CheckPoint 156-215.75 Online Practice Questions and Exam Preparation

CheckPoint 156-215.75 Online Questions & Answers

• Question 571:

  If Jack was concerned about the number of log entries he would receive in the SmartReporter system, which policy would he need to modify?

  A. Consolidation Policy
  B. Log Consolidator Policy
  C. Log Sequence Policy
  D. Report Policy
  A. Consolidation Policy

• Question 572:

  How can you disable SecureXL via the command line (it does not need to survive a reboot)?

  A. cphaprob off
  B. fw ctl accel off
  C. securexl off
  D. fwaccel off
  D. fwaccel off

• Question 573:

  Jerry is concerned that a denial-oF. service (DoS) attack may affect his VPN Communities. He decides to implement IKE DoS protection. Jerry needs to minimize the performance impact of implementing this new protection. Which of the following configurations is MOST appropriate for Jerry?

  A. Set Support IKE DoS protection from identified source to "Puzzles", and Support IKE DoS protection from unidentified source to "Stateless".
  B. Set Support IKE Dos Protection from identified source, and Support IKE DoS protection from unidentified source to "Puzzles".
  C. Set Support IKE DoS protection from identified source to "Stateless," and Support IKE DoS protection from unidentified source to "Puzzles".
  D. Set "Support IKE DoS protection" from identified source, and "Support IKE DoS protection" from unidentified source to "Stateless".
  E. Set Support IKE DoS protection from identified source to "Stateless", and Support IKE DoS protection from unidentified source to "None".
  D. Set "Support IKE DoS protection" from identified source, and "Support IKE DoS protection" from unidentified source to "Stateless".

• Question 574:

  Barak is a Security Administrator for an organization that has two sites using prE. shared secrets in its VPN. The two sites are Oslo and London. Barak has just been informed that a new office is opening in Madrid, and he must enable all three sites to connect via the VPN to each other. Three Security Gateways are managed by the same SmartCenter Server, behind the Oslo Security Gateway. Barak decides to switch from prE. shared secrets to Certificates issued by the Internal Certificate Authority (ICA). After creating the Madrid gateway object with the proper VPN Domain, what are Barak's remaining steps?

  1.

  Disable "PrE. Shared Secret" on the London and Oslo gateway objects

  2.

  Add the Madrid gateway object into the Oslo and London's mesh VPN Community

  3.

  Manually generate ICA Certificates for all three Security Gateways.

  4.

  Configure "Traditional mode VPN configuration" in the Madrid gateway object's VPN screen

  5.

  Reinstall the Security Policy on all three Security Gateways.

  A. 1, 2, 5
  B. 1, 3, 4, 5
  C. 1, 2, 3, 5
  D. 1, 2, 4, 5
  E. 1, 2, 3, 4
  A. 1, 2, 5

• Question 575:

  If you need strong protection for the encryption of user data, what option would be the BEST choice?

  A. When you need strong encryption, IPsec is not the best choice. SSL VPN's are a better choice.
  B. Use Diffie-Hellman for key construction and pre-shared keys for Quick Mode. Choose SHA in Quick Mode and encrypt with AES. Use AH protocol. Switch to Aggressive Mode.
  C. Disable Diffie-Hellman by using stronger certificate based key-derivation. Use AES-256 bit on all encrypted channels and add PFS to QuickMode. Use double encryption by implementing AH and ESP as protocols.
  D. Use certificates for Phase 1, SHA for all hashes, AES for all encryption and PFS, and use ESP protocol.
  D. Use certificates for Phase 1, SHA for all hashes, AES for all encryption and PFS, and use ESP protocol.

• Question 576:

  You are concerned that the processor for your firewall running NGX R71 SecurePlatform may be overloaded. What file would you view to determine the speed of your processor(s)?

  A. cat /etc/cpuinfo
  B. cat /proc/cpuinfo
  C. cat /var/opt/CPsuite-R71/fw1/conf/cpuinfo
  D. cat /etc/sysconfig/cpuinfo
  B. cat /proc/cpuinfo

• Question 577:

  Which of the following deployment scenarios CANNOT be managed by Check Point QoS?

  A. Two lines connected to a single router, and the router is connected directly to the Gateway
  B. Two lines connected to separate routers, and each router is connected to separate interfaces on the Gateway
  C. One LAN line and one DMZ line connected to separate Gateway interfaces
  D. Two lines connected directly to the Gateway through a hub
  A. Two lines connected to a single router, and the router is connected directly to the Gateway

• Question 578:

  Your company has the requirement that SmartEvent reports should show a detailed and accurate view of network activity but also performance should be guaranteed. Which actions should be taken to achieve that?

  (i)

  Use same hard driver for database directory, log files and temporary directory

  (ii)

  Use Consolidation Rules

  (iii) Limit logging to blocked traffic only

  (iv)

  Using Multiple Database Tables

  A. (i) and (ii)
  B. (ii) and (iv)
  C. (i), (ii) and (iv)
  D. (i), (iii) and (iv)
  B. (ii) and (iv)

• Question 579:

  Which of the following is NOT a LDAP server option in SmartDirectory?

  A. Novell_DS
  B. Netscape_DS
  C. OPSEC_DS
  D. Standard_DS
  D. Standard_DS

• Question 580:

  What is the router command to save your OSPF configuration?

  A. save memory
  B. write config
  C. save
  D. write mem
  D. write mem