CheckPoint CheckPoint Certification 156-915.65 Questions & Answers

• Question 121:

  Which of the following is NOT true for Management High Availability (HA)?

  A. The HA SmartCenter Servers must all be the same OS and OS Service Pack

  B. The HA SmartCenter Servers must all be the same Check Point Version

  C. If the active SmartCenter Server is down, a standby SmartCenter Servers needs to become active in order to be able to edit and install the Security Policy

  D. The HA SmartCenter Servers are synchronized so matching data is maintained and ready to be used.

  Correct Answer: A

• Question 122:

  How do you block some seldom-used FTP commands, such as CWD, and FIND from passing through the Gateway?

  A. Use FTP Security Server settings in SmartDefense.

  B. Add the restricted commands to the aftpd.conf file in the SmartCenter Server.

  C. Configure the restricted FTP commands in the Security Servers screen of the Global properties.

  D. Enable FTP Bounce checking in SmartDefense.

  Correct Answer: A

• Question 123:

  Central License management allows a Security Administrator to perform which of the following functions? (1)Check for expired licenses.

  (2)Sort licenses and view license properties.

  (3)Attach both NGX Central and Local licenses to a remote module.

  (4)Delete both NGX Local licenses and Central licenses from a remote module. (5)Add or remove a license to or from the license repository.

  (6)Attach

  and/or delete only NGX Central licenses to a remote module (not Local licenses).

  A.

  1,2,3,4,and5

  B.

  1.2.5.and6

  C.

  2,3,4,and5

  D.

  2. 5. and6

  Correct Answer: A

• Question 124:

  Which VPN-1 NGX R65 component displays the number of packets accepted, rejected, and dropped on a specific Security Gateway, in real time?

  A. SmartView Monitor

  B. SmartView Status

  C. SmartUpdate

  D. Eventia Analyzer

  Correct Answer: D

• Question 125:

  In a Management High Availability (HA) configuration, you can configure synchronization to occur automatically, when

  (1)The Security Policy is installed.

  (2)The Security Policy is saved.

  (3)The Security Administrator logs in to the secondary SmartCenter Server, and changes its status to active.

  (4)A scheduled event occurs.

  (5)The

  user database is installed.

  Select the BEST response for the synchronization sequence. Choose One:

  A.

  1,2,3,4

  B.

  1,2,5

  C.

  1,2,4

  D.

  1,3,4

  Correct Answer: C

• Question 126:

  Where do you enable popup alerts for SmartDefense settings that have detected suspicious activity?

  A. In SmartView Monitor, select Tools > Alerts

  B. In SmartView Tracker, select Tools > Custom Commands

  C. In SmartDashboard, edit the Gateway object, select SmartDefense > Alerts

  D. In SmartDashboard, select Global Properties > Log and Alert > Alert Commands

  Correct Answer: A

• Question 127:

  Your organization has many VPN-1 Edge Gateways at various branch offices, to allow users to access company resources. For security reasons, your organization's Security Policy requires all Internet traffic initiated behind the VPN-1 Edge Gateways first be inspected by your headquarters' VPN-1 Pro Security Gateway. How do you configure VPN routing in this star VPN Community?

  A. To the Internet and other targets only

  B. To the center and other satellites, through the center

  C. To the center; orthrougnthe center to other satellites, then to the Internet and other VPN targets

  D. To the center only

  Correct Answer: C

• Question 128:

  Your VPN-1 NGX R65 primary SmartCenter Server is installed on SecurePlatform. You plan to schedule

  the SmartCenter Server to run fw logswitch automatically every 48 hours.

  How do you create this schedule?

  A. Create a time object, and add 48 hours as the interval. Select that time object's Global Properties > Logs and Masters window, to schedule a logswitch.

  B. Create a time object, and add 48 hours as the interval. Open the Security Gateway object's Logs and Masters window, enable "Schedule log switch", and select the time object.

  C. Create a time object, and add 48 hours as the interval. Open the primary SmartCenter Server object's Logs and Masters window, enable "Schedule log switch", and select the Time object.

  D. On a SecurePlatform SmartCenter Server, this can only be accomplished by configuring the fw logswitch command via the cron utility.

  Correct Answer: C

• Question 129:

  Which specific VPN-1 NGX R65 GUI would you use to view the length of time a TCP connection was open?

  A. SmartView Tracker

  B. SmartView Status

  C. SmartLSM

  D. SmartView Monitor

  Correct Answer: A

• Question 130:

  In a Management High Availability (HA) configuration, you can configure synchronization to occur automatically, when

  (1)The Security Policy is installed.

  (2)The Security Policy is saved.

  (3) The Security Administrator logs in to the secondary SmartCenter Server, and changes its status to active.

  (4)A scheduled event occurs.

  (5)The

  user database is installed.

  Select the BEST response for the synchronization sequence. Choose One:

  A.

  1,2,3,4

  B.

  1,2,5

  C.

  1,2,4

  D.

  1,3,4

  Correct Answer: C