based VPN
  C. Subnet-based VPN
  D. Host-based VPN
  B. Route-based VPN

• Question 454:

  You have configured an LDAP account unit and confirmed the Apply and Fetch Branches option works in SSL VPN, but end users still cannot be authenticated. What is the MOST LIKELY cause?

  A. The Administrator's login is incorrect.
  B. The LDAP server is incorrectly configured.
  C. The user is not defined in Active Directory.
  D. The LDAP account unit's login Distinguished Name is incorrectly configured.
  D. The LDAP account unit's login Distinguished Name is incorrectly configured.

• Question 455:

  A Minimal Effort Upgrade of a cluster:

  A. Is only supported in major releases (R70 to R71, R71 to R75).
  B. Is not a valid upgrade method in R75.
  C. Treats each individual cluster member as an individual gateway.
  D. Upgrades all cluster members except one at the same time.
  C. Treats each individual cluster member as an individual gateway.

• Question 456:

  What is the purpose of the pre-defined exclusions included with SmartEvent R75?

  A. To avoid incorrect event generation by the default IPS event definition; a scenario that may occur in deployments that include Security Gateways of versions prior to R71.
  B. To allow SmartEvent R75 to function properly with all other R71 devices.
  C. To give samples of how to write your own exclusion.
  D. As a base for starting and building exclusions.
  A. To avoid incorrect event generation by the default IPS event definition; a scenario that may occur in deployments that include Security Gateways of versions prior to R71.

• Question 457:

  Remote clients are using SSL VPN to authenticate via LDAP server to connect to the organization. Which gateway process is responsible for the authentication?

  A. vpnd
  B. cpvpnd
  C. fwm
  D. fwd
  B. cpvpnd

• Question 458:

  In which case is a Sticky Decision Function relevant?

  A. Load Sharing - Unicast
  B. Load Balancing - Forward
  C. High Availability
  D. Load Sharing - Multicast
  C. High Availability

• Question 459:

  Which of the following can NOT be modified by editing the cp_httpd_admin.conf file?

  A. Toggling HTTP or HTTPS protocol use
  B. The web server port
  C. Modifying Web server certificate attributes
  D. Administrative Access Level
  D. Administrative Access Level

• Question 460:

  Typically, when you upgrade the Security Management Server, you install and configure a fresh R75 installation on a new computer and then migrate the database from the original machine. When doing this, what is required of the two machines? They must both have the same:

  A. Products installed.
  B. Interfaces configured.
  C. State.
  D. Patch level.
  A. Products installed.