CheckPoint 156-215.75 Online Practice Questions and Exam Preparation

CheckPoint 156-215.75 Online Questions & Answers

• Question 511:

  In ClusterXL, _______ is defined by default as a critical device.

  A. fwd
  B. fwm
  C. assld
  D. cpp
  A. fwd

• Question 512:

  When running DLP Wizard for the first time, which of the following is a mandatory configuration?

  A. Mail Server
  B. E-mail Domain in My Organization
  C. DLP Portal URL
  D. Active Directory
  B. E-mail Domain in My Organization

• Question 513:

  When an Endpoint user is able to authenticate but receives a message from the client that it is unable to enforce the desktop policy, what is the most likely scenario?

  A. The user's rights prevent access to the protected network.
  B. A Desktop Policy is not configured.
  C. The gateway could not locate the user in SmartDirectory and is allowing the connection with limitations based on a generic profile.
  D. The user is attempting to connect with the wrong Endpoint client.
  D. The user is attempting to connect with the wrong Endpoint client.

• Question 514:

  Which external user authentication protocols are supported in SSL VPN?

  A. LDAP, Active Directory, SecurID
  B. DAP, SecurID, Check Point Password, OS Password, RADIUS, TACACS
  C. LDAP, RADIUS, Active Directory, SecurID
  D. LDAP, RADIUS, TACACS, SecurID
  B. DAP, SecurID, Check Point Password, OS Password, RADIUS, TACACS

• Question 515:

  Central License management allows a Security Administrator to perform which of the following? Select all that apply.

  A. Attach and/or delete only NGX Central licenses to a remote module (not Local licenses)
  B. Check for expired licenses
  C. Add or remove a license to or from the license repository
  D. Sort licenses and view license properties
  E. Delete both NGX Local licenses and Central licenses from a remote module
  F. Attach both NGX Central and Local licenses to a remote moduel
  A. Attach and/or delete only NGX Central licenses to a remote module (not Local licenses)
  B. Check for expired licenses
  C. Add or remove a license to or from the license repository
  D. Sort licenses and view license properties

• Question 516:

  Which of the following commands can provide the most complete restore of an R75 configuration?

  A. upgrade_import
  B. fwm dbimport -p
  C. cpconfig
  D. cpinfo -recover
  A. upgrade_import

• Question 517:

  When restoring R75 using the command upgrade_import, which of the following items are NOT restored?

  A. Global properties
  B. Route tables
  C. Licenses
  D. SIC Certificates
  B. Route tables

• Question 518:

  What configuration change must you make to change an existing ClusterXL cluster object from Multicast to Unicast mode?

  A. Reset Secure Internal Communications (SIC) on the cluster-member objects. Reinstall the Security Policy.
  B. Run cpstop and cpstart, to re-enable High Availability on both objects. Select Pivot mode in cpconfig.
  C. Change the cluster mode to Unicast on the cluster object. Reinstall the Security Policy.
  D. Change the cluster mode to Unicast on each of the cluster-member objects.
  C. Change the cluster mode to Unicast on the cluster object. Reinstall the Security Policy.

• Question 519:

  Which is NOT a method through which Identity Awareness receives its identities?

  A. GPO
  B. Captive Portal
  C. AD Query
  D. Identity Agent
  A. GPO

• Question 520:

  In the following command,

  LSMcli [-d] "server"

  should be replaced with:

  A. Hostname of ROBO gateway
  B. Hostname DAIP device
  C. IP address of the Security Management server
  D. GUIclient
  C. IP address of the Security Management server