CheckPoint 156-215.75 Online Practice Questions and Exam Preparation

CheckPoint 156-215.75 Online Questions & Answers

• Question 561:

  What is the default port number for standard TCP connections with the LDAP server?

  A. 398
  B. 636
  C. 389
  D. 363
  C. 389

• Question 562:

  Which Check Point QoS feature allows a Security Administrator to define special classes of service for delay-sensitive applications?

  A. Guarantees
  B. Weighted Fair Queuing
  C. Differentiated Services
  D. Low Latency Queuing
  D. Low Latency Queuing

• Question 563:

  If the number of kernel instances for CoreXL shown is 6, how many cores are in the physical machine?

  A. 6
  B. 8
  C. 4
  D. 12
  B. 8

• Question 564:

  How does a standby SmartCenter Server receive logs from all Security Gateways, when an active SmartCenter Server fails over?

  A. The remote Gateways must set up SIC with the secondary SmartCenter Server, for logging.
  B. Establish Secure Internal Communications (SIC) between the primary and secondary Servers. The secondary Server can then receive logs from the Gateways, when the active Server fails over.
  C. On the Log Servers screen (from the Logs and Masters tree on the gateway object's General Properties screen), add the secondary SmartCenter Server object as the additional log server. Reinstall the Security Policy.
  D. Create a Check Point host object to represent the standby SmartCenter Server. Then select "Secondary SmartCenter Server" and Log Server", from the list of Check Point Products on the General properties screen.
  E. The secondary Server's host name and IP address must be added to the Masters file, on the remote Gateways.
  C. On the Log Servers screen (from the Logs and Masters tree on the gateway object's General Properties screen), add the secondary SmartCenter Server object as the additional log server. Reinstall the Security Policy.

• Question 565:

  When using Captive Portal to send unidentified users to a Web portal for authentication, which of the following is NOT a recommended use for this method?

  A. Identity-based enforcement for non-AD users (non-Windows and guest users)
  B. For deployment of Identity Agents
  C. Basic identity enforcement in the internal network
  D. Leveraging identity in Internet application control
  C. Basic identity enforcement in the internal network

• Question 566:

  How would you set the debug buffer size to 1024?

  A. Run fw ctl set buf 1024
  B. Run fw ctl kdebug 1024
  C. Run fw ctl debug -buf 1024
  D. Run fw ctl set int print_cons 1024
  C. Run fw ctl debug -buf 1024

• Question 567:

  What is the purpose of the pre-defined exclusions included with SmartEvent R71?

  A. To give samples of how to write your own exclusion.
  B. To avoid incorrect event generation by the default IPS event definition; a scenario that may occur in deployments that include Security Gateways of versions prior to R71.
  C. To allow SmartEvent R71 to function properly with all other R71 release devices.
  D. As a base for starting and building exclusions.
  B. To avoid incorrect event generation by the default IPS event definition; a scenario that may occur in deployments that include Security Gateways of versions prior to R71.

• Question 568:

  Which command provides cluster upgrade status?

  A. cphaprob status
  B. cphaprob ldstat
  C. cphaprob fcustat
  D. cphaprob tablestat
  C. cphaprob fcustat

• Question 569:

  Based on the following information, which of the statements below is FALSE? A DLP Rule Base has the following conditions: Data Type =Password Protected File Source=My Organization Destination=Outside My Organization Protocol=Any Action=Ask User Exception: Data Type=Any, Source=Research and Development (RandD) Destination=Pratner1.com Protocol=Any All other rules are set to Detect. UserCheck is enabled and installed on all client machines.

  A. When a user from RandD sends an e-mail with a password protected PDF file as an attachment to xyz@partner1 .com, he will be prompted by UserCheck.
  B. When a user from Finance sends an e-mail with an encrypted ZIP file as an attachment to. He will be prompted by UserCheck.
  C. Another rule is added: Source = RandD, Destination = partner1.com, Protocol = Any, Action = Inform. When a user from RandD sends an e-mail with an encrypted ZIP file as an attachment to, he will be prompted by UserCheck.
  D. When a user from RandD sends an e-mail with an encrypted ZIP file as an attachment to , he will NOT be prompted by UserCheck.
  B. When a user from Finance sends an e-mail with an encrypted ZIP file as an attachment to. He will be prompted by UserCheck.

• Question 570:

  Remote clients are using IPSec VPN to authenticate via LDAP server to connect to the organization. Which gateway process is responsible for the authentication?

  A. vpnd
  B. cpvpnd
  C. fwm
  D. fwd
  A. vpnd