CheckPoint 156-915.65 Online Practice Questions and Exam Preparation

CheckPoint 156-915.65 Online Questions & Answers

• Question 1:

  When configuring Port Scanning, which level of sensitivity detects more than 100 inactive ports are tried for a period of 30 seconds?

  A. LOW
  B. High
  C. None. Such a level does not exist.
  D. Medium
  D. Medium

• Question 2:

  Your VPN-1 NGX R65 primary SmartCenter Server is installed on SecurePlatform. You plan to schedule the SmartCenter Server to run fw logswitch automatically every 48 hours. How do you create this schedule?

  A. Create a time object, and add 48 hours as the interval. Select that time object's Global Properties > Logs and Masters window, to schedule a logswitch.
  B. Create a time object, and add 48 hours as the interval. Open the Security Gateway object's Logs and Masters window, enable "Schedule log switch", and select the time object.
  C. Create a time object, and add 48 hours as the interval. Open the primary SmartCenter Server object's Logs and Masters window, enable "Schedule log switch", and select the Time object.
  D. On a SecurePlatform SmartCenter Server, this can only be accomplished by configuring the fw logswitch command via the cron utility.
  C. Create a time object, and add 48 hours as the interval. Open the primary SmartCenter Server object's Logs and Masters window, enable "Schedule log switch", and select the Time object.

• Question 3:

  You have two NOKIA Appliances: one IP530 and one IP380. Both appliances have IPSO 3.9 and NGX R65 VPN-1 Power installed in a distributed deployment. Can they be members of a Gateway Cluster?

  A. No, because the appliances must be of the same model (both should be IP530 or IP380)
  B. NO, because NOKIA does not have a cluster option.
  C. Yes, as long as they have the same IPSO and VPN-1 versions.
  D. NO, because the Security Gateways must be installed in a stand-alone installation.
  C. Yes, as long as they have the same IPSO and VPN-1 versions.

• Question 4:

  Which of the following statements about the Port Scanning feature of SmartDefense is TRUE?

  A. When a port scan is detected, only a log is issued ?never an alert.
  B. The Port Scanning feature actively blocks the scanning, and sends an alert to SmartView Monitor.
  C. A typical scan detection is when more than 500 open inactive ports are open for a period of 120 seconds.
  D. Port Scanning does not block scanning, it detects port scans with one of three levels of detection sensitivity
  D. Port Scanning does not block scanning, it detects port scans with one of three levels of detection sensitivity

• Question 5:

  When synchronizing clusters, which of the following statements is NOT true?

  A. Client Auth or Session Auth connections through a cluster member will be lost if the cluster member fails.
  B. The state of connections using resources is maintaineci by a Security Server, so these connections cannot be synchronized.
  C. In the case of a failover, accounting information on the failed member may be lost despite a properly working synchronization
  D. Only cluster members running on the same OS platform can be synchronized.
  A. Client Auth or Session Auth connections through a cluster member will be lost if the cluster member fails.

• Question 6:

  What must a public hospital Security Administrator do to comply with new health-care legislation requirements for logging all traffic accepted through the perimeter Security Gateway?

  A. Define two log servers on the VPN-1 NGX R65 Gateway object. Enable "Log Implied Rules" on the first log server. Enable "Log Rule Base" on the second log server. Use Eventia Reporter to merge the two log server records into the same database for HIPPA log audits.
  B. Install the "View Implicit Rules" package using SmartUpdate.
  C. In Global Properties > Reporting Tools check the box "Enable tracking all rules (including rules marked as 'None' in the Track column). Send these logs to a secondary log server for a complete logging history Use your normal log server for standard logging for troubleshooting.
  D. Check the "Log Implied Rules Globally" box on the VPN-1 NGX R65 Gateway object.
  C. In Global Properties > Reporting Tools check the box "Enable tracking all rules (including rules marked as 'None' in the Track column). Send these logs to a secondary log server for a complete logging history Use your normal log server for standard logging for troubleshooting.

• Question 7:

  When configuring site-to-site VPN High Availability (HA) with MEP, which of the following is correct?

  A. MEP Gateways cannot be geographically separated machines.
  B. MEP Gateways must be managed by the same SmartCenter Server.
  C. The decision on which MEP Gateway to use is made on the MEP Gateway's side of the tunnel.
  D. If one MEP Security Gateway fails, the connection is lost and the backup Gateway picks up the next connection.
  D. If one MEP Security Gateway fails, the connection is lost and the backup Gateway picks up the next connection.

• Question 8:

  By default, when you click File > Switch Active File from SmartView Tracker, the SmartCenter Server:

  A. Prompts you to enter a filename, then saves the log file.
  B. Saves the current log file, names the log file by date and time, and starts a new log file.
  C. Purges the current log file, and starts a new log file.
  D. Purges the current log, and prompts you for the new log's mode.
  B. Saves the current log file, names the log file by date and time, and starts a new log file.

• Question 9:

  Choose all correct statements. SmartUpdate, located on a VPN-1 NGX SmartCenter Server, allows you to

  (1)Remotely perform a first time installation of VPN-1 NGX on a new machine.

  (2)Determine OS patch levels on remote machines.

  (3)Update installed Check Point and any OPSEC certified software remotely.

  (4)Update installed Check Point software remotely.

  (5)Track

  installed versions of Check Point and OPSEC products. (6)Centrally manage licenses.

  A. 1.3.4.S6
  B. 1 and4
  C. 4.5.S6
  D. 2,4,5,and6
  D. 2,4,5,and6

• Question 10:

  An NGXR65 HA cluster contains two members with external interfaces 172.28.108.1 and 172.28.108.2. The internal interfaces are 10.4.8.1 and 10.4.8.2. The external cluster VIP address is 172.28.108.3 and the internal cluster VIP address is

  10.4.8.3. The synchronization interfaces are 192.168.1.1 and 192.168.1.2. The Security Administrator discovers State Synchronization is not working properly. The cphaprob if command output displays shows:What is causing the State Synchronization problem?

  

  A. The synchronization network has been defined as "Network Objective: Cluster + 1st sync" with an IP address 192.168.1.3 defined in the NGX cluster object's topology. This configuration is supported in NGX and therefore the above screenshot is not relevant to the sync problem.
  B. The synchronization interface on the individual NGX cluster member object's Topology tab is enabled with "Cluster Interface". Disable this setting.
  C. The synchronization network has a cluster VIP address (192.168.1.3) defined in the NGX cluster object's topology. Remove the 192.168.1.3 VIP interface from the cluster topology.
  D. Another cluster is using 192.168.1.3 as one of the unprotected interfaces.
  A. The synchronization network has been defined as "Network Objective: Cluster + 1st sync" with an IP address 192.168.1.3 defined in the NGX cluster object's topology. This configuration is supported in NGX and therefore the above screenshot is not relevant to the sync problem.