CheckPoint 156-215.75 Online Practice Questions and Exam Preparation

CheckPoint 156-215.75 Online Questions & Answers

• Question 461:

  The ________ Check Point ClusterXL mode must synchronize the physical interface IP and MAC addresses on all clustered interfaces.

  A. New Mode HA
  B. Pivot Mode Load Sharing
  C. Multicast Mode Load Sharing
  D. Legacy Mode HA
  D. Legacy Mode HA

• Question 462:

  Which internal user authentication protocols are supported in SSL VPN?

  A. Check Point Password, SecurID, LDAP, RADIUS, TACACS
  B. Check Point Password, SecurID, L2TP, RADIUS, TACACS
  C. Check Point Password, SecurID, Active Directory, RADIUS, TACACS
  D. Point Password, SecurID, OS Password, RADIUS, TACACS
  D. Point Password, SecurID, OS Password, RADIUS, TACACS

• Question 463:

  Assuming all connections that are allocated bandwidth in your Check Point QoS Rule Base are open, what would be the corresponding bandwidth percentage of the Kazaa Rule in the following example?

  

  A. 5%
  B. 20%
  C. 8%
  D. 14%
  D. 14%

• Question 464:

  You are trying to configure Directional VPN Rule Match in the Rule Base. But the Match column does not have the option to see the Directional Match. You see the following window. What must you enable to see the Directional Match?

  A. VPN Directional Match on the Gateway object's VPN tab
  B. Advanced Routing on each Security Gateway
  C. VPN Directional Match on the VPN advanced window, in Global Properties
  D. directional_match(true) in the objects_5_0.C file on Security Management Server
  C. VPN Directional Match on the VPN advanced window, in Global Properties

• Question 465:

  Frank is concerned with performance and wants to configure the affinities settings. His gateway does not have the Performance Pack running. What would Frank need to perform in order configure those settings?

  A. Edit $FWDIR/conf/fwaffinity.conf and change the settings.
  B. Edit affinity.conf and change the settings.
  C. Run fw affinity and change the settings.
  D. Run sim affinity and change the settings.
  A. Edit $FWDIR/conf/fwaffinity.conf and change the settings.

• Question 466:

  Which of the following statements is TRUE concerning MEP VPN's?

  A. The VPN Client is assigned a Security Gateway to connect to based on a priority list, should the first connection fail.
  B. MEP Security Gateways can be managed by separate Management Servers.
  C. MEP VPN's are restricted to the location of the gateways.
  D. State synchronization between Secruity Gateways is required.
  B. MEP Security Gateways can be managed by separate Management Servers.

• Question 467:

  For Management High Availability, if an Active SMS goes down, does the Standby SMS automatically take over?

  A. Yes, if you set up ClusterXL
  B. Yes, if you set up SecureXL
  C. No, the transition should be initiated manually
  D. Yes, if you set up VRRP
  C. No, the transition should be initiated manually

• Question 468:

  What is the primary benefit of using upgrade_export over either backup or snapshot?

  A. The commands backup and snapshot can take a long time to run whereas upgrade_export will take a much shorter amount of time.
  B. upgrade_export will back up routing tables, hosts files, and manual ARP configurations, where backup and snapshot will not.
  C. upgrade_export has an option to backup the system and SmartView Tracker logs while backup and snapshot will not.
  D. upgrade_export is operating system independent and can be used when backup or snapshot is not available.
  D. upgrade_export is operating system independent and can be used when backup or snapshot is not available.

• Question 469:

  The ______________ contains the Events Data Base.

  A. SmartEvent Client
  B. SmartEvent Correlation Unit
  C. SmartEvent DataServer
  D. SmartEvent Server
  D. SmartEvent Server

• Question 470:

  When deploying a dedicated DLP Gateway behind a perimeter firewall on an interface leading to the internal network (there is only one internal network):

  A. The DLP Gateway can inspect SMTP traffic if a MS Exchange server is located on the internal network, and it either sends e-mails directly to the Internet using SMTP or sends e-mails to the Internet in SMTP via a mail relay that is located on the perimeter's firewall DMZ network.
  B. The DLP Gateway can inspect internal e-mails (e-mails between two users on the internal network) if the organization's internal mail server is located in the internal network and users are configured to send e-mails to this mail server using SMTP.
  C. User's HTTPS and FTP traffic can be inspected by the R71 DLP Gateway.
  D. The DLP Gateway can inspect e-mails (e-mails between two users on an internal or external network) if the organization's internal mail server is located on another network (not the internal network; for instance the DMZ or a different internal network) and users are configured to send e- mails to this mail server using SMTP.
  A. The DLP Gateway can inspect SMTP traffic if a MS Exchange server is located on the internal network, and it either sends e-mails directly to the Internet using SMTP or sends e-mails to the Internet in SMTP via a mail relay that is located on the perimeter's firewall DMZ network.