CheckPoint 156-815.71 Online Practice Questions and Exam Preparation

CheckPoint 156-815.71 Online Questions & Answers

• Question 161:

  Which of the following is the MDG > High Availability view used to perform?

  A. Create a new backup CMA for a Customer with an existing CMA, from the Customer Contents mode
  B. View status of CMA configurations
  C. Create new MDS machines from the MDS Contents mode
  D. Change the Active/Standby status or synchronize CMAs
  D. Change the Active/Standby status or synchronize CMAs

• Question 162:

  Khanh is a manager of a specific group which has a CMA defined for managing its gateways He needs to log in to change the policies for his gateways, but access to the MDG is not required. What administrator account type should be defined so he only accesses the CMA via SmartDashboard?

  A. Customer Manager
  B. No administrator account type needs to be defined for this purpose
  C. Global Administrator
  D. Customer Superuser
  B. No administrator account type needs to be defined for this purpose

• Question 163:

  On the Multi-Domain Container Server, you can find the Customer Management Add-On under what directory?

  A. /var/opt/CPmds-R71/customers/
  B. /var/CPcma-R71/
  C. /opt/CPcma-R71/
  D. /var/opt/CPmds-cmaID/
  A. /var/opt/CPmds-R71/customers/

• Question 164:

  If a license violation occurs in a Multi-Domain Management with Provider-1 environment, which of the following happens?

  A. syslog, pop-ups, audit logs and the MDG status bar communicate information about a license violation along with a warning of disconnection within 24 hours After 24 hours all administrators are disconnected and prohibited from logging in again in the future
  B. syslog, pop-ups, audit logs and the MDG status bar communicate information about a license violation Creation of new CMAs and virtual devices is prohibited
  C. MDS servers do not start if they have been stopped after the license violation and the information about the license violation appears on the console along with a constant beep
  D. syslog, pop-ups, audit logs and MDG status bar communicate information about a license violation Read-only access is forced on all modules
  B. syslog, pop-ups, audit logs and the MDG status bar communicate information about a license violation Creation of new CMAs and virtual devices is prohibited

• Question 165:

  In a Multi-Domain Management with Provider-1 R71 deployment, a Management Server can be configured as a backup for the .

  A. Primary CMA not backed up by a Secondary CMA
  B. Secondary MDS
  C. Primary MDS
  D. Primary MDS and a Secondary CMA
  A. Primary CMA not backed up by a Secondary CMA

• Question 166:

  In Multi-Domain Management with Provider-1 R71, the Security Management backup server can be installed on:

  A. any platform where Security Management Server is supported
  B. any platform where Security Management Server is supported except Windows or Nokia IPSO
  C. SecurePlatform or Windows Server
  D. only SecurePlatform Pro
  B. any platform where Security Management Server is supported except Windows or Nokia IPSO

• Question 167:

  Which of the following is FALSE about Global VPN Community configurations?

  A. A remote-access VPN cannot be implemented as a Global VPN
  B. The Global SmartDashboard can create a traditional VPN using the Encrypt action
  C. When configuring Global VPNs, only simplified or VPN neutral configurations can be used
  D. Global VPN Communities can only be configured as site-to-site
  B. The Global SmartDashboard can create a traditional VPN using the Encrypt action

• Question 168:

  To allow Multi-Domain Management with Provider-1 to manage gateways and enable those gateways to send logs, what needs to be done?

  A. Nothing as long as there is basic IP connectivity between them
  B. fw unloadlocal
  C. Install Database
  D. Ensure 'control connections' is enabled in all CMA global properties
  D. Ensure 'control connections' is enabled in all CMA global properties

• Question 169:

  You manage several customers with Multi-Domain Management with Provider-1 Two of the customers need to be connected via a global VPN using VPN Communities in a Global Rule In the MDG, you configure both Gateways to be enabled for Global use Then you define a Global VPN Community in the Global SmartDashboard.

  How do you configure a rule so that encrypted HTTP traffic is accepted between the corresponding Gateways?

  A. In the menu of the Global SmartDashboard, select Policy > Convert To Simplified Mode, follow the Wizard and define a rule accepting HTTP traffic that fits to the community listed in the column VPN
  B. It's possible to define Global VPN Communities, but it is not possible to use them in a Global Rule Base
  C. In the Global SmartDashboard, define a rule accepting the wanted traffic In the column VPN select the VPN community you have defined
  D. After having defined a Global VPN Community, the Global Rule Base needs to be assigned to both customers The VPN can only be defined in each (local) CMA individually
  A. In the menu of the Global SmartDashboard, select Policy > Convert To Simplified Mode, follow the Wizard and define a rule accepting HTTP traffic that fits to the community listed in the column VPN

• Question 170:

  What modes are available in High Availability View of the MDG?

  A. MDS Contents
  B. VPN Community
  C. Network Objects
  A. MDS Contents