CheckPoint CheckPoint Certification 156-915.65 Questions & Answers

• Question 181:

  What must a public hospital Security Administrator do to comply with new health-care legislation requirements for logging all traffic accepted through the perimeter Security Gateway?

  A. Define two log servers on the VPN-1 NGX R65 Gateway object. Enable "Log Implied Rules" on the first log server. Enable "Log Rule Base" on the second log server. Use Eventia Reporter to merge the two log server records into the same database for HIPPA log audits.

  B. Install the "View Implicit Rules" package using SmartUpdate.

  C. In Global Properties > Reporting Tools check the box "Enable tracking all rules (including rules marked as 'None' in the Track column). Send these logs to a secondary log server for a complete logging history. Use your normal log server for standard logging for troubleshooting.

  D. Check the "Log Implied Rules Globally" box on the VPN-1 NGX R65 Gateway object.

  Correct Answer: C

• Question 182:

  Which utility allows you to configure the DHCP service on SecurePlatform from the command line?

  A. WebUI

  B. cpconfig

  C. ifconfig

  D. sysconfig

  Correct Answer: D

• Question 183:

  What is a Consolidation Policy?

  A. A global Policy used to share a common enforcement policy for multiple similar Security Gateways

  B. The collective name of the logs generated by Eventia Reporter

  C. The collective name of the Security Policy, Address Translation, and SmartDefense Policies

  D. The specific Policy written in SmartDashboard to configure which log data is stored in the Eventia Reporter database

  Correct Answer: D

• Question 184:

  Which is the BEST configuration option to protect internal users from malicious Java code, without stripping Java scripts?

  A. Use the URI resource to strip ActiveX tags

  B. Use the URI resource to block Java code

  C. Use CVP in the URI resource to block Java code

  D. Use the URI resource to strip applet tags

  Correct Answer: B

• Question 185:

  When configuring VPN High Availability (HA) with MEP, which of the following is correct?

  A. The decision on which MEP Security Gateway to use is made on the remote gateway's side (non-MEP side).

  B. MEP Gateways must be managed by the same SmartCenter Server.

  C. MEP VPN Gateways cannot be geographically separated machines.

  D. If one Gateway fails, the synchronized connection fails over to another Gateway and the connection continues

  Correct Answer: A

• Question 186:

  Which SmartView Tracker mode allows you to read the SMTP email body sent from the Chief Executive Officer (CEO)?

  A. Log Tab

  B. Display Capture Action

  C. This is not a SmartView Tracker feature

  D. Account Query

  Correct Answer: B

• Question 187:

  Match the remote-access VPN Connection mode features with their descriptions:

  

  A. A 3,B 4,C 2,D 1

  B. A 2,B 3,C 4,D 1

  C. A 2,B 4,C 3,D 1

  D. A 1. B 3,C 4,D 2

  Correct Answer: B

• Question 188:

  Your bank's distributed VPN-1 NGX R65 installation has Security Gateways up for renewal. Which SmartConsole application will tell you which Security Gateways have licenses that will expire within the next 30 days?

  A. Smartupdate

  B. SmartView Tracker

  C. SmartDashboard

  D. SmartPortal

  Correct Answer: D

• Question 189:

  Look at the Advanced Properties screen exhibit. What settings can you change to reduce the encryption overhead and improve performance for your mesh VPN Community?

  

  A. Check the box "Use aggressive mode"

  B. Change the "Renegotiate IPSec security associations every 3600 seconds" to 7200

  C. Change the setting "Use Diffie-Hellman group:" to "Group 5 (1536 bit)"

  D. Check the box "Use Perfect Forward Secrecy"

  Correct Answer: B

• Question 190:

  Which of the following statements about file-type recognition in Content Inspection is TRUE?

  A. A scan failure will only occur if the antivirus engine fails to initialize.

  B. Antivirus status is monitored using SmartView Tracker.

  C. The antivirus engine acts as a proxy, caching the scanned file before delivering it to the client.

  D. All file types are considered "at risk", and are not subject to the whims of the Administrator or the Security Policy

  Correct Answer: C