CheckPoint 156-215.75 Online Practice Questions and Exam Preparation

CheckPoint 156-215.75 Online Questions & Answers

• Question 601:

  Check Point recommends that you back up systems running Check Point products. Run your back ups during maintenance windows to limit disruptions to services, improve CPU usage, and simplify time allotment. Which back up method does Check Point recommend anytime outside a maintenance window?

  A. backup
  B. migrate export
  C. backup_export
  D. snapshot
  B. migrate export

• Question 602:

  Which statement is TRUE for route-based VPNs?

  A. Route-based VPNs replace domain-based VPNs.
  B. Route-based VPNs are a form of partial overlap VPN Domain.
  C. IP Pool NAT must be configured on each gateway.
  D. Dynamic-routing protocols are not required.
  D. Dynamic-routing protocols are not required.

• Question 603:

  In R71, My Organization e-mail addresses or domains are used for:

  A. Scanning e-mails only if its sender e-mail address is part of this definition, by default.
  B. Defining the e-mail address of the SMTP relay server.
  C. FTP traffic sent from a user where his e-mail is part of this definition scanned by DLP, by default.
  D. HTTP traffic sent from a user where his e-mail is part of this definition scanned by DLP, by default.
  A. Scanning e-mails only if its sender e-mail address is part of this definition, by default.

• Question 604:

  The SmartEvent Correlation Unit:

  A. adds events to the events database.
  B. assigns a severity level to an event.
  C. forwards what is identified as an event to the SmartEvent server.
  D. displays the received events.
  C. forwards what is identified as an event to the SmartEvent server.

• Question 605:

  Which of the following actions is most likely to improve the performance of Check Point QoS?

  A. Put the most frequently used rules at the bottom of the QoS Rule Base.
  B. Define Check Point QoS only on the external interfaces of the QoS Module.
  C. Turn per rule limits into per connection limits
  D. Turn per rule guarantees into per connection guarantees.
  B. Define Check Point QoS only on the external interfaces of the QoS Module.

• Question 606:

  A customer calls saying that a Load Sharing cluster shows drops with the error First packet is not SYN. Complete the following sentence. I will recommend:

  A. turning on SDF (Sticky Decision Function)
  B. turning off SDF (Sticky Decision Function)
  C. changing the load on each member
  D. configuring flush and ack
  A. turning on SDF (Sticky Decision Function)

• Question 607:

  When using Connectra with Endpoint Security Policies, what option is not available when configuring DAT enforcement?

  A. Maximum DAT file version
  B. Maximum DAT file age
  C. Minimum DAT file version
  D. Oldest DAT file timestamp
  A. Maximum DAT file version

• Question 608:

  Identify the correct step performed by SmartUpdate to upgrade a remote Security Gateway.

  A. After selecting "Packages: Add... from CD", the entire contents of the CD are copied to the packages directory on the selected remote Security Gateway.
  B. After selecting "Packages: Add... from CD", the entire contents of the CD are copied to the Package Repository on the SmartCenter Server.
  C. After selecting "Packages: Add... from CD", the selected package is copied to the packages directory on the selected remote Security Gateway.
  D. After selecting "Packages: Add... from CD", the selected package is copied to the Package Repository on the SmartCenter Server.
  D. After selecting "Packages: Add... from CD", the selected package is copied to the Package Repository on the SmartCenter Server.

• Question 609:

  How does ClusterXL Unicast mode handle new traffic?

  A. All members receive all packets. The Security Management Server decides which member will process the packets. Other members delete the packets from memory.
  B. The pivot machine receives and inspects all new packets then synchronizes the connections with other members
  C. The pivot machine receives all the packets and runs an algorithm to determine which member should process the packets
  D. All cluster members' process all packets and members synchronize with each other. The pivot is responsible for the master sync catalog
  C. The pivot machine receives all the packets and runs an algorithm to determine which member should process the packets

• Question 610:

  Which of the following statements is TRUE concerning MEP VPN's?

  A. State synchronization between Security Gateways is NOT required.
  B. MEP Security Gateways cannot be managed by separate Management Servers.
  C. The VPN Client is assigned a Security Gateway to connect to based on a priority list, should the first connection fail.
  D. MEP VPN's are restricted to the location of the gateways.
  A. State synchronization between Security Gateways is NOT required.