CheckPoint 156-815.71 Online Practice Questions and Exam Preparation

CheckPoint 156-815.71 Online Questions & Answers

• Question 151:

  The MDS is running in the NOC, protected by a NOC firewall A CMA of this MDS is used to administer a firewall at a customer site The necessary control connections from the CMA to the customer firewall, FW needs to be allowed at the NOC firewall.

  Which services are needed to provide the basic functionality?

  A. Services that need to be allowed from CMA to FW: FW1_mgmt, FW1, FW1_ica_push, CPD_amon, FW1_CPRID
  B. Services that need to be allowed from CMA to FW: CPD, FW1_ica_pull, FW1_ica_services, FW1, CPD_amon
  C. Services that need to be allowed from CMA to FW: CPD, FW1_ica_push, FW1, CPD_amon, FW1_CPRID
  D. Services that need to be allowed from CMA to FW: CPD, FW1_ica_push, FW1, FW1_amon, FW1_CPRID
  C. Services that need to be allowed from CMA to FW: CPD, FW1_ica_push, FW1, CPD_amon, FW1_CPRID

• Question 152:

  What file contains the Global Policy Rule Base?

  A. rulebases_5_0fws
  B. rulebases_5_0C
  C. rulebases_5_0fwz
  D. objects_5_0C
  A. rulebases_5_0fws

• Question 153:

  A Multi-Domain Management with Provider-1 Administrator can use the MDG to connect to which of the following MDS server types?

  A. 1 and 2
  B. 2 and 4
  C. 3 and 4
  D. 1 and 3
  A. 1 and 2

• Question 154:

  Which of the following would be the recommended method of securing the Multi- Domain Management with Provider-1 system in a Managed Service Provider's NOC environment?

  A. It is recommended to use the included firewall to secure the Provider-1 environment, managed by the NOC Security Administrator The Provider-1 software includes an integrated firewall to protect the Provider-1 system
  B. It is recommended to use the included firewall to secure the Provider-1 environment, managed by the Provider-1 / MSP Administrator The Provider-1 software includes an integrated firewall to protect the Provider-1 system
  C. It is recommended to use a separate firewall to secure the Provider-1 environment, managed by the NOC Security Administrator and the Provider-1 / MSP Administrator The Provider-1 software does not include an integrated firewall to protect the Provider-1 system
  D. It is recommended to use a separate firewall to secure the Provider-1 environment, managed by the NOC Security Administrator The Provider-1 software does not include an integrated firewall to protect the Provider-1 system
  D. It is recommended to use a separate firewall to secure the Provider-1 environment, managed by the NOC Security Administrator The Provider-1 software does not include an integrated firewall to protect the Provider-1 system

• Question 155:

  Henry is a Multi-Domain Management with Provider-1 Superuser who is managing a Provider-1 environment having 40 CMA's with a MDS Container license for 50 CMA's As his number of customers grows, he simply adds new CMAs After reaching 50 CMA's, he is unable to add any more He foresees a requirement of about 20 more CMA's in the future.

  What would be the best solution for him to enable additional CMAs while taking into consideration future needs?

  A. He needs to upgrade his license to 100 CMA's and replace the old license
  B. He will have to replace the old license with a new license for 75 CMA's
  C. He can buy a license for 25 CMA's and just add it to the current setup as the licenses in Provider-1 are additive
  D. He will have to buy a new license for 100 CMA's and reinstall the software
  C. He can buy a license for 25 CMA's and just add it to the current setup as the licenses in Provider-1 are additive

• Question 156:

  When a NOC firewall separates the Multi-Domain Management with Provider-1 MDS machine and the MDG (as shown below), what must be done to allow the MDG to connect to the MDS?

  

  Modify the NOC Security Gateway Rule Base to allow:

  A. RPC traffic for the MDG
  B. CPD and CPD_amon traffic to pass between the MDG and the MDS
  C. UDP traffic for the MDG
  D. CPMI traffic to pass between the MDG and the MDS
  D. CPMI traffic to pass between the MDG and the MDS

• Question 157:

  How do you synchronize a primary and secondary CMA from the Multi-domain GUI?

  A. Select High Availability from the Customer Contents view, right-click on any customer, and choose Synchronize
  B. You cannot synchronize primary and secondary CMA's from the MDG It can only be done from the CMA's SmartDashboard
  C. Select High Availability from the MDS Contents view, right-click on a CMA and choose Synchronize
  D. Launch SmartUpdate, right-click on a Customer and choose Synchronize
  B. You cannot synchronize primary and secondary CMA's from the MDG It can only be done from the CMA's SmartDashboard

• Question 158:

  You decide to remove a globally defined node object Before you do this, you check to see if it is used locally by "Customer1" or "Customer2". What is the BEST way to do this?

  A. At the CLI of the MDS, run the command mdscmd runcrosscmaquery with corresponding parameters
  B. Open the Global SmartDashboard, select the globally defined Node in the Object Tree and right-click In the menu that opens, select Where used This will show where this Node is used, globally and locally
  C. There is no possibility to find the usage of an object, except by connecting to all CMAs separately
  D. At the CLI of the MDS, run the command mdscmd searchobject with corresponding parameters
  A. At the CLI of the MDS, run the command mdscmd runcrosscmaquery with corresponding parameters

• Question 159:

  Which command would stop the root level MDS but leave all of the CMA's still running?

  A. mdsstop -m
  B. cpstop
  C. mdsstop
  D. fw mds stop
  A. mdsstop -m

• Question 160:

  Which operating system listed supports running a Multi-Domain Management with Provider-1 MDS, but has a limitation in the number of virtual IP addresses, which can be assigned to a given interface?

  A. Red Hat Enterprise Linux
  B. Windows 2003 Server
  C. SecurePlatform
  D. Solaris
  D. Solaris