Multi-Corp wants to implement IKE DoS protection to prevent a denial-of-service (DoS) attack from paralyzing its VPN Communities. Jerry needs to minimize the performance impact of implementing this new protection. Which of the following configurations would BEST enable this new protection with minimal impact to the organization?
A. Set "Support IKE DoS protection from identified source" to "Puzzles", and "Support IKE DoS protection from unidentified source" to "Stateless".
B. Set both "Support IKE Dos protection from identified source", and "Support IKE DoS protection from unidentified source" to "Puzzles".
C. Set both "Support IKE DoS protection from identified source", and "Support IKE DoS protection from unidentified source" to "Stateless"
D. Set "Support IKE DoS protection from identified source" to "Stateless", and "Support IKE DoS protection from unidentified source" to "None".
When synchronizing clusters, which of the following statements is NOT true?
A. Client Auth or Session Auth connections through a cluster member will be lost if the cluster member fails.
B. The state of connections using resources is maintaineci by a Security Server, so these connections cannot be synchronized.
C. In the case of a failover, accounting information on the failed member may be lost despite a properly working synchronization
D. Only cluster members running on the same OS platform can be synchronized.
Which of the following is the most critical step in a SmartCenter Server NGX R65 backup strategy?
Perform a full system tape backup of both the SmartCenter and Security Gateway machines.
A. Run the cpstop command prior to running the upgrade_export command
B. Using the upgradejmport command, attempt to restore the SmartCenter Server to a non- production system
C. Move the *.tgz upgrade_export file to an off site location via ftp.
Which command is used to uninstall the Security Policy directly from the Security Gateway?
A. fwm unload.local
B. fw kill policy
C. cpstop
D. fwunloadlocal
Which of the following would NOT be a function of the Check Point license-upgrade tool?
A. Upgrade locally managed licenses.
B. Simulate the license-upgrade process.
C. Manually upgrade a specific license.
D. View the status of the currently installed licenses.
What must a public hospital Security Administrator do to comply with new health-care legislation requirements for logging all traffic accepted through the perimeter Security Gateway?
A. Define two log servers on the VPN-1 NGX R65 Gateway object. Enable "Log Implied Rules" on the first log server. Enable "Log Rule Base" on the second log server. Use Eventia Reporter to merge the two log server records into the same database for HIPPA log audits.
B. Install the "View Implicit Rules" package using SmartUpdate.
C. In Global Properties > Reporting Tools check the box "Enable tracking all rules (including rules marked as 'None' in the Track column). Send these logs to a secondary log server for a complete logging history Use your normal log server for standard logging for troubleshooting.
D. Check the "Log Implied Rules Globally" box on the VPN-1 NGX R65 Gateway object.
The command fw fetch causes the:
A. SmartCenter Server to retrieve the debug logs of the target Security Gateway
B. Security Gateway to retrieve the user database information from the tables on the SmartCenter Server.
C. SmartCenter Server to retrieve the IP addresses of the target Security Gateway
D. Security Gateway to retrieve the compiled policy and inspect code from the SmartCenter Server and install it to the kernel
Which of the following is the most critical step in a SmartCenter Server NGX R65 backup strategy?
A. Perform a full system tape backup of both the SmartCenter and Security Gateway machines.
B. Run the cpstop command prior to running the upgrade_export command
C. Using the upgradejmport command, attempt to restore the SmartCenter Server to a non- production system
D. Move the *.tgz upgrade_export file to an off site location via ftp.
By default, when you click File > Switch Active File from SmartView Tracker, the SmartCenter Server:
A. Prompts you to enter a filename, then saves the log file.
B. Saves the current log file, names the log file by date and time, and starts a new log file.
C. Purges the current log file, and starts a new log file.
D. Purges the current log, and prompts you for the new log's mode.
Which utility allows you to configure the DHCP service on SecurePlatform from the command line?
A. WebUI
B. cpconfig
C. ifconfig
D. sysconfig
Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only CheckPoint exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your 156-915.65 exam preparations and CheckPoint certification application, do not hesitate to visit our Vcedump.com to find your solutions here.