CheckPoint 156-215.75 Online Practice Questions and Exam Preparation

CheckPoint 156-215.75 Online Questions & Answers

• Question 491:

  In Company XYZ, the DLP Administrator defined a new Keywords Data Type that contains a list of secret project names; i.e., Ayalon, Yarkon, Yarden. The threshold is set to At least 2 keywords or phrases. Based on this information, which of the following scenarios will be a match to the Rule Base?

  A. A PDF file that contains the following text Yarkon1 can be the code name for the new product. Yardens list of protected sites
  B. An MS Excel file that contains the following text Mort resources for Yarkon project.. Are you certain this is about Yarden?
  C. A word file that contains the following text will match: Ayalon ayalon AYALON
  D. A password protected MS Excel file that contains the following text Ayalon Yarkon Yarden
  B. An MS Excel file that contains the following text Mort resources for Yarkon project.. Are you certain this is about Yarden?

• Question 492:

  Which of the following components contains the Events Data Base?

  A. SmartEvent DataServer
  B. SmartEvent Server
  C. SmartEvent Correlation Unit
  D. SmartEvent Client
  B. SmartEvent Server

• Question 493:

  You are running a R75 Security Gateway on SecurePlatform. In case of a hardware failure, you have a server with the exact same hardware and firewall version installed. What backup method could be used to quickly put the secondary firewall into production?

  A. upgrade_export
  B. manual backup
  C. snapshot
  D. backup
  C. snapshot

• Question 494:

  Which of the following is a TRUE statement concerning contract verification?

  A. Your contract file is stored on the User Center and fetched by the Gateway as needed.
  B. Your contract file is stored on the SmartConsole and downloaded to the SmartCenter Server.
  C. Your contract file is stored on the SmartConsole and downloaded to the Gateway.
  D. Your contract file is stored on the SmartCenter Server and downloaded to the Security Gateway.
  D. Your contract file is stored on the SmartCenter Server and downloaded to the Security Gateway.

• Question 495:

  What is the consequence of clearing the "Log VoIP Connection" box in Global Properties?

  A. Dropped VoIP traffic is logged, but accepted VoIP traffic is not logged.
  B. VoIP protocol-specific log fields are not included in SmartView Tracker entries.
  C. The log field setting in rules for VoIP protocols are ignored.
  D. IP addresses are used, instead of object names, in log entries that reference VoIP Domain objects.
  E. The SmartCenter Server stops importing logs from VoIP servers.
  B. VoIP protocol-specific log fields are not included in SmartView Tracker entries.

• Question 496:

  What does it mean when a Security Gateway is labeled Untrusted in the SmartProvisioning Status view?

  A. SIC has not been established between the Security Gateway and the Security Management.
  B. SmartProvisioning is not enabled on the Security Gateway,
  C. cpd is not running at the Security Gateway.
  D. The Security Gateway is down.
  A. SIC has not been established between the Security Gateway and the Security Management.

• Question 497:

  The SmartEvent Correlation Unit:

  A. adds events to the events database.
  B. displaya the received events.
  C. looks for patterns according to the installed Event Policy.
  D. assigns a severity level to an event.
  C. looks for patterns according to the installed Event Policy.

• Question 498:

  When defining an Organizational Unit, which of the following are NOT valid object categories?

  A. Domains
  B. Resources
  C. Users
  D. Services
  A. Domains

• Question 499:

  A snapshot delivers a complete backup of SecurePlatform. The resulting file can be stored on servers or as a local file in /var/CPsnapshot/snapshots. How do you restore a local snapshot named MySnapshot.tgz?

  A. As Expert user, type command snapshot - R to restore from a local file. Then, provide the correct file name.
  B. As Expert user, type command revert --file MySnapshot.tgz.
  C. As Expert user, type command snapshot -r MySnapshot.tgz.
  D. Reboot the system and call the start menu. Select option Snapshot Management, provide the Expert password and select [L] for a restore from a local file. Then, provide the correct file name.
  B. As Expert user, type command revert --file MySnapshot.tgz.

• Question 500:

  Refer to the network topology below. You have IPS Software Blades active on the Security Gateways sglondon, sgla, and sgny, but still experience attacks on the Web server in the New York DMZ. How is this possible?

  A. All of these options are possible.
  B. The attacker may have used a bunch of evasion techniques like using escape sequences instead of cleartext commands. It is also possible that there are entry points not shown in the network layout, like rogue access points.
  C. Since other Gateways do not have IPS activated, attacks may originate from their networks without anyone noticing.
  D. An IPS may combine different detection technologies, but is dependent on regular signature updates and well-tuned anomaly algorithms. Even if this is accomplished, no technology can offer 100% protection.
  A. All of these options are possible.