CheckPoint 156-215.75 Online Practice Questions and Exam Preparation

CheckPoint 156-215.75 Online Questions & Answers

• Question 81:

  When upgrading to NGX R65, which Check Point products do not require a license upgrade to be current?

  A. VPN-1 NGX (R64) and later
  B. VPN-1 NGX (R60) and later
  C. VPN-1 NG with Application Intelligence (R54) and later
  D. None, all versions require a license upgrade
  B. VPN-1 NGX (R60) and later

• Question 82:

  What is the benefit to running SmartEvent in Learning Mode?

  A. There is no SmartEvent Learning Mode
  B. To run SmartEvent with preloaded sample data in a test environment
  C. To run SmartEvent, with a step-by-step online configuration guide for training/setup purposes
  D. To generate a report with system Event Policy modification suggestions
  D. To generate a report with system Event Policy modification suggestions

• Question 83:

  Where is the encryption domain for a SmartLSM Security Gateway configured in R71?

  A. Inside the SmartLSM Security Gateway object in the SmartDashboard GUI
  B. Inside the SmartLSM Security Gateway profile in the SmartProvisioning GUI
  C. Inside the SmartLSM Security Gateway object in the SmartProvisioning GUI
  D. Inside the SmartLSM Security Gateway profile in the SmartDashboard GUI
  B. Inside the SmartLSM Security Gateway profile in the SmartProvisioning GUI

• Question 84:

  When configuring numbered VPN Tunnel Interfaces (VTIs) in a clustered environment, what issues need to be considered?

  

  A. 1, 3, and 4
  B. 2 and 3
  C. 1, 2, and 4
  D. 1, 2, 3 and 4
  D. 1, 2, 3 and 4

• Question 85:

  Network applications accessed using SSL Network Extender have been found to fail after one of their TCP connections has been left idle for more than one hour. You determine that you must enable sending reset (RST) packets upon TCP time-out expiration. Where is it necessary to change the setting?

  A. $FWDIR/conf/objects_5_0.C
  B. $FWDIR/conf/objects.C
  C. $WEBISDIR/conf/cpadmin.elg
  D. $CVPNDIR/conf/cvpnd.C
  A. $FWDIR/conf/objects_5_0.C

• Question 86:

  What is the lowest possible version a Security Gateway may be running in order to use it as an LSM enabled Gateway?

  A. NG-AI R55 HFAJ7
  B. NGX R60
  C. NGXR65HFA_50
  D. NGX R71
  A. NG-AI R55 HFAJ7

• Question 87:

  What is the best method for scheduling backup's on multiple firewalls?

  A. WebUI
  B. SmartProvisioning
  C. Smart Dashboard
  D. SmartUpdate
  B. SmartProvisioning

• Question 88:

  Which of these four Check Point QoS technologies prevents the transmission of redundant packets when multiple copies of a packet are concurrently queued on the same flow?

  A. Weighted Flow Random Early Drop (WFRED)
  B. Intelligent Queuing Engine
  C. Retransmission Detection Early Drop (RDED)
  D. Stateful Inspection
  C. Retransmission Detection Early Drop (RDED)

• Question 89:

  Which of the following TCP port numbers is used to connect the VPN-1 Gateway to the Content Vector Protocol (CVP) server?

  A. 18182
  B. 18180
  C. 18181
  D. 7242
  E. 1456
  C. 18181

• Question 90:

  Included in the customer's network are some firewall systems with the Performance Pack in use. The customer wishes to use these firewall systems in a cluster (Load Sharing mode). He is not sure if he can use the Sticky Decision Function in this cluster. Explain the situation to him.

  A. Sticky Decision Function is not supported when employing either Performance Pack or a hardware-based accelerator card. Enabling the Sticky Decision Function disables these acceleration products.
  B. ClusterXL always supports the Sticky Decision Function in the Load Sharing mode.
  C. The customer can use the firewalls with Performance Pack inside the cluster, which should support the Sticky Decision Function. It is just necessary to enable the Sticky Decision Function in the SmartDashboard cluster object in the ClusterXL page, Advanced Load Sharing Configuration window.
  D. The customer can use the firewalls with Performance Pack inside the cluster, which should support the Sticky Decision Function. It is just necessary to configure it with the clusterXL_SDF_enable command.
  A. Sticky Decision Function is not supported when employing either Performance Pack or a hardware-based accelerator card. Enabling the Sticky Decision Function disables these acceleration products.