CheckPoint 156-915.65 Online Practice Questions and Exam Preparation

CheckPoint 156-915.65 Online Questions & Answers

• Question 51:

  Which of the following is TRUE concerning numbered VPN Tunnel Interfaces (VTIs)?

  A. VTIs are supported on SecurePlatform
  B. VTIS cannot share IP addresses
  C. VTIs can use an already existing physical-interface IP address
  D. VTIS are assigned only local addresses, not remote addresses
  A. VTIs are supported on SecurePlatform

• Question 52:

  A marketing firm's networking team is trying to troubleshoot user complaints regarding access to audio-streaming material from the Internet. The networking team asks you to check the object and rule configuration settings for the perimeter Security Gateway. Which SmartConsole application should you use to check these objects and rules?

  A. SmartViewTracker
  B. SmartView Status
  C. SmartView Monitor
  D. SmartDashboard
  B. SmartView Status

• Question 53:

  The command fw fetch causes the:

  A. SmartCenter Server to retrieve the debug logs of the target Security Gateway
  B. Security Gateway to retrieve the user database information from the tables on the SmartCenter Server.
  C. SmartCenter Server to retrieve the IP addresses of the target Security Gateway
  D. Security Gateway to retrieve the compiled policy and inspect code from the SmartCenter Server and install it to the kernel
  D. Security Gateway to retrieve the compiled policy and inspect code from the SmartCenter Server and install it to the kernel

• Question 54:

  Antivirus protection on a VPN-1 Gateway is available for all of the following protocols, EXCEPT

  A. POP3
  B. TELNET
  C. HTTP
  D. FTP
  B. TELNET

• Question 55:

  If you are experiencing LDAP issues, which of the following should you check?

  A. Connectivity between the NGX gateway and LDAP server
  B. Secure Internal Communications (SIC)
  C. VPN Load Balancing
  D. Overlapping VPN Domains
  A. Connectivity between the NGX gateway and LDAP server

• Question 56:

  Match each of the following commands to their correct function. Each command only has one function listed

  

  A. C1>F6; C2>F4; C3>F2; C4>F5
  B. C1>F4; C2>F6; C3>F3; C4>F2
  C. C1>F2; C2>F4; C3>F1; C4>F5
  D. C1>F2; C2>F1; C3>F6; C4>F4
  A. C1>F6; C2>F4; C3>F2; C4>F5

• Question 57:

  When configuring VPN High Availability (HA) with MEP, which of the following is correct?

  A. The decision on which MEP Security Gateway to use is made on the remote gateway's side (non-MEP side).
  B. MEP Gateways must be managed by the same SmartCenter Server.
  C. MEP VPN Gateways cannot be geographically separated machines.
  D. If one Gateway fails, the synchronized connection fails over to another Gateway and the connection continues
  A. The decision on which MEP Security Gateway to use is made on the remote gateway's side (non-MEP side).

• Question 58:

  You have a High Availability ClusterXL configuration. Machines are not synchronized. What happens to connections on failover?

  A. It is not possible to configure High Availability that is not synchronized.
  B. Connections cannot be established until cluster members are fully synchronized.
  C. Old connections are lost but can be reestablished.
  D. Old connections are lost and but are automatically recovered whenever the failed machine recovers.
  C. Old connections are lost but can be reestablished.

• Question 59:

  Your online bookstore has customers connecting to a variety of Web servers to place or change orders, and check order status. You ran penetration tests through the Security Gateway, to determine if the Web servers were protected from a recent series of cross-site scripting attacks. The penetration testing indicated the Web servers were still vulnerable. You have checked every box in the Web Intelligence tab, and installed the Security Policy. What else might you do to reduce the vulnerability?

  A. Configure the Security Gateway protecting the Web servers as a Web server.
  B. Check the "Products > Web Server" box on the host node objects representing your Web servers.
  C. Configure resource objects as Web servers, and use them in the rules allowing HTTP traffic to the Web servers.
  D. The penetration software you are using is malfunctioning and is reporting a false- positive.
  C. Configure resource objects as Web servers, and use them in the rules allowing HTTP traffic to the Web servers.

• Question 60:

  Which of the following statements about file-type recognition in Content Inspection is TRUE?

  A. A scan failure will only occur if the antivirus engine fails to initialize.
  B. Antivirus status is monitored using SmartView Tracker.
  C. The antivirus engine acts as a proxy, caching the scanned file before delivering it to the client.
  D. All file types are considered "at risk", and are not subject to the whims of the Administrator or the Security Policy
  C. The antivirus engine acts as a proxy, caching the scanned file before delivering it to the client.