CheckPoint 156-915.65 Online Practice Questions and Exam Preparation

CheckPoint 156-915.65 Online Questions & Answers

• Question 121:

  How do you use SmartView Monitor to compile traffic statistics for your company's Internet activity during production hours?

  A. Use the "Traffic Counters" settings and SmartView Monitor to generate a graph showing the total HTTP traffic for the day
  B. Select the "Tunnels" view, and generating a report on the statistics
  C. View total packets passed through the Security Gateway
  D. Configure a Suspicious Activity Rule which triggers an alert when HTTP traffic passes through the Gateway
  A. Use the "Traffic Counters" settings and SmartView Monitor to generate a graph showing the total HTTP traffic for the day

• Question 122:

  You are concerned that your company's servers might be vulnerable to an attack where a client fools a server into sending large amounts of data, using small packets. Which SmartDefense option should you use to protect the servers?

  A. Network Security > Denial of Service > Non-TCP Flooding
  B. Network Security > Denial of Service > LAND
  C. Network Security > IP and ICMP > Block Null Payload ICMP
  D. Network Security > TCP > Small PMTU
  D. Network Security > TCP > Small PMTU

• Question 123:

  Which of the following is TRUE concerning numbered VPN Tunnel Interfaces (VTIs)?

  A. VTIS are supported on SecurePlatform
  B. VTIS cannot share IP addresses
  C. VTIs can use an already existing physical-interface IP address
  D. VTIS are assigned only local addresses, not remote addresses
  A. VTIS are supported on SecurePlatform

• Question 124:

  Which of the following is TRUE concerning numbered VPN Tunnel Interfaces (VTIs)?

  A. VTIS are supported on SecurePlatform
  B. VTIS cannot share IP addresses
  C. VTIs can use an already existing physical.interface IP address
  D. VTIS are assigned only local addresses, not remote addresses
  A. VTIS are supported on SecurePlatform

• Question 125:

  Which of the following would NOT be a function of the Check Point license-upgrade tool?

  A. Upgrade locally managed licenses.
  B. Simulate the license-upgrade process.
  C. Manually upgrade a specific license.
  D. View the status of the currently installed licenses.
  C. Manually upgrade a specific license.

• Question 126:

  How do you recover communications between your SmartCenter Server and Security Gateway if you "lock" yourself out via a rule or policy mis-configuration?

  A. cpstop
  B. fw unload policy
  C. fw delete all.all
  D. fwunloadlocal
  D. fwunloadlocal

• Question 127:

  The customer has a small Check Point installation which includes one Window XP workstation working as SmartConsole ,, one Solaris server working as SmartCenter, and a third server running SecurePlatform working as Security Gateway. This is an example of:

  A. Hybrid Installation
  B. Unsupported configuration
  C. Stand-Alone Installation
  D. Distributed Installation
  A. Hybrid Installation

• Question 128:

  Which utility allows you to configure the DHCP service on SecurePlatform from the command line?

  A. WebUI
  B. cpconfig
  C. ifconfig
  D. sysconfig
  D. sysconfig

• Question 129:

  In a Management High Availability (HA) configuration, you can configure synchronization to occur automatically, when

  (1)The Security Policy is installed.

  (2)The Security Policy is saved.

  (3) The Security Administrator logs in to the secondary SmartCenter Server, and changes its status to active.

  (4)A scheduled event occurs.

  (5)The

  user database is installed.

  Select the BEST response for the synchronization sequence. Choose One:

  A. 1,2,3,4
  B. 1,2,5
  C. 1,2,4
  D. 1,3,4
  C. 1,2,4

• Question 130:

  Which command would provide the most comprehensive diagnostic information to Check Point Technical Support?

  A. cpinfo date.cpinfo.txt
  B. cpstat> date.cpstat.txt
  C. netstat > date.netstat.txt
  D. diag
  A. cpinfo date.cpinfo.txt