CheckPoint 156-915.65 Online Practice Questions and Exam Preparation

CheckPoint 156-915.65 Online Questions & Answers

• Question 61:

  Where do you enable popup alerts for SmartDefense settings that have detected suspicious activity?

  A. In SmartView Monitor, select Tools > Alerts
  B. In SmartView Tracker, select Tools > Custom Commands
  C. In SmartDashboard, edit the Gateway object, select SmartDefense > Alerts
  D. In SmartDashboard, select Global Properties > Log and Alert > Alert Commands
  A. In SmartView Monitor, select Tools > Alerts

• Question 62:

  Which command line interface utility allows the administrator to verify the name and timestamp of the Security Policy currently installed on a firewall module?

  A. fwver
  B. fw stat
  C. fw ctl pstat
  D. cpstatfwd
  B. fw stat

• Question 63:

  Which Security Servers can perform authentication tasks, but CANNOT perform content security tasks?

  A. Telnet
  B. HTTP
  C. FTP
  D. SMTP
  A. Telnet

• Question 64:

  How does a standby SmartCenter Server receive logs from all Security Gateways, when an active SmartCenter Server fails over?

  A. Establish Secure Internal Communications (SIC) between the primary and secondary Servers. The secondary Server can then receive logs from the Gateways, when the active Server fails over.
  B. Add the secondary SmartCenter Server object as a backup log server in the "Log Servers" window (under the "Logs and Masters" tab on the Gateway object). Reinstall the Security Policy.
  C. The secondary Server's host name and IP address must be added to the Masters file on the remote Gateways.
  D. Create a Check Point host object to represent the standby SmartCenter Server. Then select "Secondary SmartCenter Server" and "Log Server", from the list of Check Point Products on the General Properties window.
  B. Add the secondary SmartCenter Server object as a backup log server in the "Log Servers" window (under the "Logs and Masters" tab on the Gateway object). Reinstall the Security Policy.

• Question 65:

  When launching SmartDashboard, what information is required to log into VPN-1 NGX R65?

  A. User Name, Password, SmartCenter Server IP
  B. User Name, SmartCenter Server IP, certificate fingerprint file
  C. Password, SmartCenter Server IP, LDAP Server
  D. Password, SmartCenter Server IP
  B. User Name, SmartCenter Server IP, certificate fingerprint file

• Question 66:

  What information is found in the SmartView Tracker audit log?

  A. SIC revoke certificate event
  B. Number of concurrent IKE negotiations
  C. Destination IP address
  D. Most accessed Rule Base rule
  A. SIC revoke certificate event

• Question 67:

  Which of the following statements about the Port Scanning feature of SmartDefense is TRUE?

  A. When a port scan is detected, only a log is issued ?never an alert.
  B. The Port Scanning feature actively blocks the scanning, and sends an alert to SmartView Monitor.
  C. A typical scan detection is when more than 500 open inactive ports are open for a period of 120 seconds.
  D. Port Scanning does not block scanning, it detects port scans with one of three levels of detection sensitivity
  D. Port Scanning does not block scanning, it detects port scans with one of three levels of detection sensitivity

• Question 68:

  Which VPN-1 NGX R65 component displays the number of packets accepted, rejected, and dropped on a specific Security Gateway, in real time?

  A. SmartView Monitor
  B. SmartView Status
  C. SmartUpdate
  D. Eventia Analyzer
  D. Eventia Analyzer

• Question 69:

  You are a Security Administrator preparing to deploy a new HFA (Hotfix Accumulator) to ten Security Gateways at five geographically separated locations What is the BEST method to implement this HFA?

  A. Send a Certified Security Engineer to each site to perform the update
  B. Use a SSH connection to SCP the HFA to each Security Gateway. Once copied locally, initiate a remote installation command and monitor the installation progress with SmartView Monitor.
  C. Use SmartUpdate to install the packages to each of the Security Gateways remotely
  D. Send a CDROM with the HFA to each location and have local personnel install it
  C. Use SmartUpdate to install the packages to each of the Security Gateways remotely

• Question 70:

  How do you define a service object for a TCP port range?

  A. Manage Services, New Other, Provide name and define Protocol: x-y
  B. Manage Services, New TCP, Provide name and define Port: x-y
  C. Manage Services, New Other, Provide name and define Protocol: 17, Range: x-y
  D. Manage Services, New Group, Provide name and Add all service ports for range individually to the group object
  B. Manage Services, New TCP, Provide name and define Port: x-y