CheckPoint 156-215.75 Online Practice Questions and Exam Preparation

CheckPoint 156-215.75 Online Questions & Answers

• Question 71:

  What is the benefit to running SmartEvent in Learning Mode?

  A. To run SmartEvent, with a step-by-step online configuration guide for training/setup purposes
  B. There is no SmartEvent Learning Mode
  C. To run SmartEvent with preloaded sample data in a test environment
  D. To generate a report with system Event Policy modification suggestions
  D. To generate a report with system Event Policy modification suggestions

• Question 72:

  If ClusterXL Load Sharing is enabled with state synchronization enabled, what will happen if one member goes down?

  A. The connections are dropped as Load Sharing does not support High Availability.
  B. The processing of all connections handled by the faulty machine is dropped, so all connections need to be re-established through the other machine(s).
  C. There is no state synchronization on Load Sharing, only on High Availability.
  D. The processing of all connections handled by the faulty machine is immediately taken over by the other member(s).
  D. The processing of all connections handled by the faulty machine is immediately taken over by the other member(s).

• Question 73:

  Regarding QoS guarantees and limits, which of the following statements is FALSE?

  A. If both a limit and a guarantee per rule are defined in a QoS rule, then the limit must be smaller than the guarantee.
  B. If both a rule limit and a per connection limit are defined for a rule, the per connection limit must not be greater than the rule limit.
  C. A rule guarantee must not be less than the sum the guarantees defined in its sub-rules.
  D. If a guarantee is defined in a sub-rule, then a guarantee must be defined for the rule above it.
  A. If both a limit and a guarantee per rule are defined in a QoS rule, then the limit must be smaller than the guarantee.

• Question 74:

  How do you verify a VPN Tunnel Interface (VTI) is configured properly?

  A. vpn shell display detailed
  B. vpn shell show detailed
  C. vpn shell show interface detailed
  D. vpn shell display interface detailed
  C. vpn shell show interface detailed

• Question 75:

  In a Windows environment, SmartReporter Data Base settings could be modified in:

  A. %RTDIR%\Database\conf\my.ini
  B. $ERDIR/conf/my.cnf
  C. $CPDIR/Database/conf/conf.C
  D. $FWDIR/Eventia/conf/ini.C
  A. %RTDIR%\Database\conf\my.ini

• Question 76:

  What is the behavior of ClusterXL in a High Availability environment?

  A. Both members respond to the virtual IP address, and both members pass traffic when using their physical addresses.
  B. Both members respond to the virtual IP address, but only the active member is able to pass traffic.
  C. The active member responds to the virtual IP address.nd both members pass traffic when using their physical addresses.
  D. The active member responds to the virtual IP address.nd is the only member that passes traffic
  E. The passive member responds to the virtual IP address, and both members route traffic when using their physical addresses.
  D. The active member responds to the virtual IP address.nd is the only member that passes traffic

• Question 77:

  VPN-1 NGX includes a resource mechanism for working with the Common Internet File System (CIFS). However, this service only provides a limited level of actions for CIFS security. Which of the following services is NOT provided by a CIFS resource?

  A. Log access shares
  B. Block Remote Registry Access
  C. Log mapped shares
  D. Allow MS print shares
  D. Allow MS print shares

• Question 78:

  How do you control the maximum mail messages in a spool directory?

  A. In the Security Server window in Global Properties
  B. In SmartDefense SMTP settings
  C. In the smtp.conf file on the SmartCenter Server
  D. In the gateway object's SMTP settings in the Advanced window
  E. In the SMTP resource object
  D. In the gateway object's SMTP settings in the Advanced window

• Question 79:

  What command will allow you to disable sync on a cluster firewall member?

  A. fw ctl syncstat stop
  B. fw ctl setsync off
  C. fw ctl setsync 0
  D. fw ctl syncstat off
  B. fw ctl setsync off

• Question 80:

  Which type of service should a Security Administrator use in a Rule Base to control access to specific shared partitions on target machines?

  A. Telnet
  B. CIFS
  C. HTTP
  D. FTP
  E. URI
  B. CIFS