CheckPoint 156-815.71 Online Practice Questions and Exam Preparation

CheckPoint 156-815.71 Online Questions & Answers

• Question 121:

  Which of the following ports is used by CPMI to communicate between Multi- Domain Management with Provider-1 modules?

  A. TCP port 260
  B. TCP port 264
  C. TCP port 18191
  D. TCP port 18190
  D. TCP port 18190

• Question 122:

  How many separate CLM's can one MLM manage?

  A. Unlimited
  B. 500
  C. 200
  D. 250
  D. 250

• Question 123:

  What method will NOT work for enabling FireWall Control Connection in CMA?

  A. Create Explicit rules for control connections in Global SmartDashboard and assign Global Policy to the CMA
  B. Select "Accept control connection" from Global Properties dialog box of the Global SmartDashboard
  C. Create Explicit rules for control connections in CMA
  D. Select "Accept control connection" from Global Properties dialog box of the CMA SmartDashboard
  B. Select "Accept control connection" from Global Properties dialog box of the Global SmartDashboard

• Question 124:

  How do you find Policy Rules that use global objects in multiple CMA's?

  A. Open the Global Policy SmartDashboard, right click on the object and choose "Where Used...
  B. Open the Cross-CMA search in the MDG, Choose "Find Policy rules that use a global object"
  C. You cannot search for global objects across multiple CMA's
  B. Open the Cross-CMA search in the MDG, Choose "Find Policy rules that use a global object"

• Question 125:

  Importing an existing Management Server configuration into a MDS via CLI might be useful First, the new customer needs to be defined After having defined the CMA, an existing configuration can be imported. How can this be done?

  A. At the CLI of the MDS type\linecma_migrate
  B. It is not possible to import a configuration using CLI This can only done using the MDG
  C. At the CLI of the MDS type\linecma_migrate –s -t
  D. At the CLI of the MDS type\linecma_migrate -t –s
  A. At the CLI of the MDS type\linecma_migrate

• Question 126:

  What needs to be done for MDSs to synchronize properly?

  A. Schedule automatic synchronization on the MDS
  B. Synchronization must be done manually
  C. Set permissions to allow synchronization
  D. Synchronize MDS system clocks
  B. Synchronization must be done manually

• Question 127:

  When importing the configuration of a Management Server, the CMA is also imported The name of the CMA is the same name that the Management Server had before. How do you configure a name change to the CMA before the CA is re- established again?

  A. At the MDS, change to the corresponding CMA context using the mdsenv command Then issue the command fwm sic_reset to reset the CA completely
  B. In the MDG, select the CMA you want to change With a right-click on the object, select edit and change the name in the window that opens
  C. In the CLI of the MDS environment, issue the command fwm sic_reset You will be asked which SIC you want to reset Select the appropriate CMA and the name as well as the CMA will be changed
  D. The name of a CMA cannot be changed by design because this name is used in certificates
  A. At the MDS, change to the corresponding CMA context using the mdsenv command Then issue the command fwm sic_reset to reset the CA completely

• Question 128:

  Which of the following items will NOT appear In the Customer Contents mode of the MDG?

  A. Customer Logging Modules
  B. CMAs associated with that customer
  C. Security Enforcement Modules configured on the CMAs
  D. VPN communities the customer's gateways participate in
  D. VPN communities the customer's gateways participate in

• Question 129:

  If a Multi-Domain Management with Provider-1 administrator would like to create a CMA's IP address on a network interface other than on the default, what CMA file will they need to modify?

  A. vip_ip_indexconf
  B. vip_ipconf
  C. vip_indexconf
  D. ip_vipconf
  C. vip_indexconf

• Question 130:

  All of the following statements about Global Objects are false, EXCEPT:

  A. A Global Object cannot share an IP address with the remote module on which the Global Policy is installed
  B. Global Objects can share names if both the Provider-1 configuration and the remote Security Gateway are at version R71
  C. Global Objects share object names included in the Security Policy to which they are assigned
  D. Global Objects can only be edited in the Global SmartDashboard
  D. Global Objects can only be edited in the Global SmartDashboard