CheckPoint 156-215.75 Online Practice Questions and Exam Preparation

CheckPoint 156-215.75 Online Questions & Answers

• Question 531:

  You need to verify the effectiveness of your IPS configuration for your Web server farm. You have a colleague run penetration tests to confirm that the Web servers are secure against traffic hijacks. Of the following, which would be the best configuration to protect from a traffic hijack attempt?

  A. Enable the Web intelligence > SQL injection setting.
  B. Activate the Cross-Site Scripting property.
  C. Configure TCP defenses such as Small PMTU size.
  D. Create resource objects for the Web farm servers and configure rules for the Web farm.
  B. Activate the Cross-Site Scripting property.

• Question 532:

  Can end users be forced to authenticate by using client certificates and username/password credentials?

  A. Yes, but by manually changing the parameter :IsPasswordWarning to true in the $FWDIR/conf/objects_5_0.C file, to allow for LDAP password remediation; and through the use of multiple-challenge login pages.
  B. No, R71 only supports authentication by client certificates.
  C. Yes, by editing the protection-level settings.
  D. SSL VPN only supports server certificates.
  C. Yes, by editing the protection-level settings.

• Question 533:

  Which of the following statements accurately describes the upgrade_export command?

  A. Used primarily when upgrading the Security Management Server, upgrade_export stores all object databases and the conf directories for importing to a newer version of the Security Gateway.
  B. Used when upgrading the Security Gateway, upgrade_export includes modified files, such as in the directories /lib and /conf.
  C. upgrade_export is used when upgrading the Security Gateway, and allows certain files to be included or excluded before exporting.
  D. upgrade_export stores network-configuration data, objects, global properties, and the database revisions prior to upgrading the Security Management Server.
  A. Used primarily when upgrading the Security Management Server, upgrade_export stores all object databases and the conf directories for importing to a newer version of the Security Gateway.

• Question 534:

  From the following output of cphaprob state, which ClusterXL mode is this?

  

  A. Load Balancing Mode
  B. Multicast mode
  C. Unicast mode
  D. New mode
  E. Legacy mode
  C. Unicast mode

• Question 535:

  You plan to install a VPN-1 Pro Gateway for VPN-1 NGX at your company's headquarters. You have a single Sun SPARC Solaris 9 machine for VPN-1 Pro enterprise implementation. You need this machine to inspect traffic and keep configuration files. Which Check Point software package do you install?

  A. VPN-1 Pro Gateway and primary SmartCenter Server
  B. Policy Server and primary SmartCenter Server
  C. ClusterXL and SmartCenter Server
  D. VPN-1 Pro Gateway
  E. SmartCenter Server
  A. VPN-1 Pro Gateway and primary SmartCenter Server

• Question 536:

  In a R75 ClusterXL Load Sharing configuration, which type of ARP related problem can force the use of Unicast Mode (Pivot) configuration due to incompatibility on some adjacent routers and switches?

  A. Multicast MAC address response to a Unicast IP request
  B. Unicast MAC address response to a Multicast IP request C. Multicast MAC address response to a RARP request
  D. MGCP MAC address response to a Multicast IP request
  A. Multicast MAC address response to a Unicast IP request

• Question 537:

  What is the reason for the following error?

  

  A. A third-party cluster solution is implemented.
  B. Cluster membership is not enabled on the gateway.
  C. Objects.C does not contain a cluster object.
  D. Device Name contains non-ASCII characters.
  B. Cluster membership is not enabled on the gateway.

• Question 538:

  Which of the following is NOT a ClusterXL mode?

  A. Multicast
  B. Legacy
  C. Broadcast
  D. New
  C. Broadcast

• Question 539:

  What is the most typical type of configuration for VPNs with several externally managed Gateways?

  A. star community
  B. mesh community
  C. domain community
  D. Hybrid community
  E. SAT community
  A. star community

• Question 540:

  When upgrading a cluster in Full Connectivity Mode, the first thing you must do is see if all cluster members have the same products installed. Which command should you run?

  A. fw fcu
  B. cphaprob fcustat
  C. cpconfig
  D. fw ctl conn –a
  D. fw ctl conn –a