CheckPoint 156-915.65 Online Practice Questions and Exam Preparation

CheckPoint 156-915.65 Online Questions & Answers

• Question 141:

  In New Mode HA, the internal cluster IP VIP address is 10.4.8.3. The internal interfaces on two members are 10.4.8.1 and 10.4.8.2. Internal host 10.4.8.108 Pings 10.4.8.3, and receives replies. The following is the ARP table from the internal Windows host 10.4.8.108:According to the output, which member is the standby machine?

  

  A. 10.4.8.1
  B. The standby machine cannot be determined by this test.
  C. 10.4.8.2
  D. 10.4.8.3
  A. 10.4.8.1

• Question 142:

  Which command is used to uninstall the Security Policy directly from the Security Gateway?

  A. fwm unload.local
  B. fw kill policy
  C. cpstop
  D. fwunloadlocal
  D. fwunloadlocal

• Question 143:

  In a Management High Availability (HA) configuration, you can configure synchronization to occur automatically, when

  (1)The Security Policy is installed.

  (2)The Security Policy is saved.

  (3)The Security Administrator logs in to the secondary SmartCenter Server, and changes its status to active.

  (4)A scheduled event occurs.

  (5)The

  user database is installed.

  Select the BEST response for the synchronization sequence. Choose One:

  A. 1,2,3,4
  B. 1,2,5
  C. 1,2,4
  D. 1,3,4
  C. 1,2,4

• Question 144:

  An NGXR65 HA cluster contains two members with external interfaces 172.28.108.1 and 172.28.108.2. The internal interfaces are 10.4.8.1 and 10.4.8.2. The external cluster VIP address is 172.28.108.3 and the internal cluster VIP address is

  10.4.8.3. The synchronization interfaces are 192.168.1.1 and 192.168.1.2. The Security Administrator discovers State Synchronization is not working properly. The cphaprob if command output displays shows:What is causing the State Synchronization problem?

  

  A. The synchronization network has been defined as "Network Objective: Cluster + 1st sync" with an IP address 192.168.1.3 defined in the NGX cluster object's topology. This configuration is supported in NGX and therefore the above screenshot is not relevant to the sync problem.
  B. The synchronization interface on the individual NGX cluster member object's Topology tab is enabled with "Cluster Interface". Disable this setting.
  C. The synchronization network has a cluster VIP address (192.168.1.3) defined in the NGX cluster object's topology. Remove the 192.168.1.3 VIP interface from the cluster topology.
  D. Another cluster is using 192.168.1.3 as one of the unprotected interfaces.
  A. The synchronization network has been defined as "Network Objective: Cluster + 1st sync" with an IP address 192.168.1.3 defined in the NGX cluster object's topology. This configuration is supported in NGX and therefore the above screenshot is not relevant to the sync problem.

• Question 145:

  Multi-Corp wants to implement IKE DoS protection to prevent a denial-of-service (DoS) attack from paralyzing its VPN Communities. Jerry needs to minimize the performance impact of implementing this new protection. Which of the following configurations would BEST enable this new protection with minimal impact to the organization?

  A. Set "Support IKE DoS protection from identified source" to "Puzzles", and "Support IKE DoS protection from unidentified source" to "Stateless".
  B. Set both "Support IKE Dos protection from identified source", and "Support IKE DoS protection from unidentified source" to "Puzzles".
  C. Set both "Support IKE DoS protection from identified source", and "Support IKE DoS protection from unidentified source" to "Stateless"
  D. Set "Support IKE DoS protection from identified source" to "Stateless", and "Support IKE DoS protection from unidentified source" to "None".
  C. Set both "Support IKE DoS protection from identified source", and "Support IKE DoS protection from unidentified source" to "Stateless"

• Question 146:

  Which utility allows you to configure the DHCP service on SecurePlatform from the command line?

  A. WebUI
  B. cpconfig
  C. ifconfig
  D. sysconfig
  D. sysconfig

• Question 147:

  Your primary SmartCenter Server is installed on a SecurePlatform Pro machine, which is also a VPN-1 Power Gateway. You want to implement Management High Availability (HA). You have a spare machine to configure as the secondary SmartCenter Server. How do you configure the new machine to be the standby SmartCenter Server?

  A. Use cpprod_util to reconfigure the primary SmartCenter Server to become the secondary on the VPN-1 Power Gateway. Install a new primary SmartCenter Server on the spare machine and set to "standby". Synchronize the "active" secondary to the "standby" primary in order to migrate the configuration.
  B. Install the secondary Server on the spare machine. Add the new machine to any network routable to the primary Server. Synchronize the machines.
  C. You cannot configure Management HA, when either the primary or secondary SmartCenter Server is running on a VPN-1 Pro Gateway.
  D. Install the secondary Server on the spare machine. Add the new machine to the same network as the primary Server. Synchronize the machines.
  C. You cannot configure Management HA, when either the primary or secondary SmartCenter Server is running on a VPN-1 Pro Gateway.

• Question 148:

  If you are experiencing LDAP issues, which of the following should you check?

  A. Connectivity between the NGX gateway and LDAP server
  B. Secure Internal Communications (SIC)
  C. VPN Load Balancing
  D. Overlapping VPN Domains
  C. VPN Load Balancing

• Question 149:

  The Web Filtering Policy can be configured to monitor URLs in order to:

  A. Log sites that are currently being blocked.
  B. Log sites from blocked categories.
  C. Alert the Administrator to block a suspicious site.
  D. Block sites only once.
  B. Log sites from blocked categories.

• Question 150:

  The following is cphaprob state command output from one New Mode High Availability ClusterXL cluster member:Which member will be active after member 192.168.1.2 fails over and is rebooted?

  

  A. Both members' state will be collision.
  B. 192.168.1.1
  C. 192.168.1.2
  D. Both members' state will be active.
  B. 192.168.1.1