Skip to main content

156-315.75 Online Exam

Check Point Security Expert R75

629 questions available ยท Page 1 of 63

View study plans
Question 1 Drag & drop

DRAG DROP

Match the remote-access VPN connection mode features with their descriptions.

Question diagram
Show answer and explanation
Correct answer diagram
Question 2 Drag & drop

DRAG DROP

In a Management High Availability (HA) configuration, you can configure synchronization to occur automatically. Select the best response for the synchronization sequence.

Question diagram
Show answer and explanation
Correct answer diagram
Question 3 Drag & drop

DRAG DROP

Match the Terms with their definitions.

Question diagram
Show answer and explanation
Correct answer diagram
Question 4 Drag & drop

DRAG DROP

Match the ClusterXL Modes with their configurations.

Question diagram
Show answer and explanation
Correct answer diagram
Question 5 Drag & drop

DRAG DROP

ABC.com has two sites using certificates-based VPN issued by the ICA. The two sites, Tokyo and Paris, are configured using a simplified VPN policy. You are trying to integrate a new office opening in New Delhi.
You must enable all three sites to connect via the VPN to each other. Three Security Gateways are managed by the same SmartCenter Server behind the Paris Security Gateway.
After creating the Dubai Gateway object with the proper VPN domain, what must you do?

Question diagram
Show answer and explanation
Correct answer diagram
Question 6 Single choice

Which of the following statements about the Port Scanning feature of IPS is TRUE?

  1. A

    The default scan detection is when more than 500 open inactive ports are open for a period of 120 seconds.

  2. B

    The Port Scanning feature actively blocks the scanning, and sends an alert to SmartView Monitor.

  3. C

    Port Scanning does not block scanning; it detects port scans with one of three levels of detection
    sensitivity.

  4. D

    When a port scan is detected, only a log is issued, never an alert.

Show answer and explanation

Correct answer: C

Question 7 Single choice

Which of the following generates a SmartEvent Report from its SQL database?

  1. A

    Security Management Server

  2. B

    SmartEvent Client

  3. C

    SmartReporter

  4. D

    SmartDashboard Log Consolidator

Show answer and explanation

Correct answer: C

Question 8 Single choice

To backup all events stored in the SmartEvent Server, you should back up the contents of which folder(s)?

  1. A

    $FWDIR/distrib_db and $FWDIR/events

  2. B

    $FWDIR/events_db

  3. C

    $FWDIR/distrib and $FWDIR/events_db

  4. D

    $FWDIR/distrib

Show answer and explanation

Correct answer: C

Question 9 Single choice

What is the benefit to running SmartEvent in Learning Mode?

  1. A

    To run SmartEvent, with a step-by-step online configuration guide for training/setup purposes

  2. B

    There is no SmartEvent Learning Mode

  3. C

    To run SmartEvent with preloaded sample data in a test environment

  4. D

    To generate a report with system Event Policy modification suggestions

Show answer and explanation

Correct answer: D

Question 10 Single choice

You have selected the event Port Scan from Internal Network in SmartEvent, to detect an event when 30 port scans have occurred within 60 seconds. You also want to detect two port scans from a host within 10 seconds of each other.

How would you accomplish this?

  1. A

    Select the two port-scan detections as a sub-event.

  2. B

    Define the two port-scan detections as an exception.

  3. C

    You cannot set SmartEvent to detect two port scans from a host within 10 seconds of each other.

  4. D

    Select the two port-scan detections as a new event.

Show answer and explanation

Correct answer: B