CheckPoint 156-915.65 Online Practice Questions and Exam Preparation

CheckPoint 156-915.65 Online Questions & Answers

• Question 111:

  Central License management allows a Security Administrator to perform which of the following functions? (1)Check for expired licenses.

  (2)Sort licenses and view license properties.

  (3)Attach both NGX Central and Local licenses to a remote module.

  (4)Delete both NGX Local licenses and Central licenses from a remote module. (5)Add or remove a license to or from the license repository.

  (6)Attach

  and/or delete only NGX Central licenses to a remote module (not Local licenses).

  A. 1,2,3,4,and5
  B. 1.2.5.and6
  C. 2,3,4,and5
  D. 2. 5. and6
  A. 1,2,3,4,and5

• Question 112:

  SmartView Tracker logs the following Security Administrator activities, EXCEPT

  A. Administrator login and logout.
  B. Object creation, deletion, and editing.
  C. Tracking SLA compliance.
  D. Rule Base changes.
  C. Tracking SLA compliance.

• Question 113:

  The Check Point Security Gateway's virtual machine (kernel) exists between which two layers of the OSI model?

  A. Physical and Data Link layers
  B. Application and Presentation layers
  C. Network and Data Link layers
  D. Session and Network layers
  B. Application and Presentation layers

• Question 114:

  You have three Gateways in a mesh community. Each gateway's VPN Domain is their internal network as defined on the Topology tab setting "All IP Addresses behind Gateway based on Topology information." You want to test the route-based VPN, so you created VTIs among the Gateways and created static route entries for the VTIs. However, when you test the VPN, you find out the VPN still go through the regular domain IPSec tunnels instead of the routed VTI tunnels. What is the problem and how do you make the VPN to use the VTI tunnels?

  A. Route-based VTI takes precedence over the Domain VPN. Troubleshootthe static route entries to insure that they are correctly pointing to the VTI gateway IP
  B. Domain VPN takes precedence over the route-based VTI. To make the VPN go through VTI, remove the Gateways out of the mesh community and replace with a star community
  C. Route-based VTI takes precedence over the Domain VPN. To make the VPN go through VTI, use dynamic-routing protocol like OSPF or BGP to route the VTI address to the peer instead of static routes
  D. Domain VPN takes precedence over the route-based VTI. To make the VPN go through VTI, use an empty group object as each Gateway's VPN Domain
  D. Domain VPN takes precedence over the route-based VTI. To make the VPN go through VTI, use an empty group object as each Gateway's VPN Domain

• Question 115:

  The Check Point Security Gateway's virtual machine (kernel) exists between which two layers of the OSI model?

  A. Physical and Data Link layers
  B. Application and Presentation layers
  C. Network and Data Link layers
  D. Session and Network layers
  B. Application and Presentation layers

• Question 116:

  State Synchronization is enabled on both members in a cluster, and the Security Policy is successfully installed. No protocols or services have been deselected for "selective sync". The following is the fw tab -t connections -s output from both members:Is State Synchronization working properly between the two members?

  A. Members A and B are synchronized, because #SLINKS are identical in the connections table.
  B. Members A and B are not synchronized, because #VALS in the connections table are not close.
  C. Members A and B are not synchronized, because #PEAKfor both members is not close in the connections table.
  D. Members A and B are synchronized, because ID for both members is identical in the connections table.
  B. Members A and B are not synchronized, because #VALS in the connections table are not close.

• Question 117:

  Upon checking SmartView Monitor, you find the following Critical Problem notification.What is the reason?

  

  A. Version mismatch between the SmartCenter Server and Security Gateway
  B. NO Secure Internal Communications established between the SmartCenter Server and Security Gateway
  C. Time not synchronized between the SmartCenter Server and Security Gateway
  D. No Security Policy installed on the Security Gateway
  D. No Security Policy installed on the Security Gateway

• Question 118:

  Which of the following is TRUE concerning numbered VPN Tunnel Interfaces (VTIs)?

  A. VTIs are supported on SecurePlatform
  B. VTIS cannot share IP addresses
  C. VTIs can use an already existing physical-interface IP address
  D. VTIS are assigned only local addresses, not remote addresses
  A. VTIs are supported on SecurePlatform

• Question 119:

  A marketing firm's networking team is trying to troubleshoot user complaints regarding access to audio-streaming material from the Internet. The networking team asks you to check the object and rule configuration settings for the perimeter Security Gateway. Which SmartConsole application should you use to check these objects and rules?

  A. SmartViewTracker
  B. SmartView Status
  C. SmartView Monitor
  D. SmartDashboard
  B. SmartView Status

• Question 120:

  After installing VPN-1 Pro NGX R65, you discover that one port on your Intel Quad NIC on the Security Gateway is not fetched by a get topology request What is the most likely cause and solution?

  A. Make sure the driver for you particular NIC is available, and reinstall. You will be prompted for the driver.
  B. The NIC is faulty. Replace it and reinstall.
  C. If an interface is not configured, it is not recognized. Assign an IP and subnet mask using the WebUl.
  D. Your NIC driver is installed but was not recognized. Apply the latest SecurePlatform R65 Hotfix Accumulator (HFA).
  C. If an interface is not configured, it is not recognized. Assign an IP and subnet mask using the WebUl.