CheckPoint CheckPoint Certification 156-915.65 Questions & Answers

• Question 111:

  Which of the following is a supported Sticky Decision function of Sticky Connections for Load Sharing?

  A. Multi-connection support for VPN-1 cluster members

  B. Support for Performance Pack acceleration

  C. Support for all VPN deployments (except those with third-party VPN peers)

  D. Support for SecureClient/SecuRemote/SSL Network Extender encrypted connections

  Correct Answer: D

• Question 112:

  How do you define a service object for a TCP port range?

  A. Manage Services, New Other, Provide name and define Protocol: x-y

  B. Manage Services, New TCP, Provide name and define Port: x-y

  C. Manage Services, New Other, Provide name and define Protocol: 17, Range: x-y

  D. Manage Services, New Group, Provide name and Add all service ports for range individually to the group object

  Correct Answer: B

• Question 113:

  Which SmartView Tracker mode allows you to read the SMTP email body sent from the Chief Executive Officer (CEO)?

  A. Log Tab

  B. Display Capture Action

  C. This is not a SmartView Tracker feature

  D. Account Query

  Correct Answer: B

• Question 114:

  An NGXR65 HA cluster contains two members with external interfaces 172.28.108.1 and 172.28.108.2. The internal interfaces are 10.4.8.1 and 10.4.8.2. The external cluster VIP address is 172.28.108.3 and the internal cluster VIP address is 10.4.8.3. The synchronization interfaces are 192.168.1.1 and 192.168.1.2. The Security Administrator discovers State Synchronization is not working properly. The cphaprob if command output displays shows:What is causing the State Synchronization problem?

  

  A. The synchronization network has been defined as "Network Objective: Cluster + 1st sync" with an IP address 192.168.1.3 defined in the NGX cluster object's topology. This configuration is supported in NGX and therefore the above screenshot is not relevant to the sync problem.

  B. The synchronization interface on the individual NGX cluster member object's Topology tab is enabled with "Cluster Interface". Disable this setting.

  C. The synchronization network has a cluster VIP address (192.168.1.3) defined in the NGX cluster object's topology. Remove the 192.168.1.3 VIP interface from the cluster topology.

  D. Another cluster is using 192.168.1.3 as one of the unprotected interfaces.

  Correct Answer: A

• Question 115:

  Which of the following is TRUE concerning numbered VPN Tunnel Interfaces (VTIs)?

  A. VTIs are supported on SecurePlatform

  B. VTIS cannot share IP addresses

  C. VTIs can use an already existing physical-interface IP address

  D. VTIS are assigned only local addresses, not remote addresses

  Correct Answer: A

• Question 116:

  Which of the following statements about file-type recognition in Content Inspection is TRUE?

  A. A scan failure will only occur if the antivirus engine fails to initialize.

  B. Antivirus status is monitored using SmartView Tracker.

  C. The antivirus engine acts as a proxy, caching the scanned file before delivering it to the client.

  D. All file types are considered "at risk", and are not subject to the whims of the Administrator or the Security Policy

  Correct Answer: C

• Question 117:

  The Check Point Security Gateway's virtual machine (kernel) exists between which two layers of the OSI model?

  A. Physical and Data Link layers

  B. Application and Presentation layers

  C. Network and Data Link layers

  D. Session and Network layers

  Correct Answer: B

• Question 118:

  You are concerned that your company's servers might be vulnerable to an attack where a client fools a server into sending large amounts of data, using small packets. Which SmartDefense option should you use to protect the servers?

  A. Network Security > Denial of Service > Non-TCP Flooding

  B. Network Security > Denial of Service > LAND

  C. Network Security > IP and ICMP > Block Null Payload ICMP

  D. Network Security > TCP > Small PMTU

  Correct Answer: D

• Question 119:

  Which utility allows you to configure the DHCP service on SecurePlatform from the command line?

  A. WebUI

  B. cpconfig

  C. ifconfig

  D. sysconfig

  Correct Answer: D

• Question 120:

  Which SmartConsole component can Administrators use to track remote administrative activities?

  A. SmartView Tracker

  B. TheWebUI

  C. Eventia Reporter

  D. SmartView Monitor

  Correct Answer: B