CheckPoint 156-915.65 Online Practice Questions and Exam Preparation

CheckPoint 156-915.65 Online Questions & Answers

• Question 71:

  An NGXR65 HA cluster contains two members with external interfaces 172.28.108.1 and 172.28.108.2. The internal interfaces are 10.4.8.1 and 10.4.8.2. The external cluster VIP address is 172.28.108.3 and the internal cluster VIP address is

  10.4.8.3. The synchronization interfaces are 192.168.1.1 and 192.168.1.2. The Security Administrator discovers State Synchronization is not working properly. The cphaprob if command output displays shows:What is causing the State Synchronization problem?

  

  A. The synchronization network has been defined as "Network Objective: Cluster + 1st sync" with an IP address 192.168.1.3 defined in the NGX cluster object's topology. This configuration is supported in NGX and therefore the above screenshot is not relevant to the sync problem.
  B. The synchronization interface on the individual NGX cluster member object's Topology tab is enabled with "Cluster Interface". Disable this setting.
  C. The synchronization network has a cluster VIP address (192.168.1.3) defined in the NGX cluster object's topology. Remove the 192.168.1.3 VIP interface from the cluster topology.
  D. Another cluster is using 192.168.1.3 as one of the unprotected interfaces.
  A. The synchronization network has been defined as "Network Objective: Cluster + 1st sync" with an IP address 192.168.1.3 defined in the NGX cluster object's topology. This configuration is supported in NGX and therefore the above screenshot is not relevant to the sync problem.

• Question 72:

  Users are not prompted for authentication when they access their Web servers, even though you ave created an HTTP rule via User Authentication. Why?

  A. Users must use the SecuRemote Client, to use the User Authentication Rule.
  B. YU have forgotten to place the User Authentication Rule before the Stealth Rule.
  C. You checked the "cache password on desktop" option in Global Properties.
  D. Another rule that accepts HTTP without authentication exists in the Rule Base.
  B. YU have forgotten to place the User Authentication Rule before the Stealth Rule.

• Question 73:

  Which NGX R65 logs can you configure to send to DShield.org?

  A. SNMP and account logs
  B. Alert and user-defined alert logs
  C. Account and alert logs
  D. Audit and alert logs
  B. Alert and user-defined alert logs

• Question 74:

  Match the Best Management High Availability synchronization-status descriptions for your SmartCenter Server (SCS)

  

  A. A3.B 1.C2.D4
  B. A4.B3.C 1.D2
  C. A3.B2.C 1.D4
  D. A3.B 1.C4.D2
  A. A3.B 1.C2.D4

• Question 75:

  An internal host 10.4.8.108 successfully pings its Legacy Mode Cluster and receives replies. The following is the ARP table from the internal Windows host 10.4.8.108. Based on this information, what is the active cluster member's IP address?According to the output, which member is the standby machine?

  

  A. 10.4.8.2
  B. 10.4.8.3
  C. The active cluster member's IP address cannot be determined by this arp cache
  D. 10.4.8.1
  C. The active cluster member's IP address cannot be determined by this arp cache

• Question 76:

  You want to establish a VPN, using Certificates. Your VPN will exchange Certificates with an external partner. Which of the following activities should you do first?

  A. Exchange exported CA keys and uses them to create a new server object to represent your partner's Certificate Authority (CA).
  B. Manually import your partner's Access Control List.
  C. Manually import your partner's Certificate Revocation List.
  D. Create a new logical-server object to represent your partner's CA.
  A. Exchange exported CA keys and uses them to create a new server object to represent your partner's Certificate Authority (CA).

• Question 77:

  When upgrading to NGX R65, which Check Point products do not require a license upgrade to be current?

  A. None, all versions require a license upgrade
  B. VPN-1 NGX(R64) and later
  C. VPN-1 NGX(R60) and later
  D. VPN-1 NG with Application Intelligence (R54) and later
  C. VPN-1 NGX(R60) and later

• Question 78:

  The Check Point ClusterXL mode must synchronize the physical interface IP and MAC addresses on all clustered interfaces

  A. New Mode HA
  B. Legacy Mode HA
  C. Multicast Mode Load Sharing
  D. Pivot Mode Load Sharing
  B. Legacy Mode HA

• Question 79:

  Which utility allows you to configure the DHCP service on SecurePlatform from the command line?

  A. WebUI
  B. cpconfig
  C. ifconfig
  D. sysconfig
  D. sysconfig

• Question 80:

  What physical machine must have access to the User Center public IP when checking for new packages with SmartUpdate?

  A. SmartUpdate installed SmartCenter Server PC
  B. SmartUpdate GUI PC
  C. VPN-1 Security Gateway getting the new upgrade package
  D. SmartUpdate Repository SQL database Server
  B. SmartUpdate GUI PC