CheckPoint CheckPoint Certification 156-915.65 Questions & Answers

• Question 151:

  If you are experiencing LDAP issues, which of the following should you check?

  A. Connectivity between the NGX gateway and LDAP server

  B. Secure Internal Communications (SIC)

  C. VPN Load Balancing

  D. Overlapping VPN Domains

  Correct Answer: C

• Question 152:

  When you check "Web Server" in a host.node object, what happens to the host?

  A. The Web server daemon is enabled on the host.

  B. More granular controls are added to the host, in addition to Web Intelligence tab settings.

  C. You can specify allowed ports in the Web server's node.object properties. You then do not need to list all allowed ports in the Rule Base

  D. SmartDefense Web Intelligence is enabled to check on the host.

  Correct Answer: B

• Question 153:

  When configuring Port Scanning, which level of sensitivity detects more than 100 inactive ports are tried for a period of 30 seconds?

  A. LOW

  B. High

  C. None. Such a level does not exist.

  D. Medium

  Correct Answer: D

• Question 154:

  What physical machine must have access to the User Center public IP when checking for new packages with SmartUpdate?

  A. SmartUpdate installed SmartCenter Server PC

  B. SmartUpdate GUI PC

  C. VPN-1 Security Gateway getting the new upgrade package

  D. SmartUpdate Repository SQL database Server

  Correct Answer: B

• Question 155:

  Which OPSEC server is used to prevent users from accessing certain Web sites?

  A. UFP

  B. LEA

  C. CVP

  D. AMON

  Correct Answer: A

• Question 156:

  Your online bookstore has customers connecting to a variety of Web servers to place or change orders, and check order status. You ran penetration tests through the Security Gateway, to determine if the Web servers were protected from a recent series of cross-site scripting attacks. The penetration testing indicated the Web servers were still vulnerable. You have checked every box in the Web Intelligence tab, and installed the Security Policy. What else might you do to reduce the vulnerability?

  A. Configure the Security Gateway protecting the Web servers as a Web server.

  B. Check the "Products > Web Server" box on the host node objects representing your Web servers.

  C. Configure resource objects as Web servers, and use them in the rules allowing HTTP traffic to the Web servers.

  D. The penetration software you are using is malfunctioning and is reporting a false- positive.

  Correct Answer: C

• Question 157:

  You are preparing computers for a new ClusterXL deployment. For your cluster, you plan to use three machines with the following configurations:Are these machines correctly configured for a ClusterXL deployment?

  

  A. No, all machines in a cluster must be running on the same OS.

  B. Yes, these machines are configured correctly for a ClusterXL deployment.

  C. No, QuadCards are not supported with ClusterXL.

  D. No, a cluster may only have two members.

  Correct Answer: A

• Question 158:

  In a Management High Availability (HA) configuration, you can configure synchronization to occur automatically, when

  (1)

  The Security Policy is installed.

  (2)

  The Security Policy is saved.

  (3)

  The Security Administrator logs in to the secondary SmartCenter Server, and changes its status to active.

  (4)

  A scheduled event occurs.

  (5)

  The user database is installed.

  Select the BEST response for the synchronization sequence. Choose One:

  A.

  1,2,3,4

  B.

  1,2,5

  C.

  1,2,4

  D.

  1,3,4

  Correct Answer: C

• Question 159:

  You are running the licensejjpgrade tool on your SecurePlatform Gateway. Which of the following can you NOT do with the upgrade tool?

  A. Simulate the license-upgrade process.

  B. Perform the actual license-upgrade process.

  C. View the status of currently installed licenses.

  D. View the licenses in the SmartUpdate License Repository.

  Correct Answer: D

• Question 160:

  Which command line interface utility allows the administrator to verify the name and timestamp of the Security Policy currently installed on a firewall module?

  A. fwver

  B. fw stat

  C. fw ctl pstat

  D. cpstatfwd

  Correct Answer: B