CheckPoint CheckPoint Certification 156-915.65 Questions & Answers

• Question 171:

  Your bank's distributed VPN-1 NGX R65 installation has Security Gateways up for renewal. Which SmartConsole application will tell you which Security Gateways have licenses that will expire within the next 30 days?

  A. SmartUpdate

  B. SmartViewTracker

  C. SmartDashboard

  D. SmattPortal

  Correct Answer: D

• Question 172:

  In SmartDashboard, you configure 45 MB as the required free hard-disk space to accommodate logs. What can you do to keep old log files, when free space falls below 45 MB?

  A. Do nothing. Old logs are deleted, until free space is restored.

  B. Do nothing. The SmartCenter Server automatically copies old logs to a backup server before purging.

  C. Use the fwm logexport command to export the old log files to other location.

  D. Configure a script to run fw logswitch and SCP the output file to a separate file server.

  Correct Answer: D

• Question 173:

  When synchronizing clusters, which of the following statements is NOT true?

  A. Client Auth or Session Auth connections through a cluster member will be lost if the cluster member fails.

  B. The state of connections using resources is maintaineci by a Security Server, so these connections cannot be synchronizeci.

  C. In the case of a failover, accounting information on the failed member may be lost ciespite a properly working synchronization

  D. Only cluster members running on the same OS platform can be synchronizeci.

  Correct Answer: A

• Question 174:

  What command displays the version of an already installed Security Gateway?

  A. cpstat-gw

  B. fw printver

  C. fwver

  D. fw stat

  Correct Answer: C

• Question 175:

  Which of the following would NOT be a reason for beginning with a fresh installation of VPN-1 NGX R65, instead of upgrading a previous version to VPN-1 NGX R65?

  A. You see a more logical way to organize your rules and objects.

  B. YOU want to keep your Check Point configuration.

  C. Your Security Policy includes rules and objects whose purpose you do not know.

  D. Objects and rules' naming conventions have changed overtime.

  Correct Answer: B

• Question 176:

  The following configuration is for VPN-1 NGX R65:ls this configuration correct for Management High Availability?

  

  A. No, the SmartCenter Servers must be installed on the same operating system.

  B. No, the SmartCenter Servers do not have the same number of NICs.

  C. No, an NGXR65 SmartCenter Server cannot run on Red Hat Linux 7.3.

  D. NO, the SmartCenter Servers must reside on the same network.

  Correct Answer: A

• Question 177:

  Match each of the following commands to their correct function. Each command only has one function listed

  

  A. C1>F6; C2>F4; C3>F2; C4>F5

  B. C1>F4; C2>F6; C3>F3; C4>F2

  C. C1>F2; C2>F4; C3>F1; C4>F5

  D. C1>F2; C2>F1; C3>F6; C4>F4

  Correct Answer: A

• Question 178:

  Your primary SmartCenter Server is installed on a SecurePlatform Pro machine, which is also a VPN-1 Power Gateway. You want to implement Management High Availability (HA). You have a spare machine to configure as the secondary SmartCenter Server. How do you configure the new machine to be the standby SmartCenter Server?

  A. Use cpprod_util to reconfigure the primary SmartCenter Server to become the secondary on the VPN-1 Power Gateway. Install a new primary SmartCenter Server on the spare machine and set to "standby". Synchronize the "active" secondary to the "standby" primary in order to migrate the configuration.

  B. Install the secondary Server on the spare machine. Add the new machine to any network routable to the primary Server. Synchronize the machines.

  C. You cannot configure Management HA, when either the primary or secondary SmartCenter Server is running on a VPN-1 Pro Gateway.

  D. Install the secondary Server on the spare machine. Add the new machine to the same network as the primary Server. Synchronize the machines.

  Correct Answer: C

• Question 179:

  Which of the following would NOT be a function of the Check Point license-upgrade tool?

  A. Upgrade locally managed licenses.

  B. Simulate the license-upgrade process.

  C. Manually upgrade a specific license.

  D. View the status of the currently installed licenses.

  Correct Answer: C

• Question 180:

  In New Mode HA, the internal cluster IP VIP address is 10.4.8.3. The internal interfaces on two members are 10.4.8.1 and 10.4.8.2. Internal host 10.4.8.108 Pings 10.4.8.3, and receives replies. The following is the ARP table from the internal Windows host 10.4.8.108:According to the output, which member is the standby machine?

  

  A. 10.4.8.1

  B. The standby machine cannot be determined by this test.

  C. 10.4.8.2

  D. 10.4.8.3

  Correct Answer: A