CheckPoint 156-215.75 Online Practice Questions and Exam Preparation

CheckPoint 156-215.75 Online Questions & Answers

• Question 521:

  Management Portal should be installed on:

  (i)

  Management Server

  (ii)

  Security Gateway

  (iii)

  Dedicated Server

  A. All are possible solutions
  B. (ii) only
  C. (iii) only
  D. (i) or (ii) only
  D. (i) or (ii) only

• Question 522:

  What process manages the dynamic routing protocols (OSPF, RIP, etc.) on SecurePlatform Pro?

  A. gated
  B. There's no separate process, but the Linux default router can take care of that.
  C. routerd
  D. arouted
  A. gated

• Question 523:

  Which of the following is NOT accelerated by SecureXL?

  A. Telnet
  B. FTP
  C. SSH
  D. HTTPS
  B. FTP

• Question 524:

  For a dedicated DLP Gateway that runs in inline bridge mode, why is it important to properly define the topology?

  A. Topology definition is necessary for correct anti-spoofing.
  B. Topology is used for Hide NAT.
  C. By default. My Organization is defined by the internal interfaces of a DLP Gateway.
  D. Topology definition is used for VPN communities definition.
  C. By default. My Organization is defined by the internal interfaces of a DLP Gateway.

• Question 525:

  Which of the following is NOT a feature of ClusterXL?

  A. Enhanced throughput in all ClusterXL modes (2 gateway cluster compared with 1 gateway)
  B. Transparent failover in case of device failures
  C. Zero downtime for mission-critical environments with State Synchronization
  D. Transparent upgrades
  C. Zero downtime for mission-critical environments with State Synchronization

• Question 526:

  There are times when you want to use Link Selection to manage high-traffic VPN connections.

  With Link Selection you can:

  A. Assign links to use Dynamic DNS.
  B. Use links based on authentication method.
  C. Use links based on Day/Time.
  D. Use Load Sharing to distribute VPN traffic.
  D. Use Load Sharing to distribute VPN traffic.

• Question 527:

  When configuring a Permanent Tunnel between two gateways in a Meshed VPN community, in what object is the tunnel managed?

  A. VPN Community object
  B. Each participating Security Gateway object
  C. Security Management Server
  D. Only the local Security Gateway object
  A. VPN Community object

• Question 528:

  Which of the following is TRUE concerning numbered VPN Tunnel Interfaces (VTIs)?

  A. VTIs can use an already existing physical-interface IP address
  B. VTIs cannot share IP addresses
  C. VTIs are supported on SecurePlatform Pro
  D. VTIs are assigned only local addresses, not remote addresses
  C. VTIs are supported on SecurePlatform Pro

• Question 529:

  What is the most common cause for a Quick mode packet 1 failing with the error "No Proposal Chosen" error?

  A. The OS and patch level of one gateway does not match the other.
  B. The previously established Permanent Tunnel has failed.
  C. There is a network connectivity issue.
  D. The encryption strength and hash settings of one peer does not match the other.
  D. The encryption strength and hash settings of one peer does not match the other.

• Question 530:

  How could you compare the Fingerprint shown to the Fingerprint on the server?

  

  A. Run cpconfig, select the Certificate's Fingerprint option and view the fingerprint
  B. Run cpconfig, select the GUI Clients option and view the fingerprint
  C. Run cpconfig, select the Certificate Authority option and view the fingerprint
  D. Run sysconfig, select the Server Fingerprint option and view the fingerprint
  A. Run cpconfig, select the Certificate's Fingerprint option and view the fingerprint