CheckPoint 156-915.65 Online Practice Questions and Exam Preparation

CheckPoint 156-915.65 Online Questions & Answers

• Question 181:

  Which command line interface utility allows the administrator to verify the name and timestamp of the Security Policy currently installed on a firewall module?

  A. fwver
  B. fw stat
  C. fw ctl pstat
  D. cpstatfwd
  B. fw stat

• Question 182:

  What happens when you select File > Export from the SmartView Tracker menu?

  A. Exported log entries are deleted from fw.log.
  B. Current logs are exported to a new'.log file.
  C. Exported log entries are still viewable in SmartView Tracker.
  D. Logs in fw.log are exported to a file that can be opened by Microsoft Excel
  D. Logs in fw.log are exported to a file that can be opened by Microsoft Excel

• Question 183:

  Which of the following would NOT be a reason for beginning with a fresh installation of VPN.1 NGX R65, instead of upgrading a previous version to VPN.1 NGX R65?

  A. You see a more logical way to organize your rules and objects.
  B. YOU want to keep your Check Point configuration.
  C. Your Security Policy includes rules and objects whose purpose you do not know.
  D. Objects and rules' naming conventions have changed overtime.
  B. YOU want to keep your Check Point configuration.

• Question 184:

  A marketing firm's networking team is trying to troubleshoot user complaints regarding access to audio-streaming material from the Internet. The networking team asks you to check the object and rule configuration settings for the perimeter Security Gateway. Which SmartConsole application should you use to check these objects and rules?

  A. SmartViewTracker
  B. SmartView Status
  C. SmartView Monitor
  D. SmartDashboard
  B. SmartView Status

• Question 185:

  What must a public hospital Security Administrator do to comply with new health-care legislation requirements for logging all traffic accepted through the perimeter Security Gateway?

  A. Define two log servers on the VPN-1 NGX R65 Gateway object. Enable "Log Implied Rules" on the first log server. Enable "Log Rule Base" on the second log server. Use Eventia Reporter to merge the two log server records into the same database for HIPPA log audits.
  B. Install the "View Implicit Rules" package using SmartUpdate.
  C. In Global Properties > Reporting Tools check the box "Enable tracking all rules (including rules marked as 'None' in the Track column). Send these logs to a secondary log server for a complete logging history. Use your normal log server for standard logging for troubleshooting.
  D. Check the "Log Implied Rules Globally" box on the VPN-1 NGX R65 Gateway object.
  C. In Global Properties > Reporting Tools check the box "Enable tracking all rules (including rules marked as 'None' in the Track column). Send these logs to a secondary log server for a complete logging history. Use your normal log server for standard logging for troubleshooting.

• Question 186:

  Which of the following is NOT supported with Office Mode?

  A. SSL Network Extender
  B. L2TP
  C. SecureClient
  D. Transparent Mode
  D. Transparent Mode

• Question 187:

  In a Management High Availability (HA) configuration, you can configure synchronization to occur automatically, when

  (1)The Security Policy is installed.

  (2)The Security Policy is saved.

  (3)The Security Administrator logs in to the secondary SmartCenter Server, and changes its status to active.

  (4)A scheduled event occurs.

  (5)The

  user database is installed.

  Select the BEST response for the synchronization sequence. Choose One:

  A. 1,2,3,4
  B. 1,2,5
  C. 1,2,4
  D. 1,3,4
  C. 1,2,4

• Question 188:

  By default, when you click File > Switch Active File from SmartView Tracker, the SmartCenter Server:

  A. Prompts you to enter a filename, then saves the log file.
  B. Saves the current log file, names the log file by date and time, and starts a new log file.
  C. Purges the current log file, and starts a new log file.
  D. Purges the current log, and prompts you for the new log's mode.
  B. Saves the current log file, names the log file by date and time, and starts a new log file.

• Question 189:

  In SmartDashboard, you configure 45 MB as the required free hard-disk space to accommodate logs. What can you do to keep old log files, when free space falls below 45 MB?

  A. Do nothing. Old logs are deleted, until free space is restored.
  B. Do nothing. The SmartCenter Server automatically copies old logs to a backup server before purging.
  C. Use the fwm logexport command to export the old log files to other location.
  D. Configure a script to run fw logswitch and SCP the output file to a separate file server.
  D. Configure a script to run fw logswitch and SCP the output file to a separate file server.

• Question 190:

  When synchronizing clusters, which of the following statements is NOT true?

  A. Client Auth or Session Auth connections through a cluster member will be lost if the cluster member fails.
  B. The state of connections using resources is maintaineci by a Security Server, so these connections cannot be synchronizeci.
  C. In the case of a failover, accounting information on the failed member may be lost ciespite a properly working synchronization
  D. Only cluster members running on the same OS platform can be synchronizeci.
  A. Client Auth or Session Auth connections through a cluster member will be lost if the cluster member fails.