CheckPoint CheckPoint Certification 156-915.65 Questions & Answers

• Question 21:

  Your online bookstore has customers connecting to a variety of Web servers to place or change orders, and check order status. You ran penetration tests through the Security Gateway, to determine if the Web servers were protected from a recent series of cross-site scripting attacks. The penetration testing indicated the Web servers were still vulnerable. You have checked every box in the Web Intelligence tab, and installed the Security Policy. What else might you do to reduce the vulnerability?

  A. Configure the Security Gateway protecting the Web servers as a Web server.

  B. The penetration software you are using is malfunctioning and is reporting a false- positive.

  C. Check the "Web Intelligence" box in the SmartDefense > HTTP Protocol Inspection.

  D. Check the "Products > Web Server" box on the host node objects representing your Web servers.

  Correct Answer: C

• Question 22:

  Upon checking SmartView Monitor, you find the following Critical Problem notification.What is the reason?

  A. Version mismatch between the SmartCenter Server and Security Gateway

  B. NO Secure Internal Communications established between the SmartCenter Server and Security Gateway

  C. Time not synchronized between the SmartCenter Server and Security Gateway

  D. No Security Policy installed on the Security Gateway

  Correct Answer: D

• Question 23:

  Which Check Point product is used to create and save changes to a Log Consolidation Policy?

  A. Eventia Reporter Client

  B. SmartDashboard Log Consolidator

  C. SmartCenterServer

  D. Eventia Reporter Server

  Correct Answer: B

• Question 24:

  Antivirus protection on a VPN-1 Gateway is available for all of the following protocols, EXCEPT

  A. POP3

  B. TELNET

  C. HTTP

  D. FTP

  Correct Answer: B

• Question 25:

  Your network includes a SecurePlatform machine running NG with Application Intelligence (Al) R55. This configuration acts as both the primary SmartCent Server and VPN-1 Pro Gateway. You add one machine, so you can implement VPN-1 NGX R65 in a distributed environment. The new machine is an Intel CoreDuo processor, with 2 GB RAM and a 500- GB hard drive. How do you use these two machines to successfully migrate the NG with Al R55 configuration?

  A. 1. On the existing machine, export the NG with Al R55 configuration to a network share.

  2. Insert the NGXR65 CD-ROM in the old machine. Install the NGXR65 Security Gateway only while

  reinstalling the SecurePlatform OS over the to of the existing installation.

  Complete sysconfig.

  4.On the new machine, install SecurePlatform as the primary SmartCenter Server only.

  5.Transfer the exported .tgzfile into the new machine, import the configuration, and then reboot.

  6.Open SmartDashboard, change the Gateway object to the new version, and reset SIC for the

  Gateway object.

  B. 1. Export the configuration on the existing machine to a network share. 2.Uninstall the Security Gateway from the existing machine, using sysconfig. 3.Insert the NGX R65 CD-ROM, and run the patch add cd command to upgrade the SmartCenter Server to VPN-1 NGX R65. 4.Select "upgrade with imported file", and reboot. 5.Install a new NGX R65 Security Gateway as the only module on the new machine, and reset SIC to the new Gateway.

  C. 1. Export the configuration on the existing machine to a tape drive. 2.Uninstall the SmartCenter Server from the existing machine, using sysconfig. 3.Insert the NGX R65 CD-ROM, run the patch add cd command to upgrade the existing machine to the NGX R65 Security Gateway, and reboot. 4.Install a new primary SmartCenter Server on the new machine. 5.Change the gateway object to the new version, and reset SIC.

  D. 1. Export the configuration on the existing machine as a backup only. 2.Edit $FWDIR\product.conf on the existing machine, to disable the Pro gateway package. 3.Reboot the existing machine. 4.Perform an in-place-upgrade on the SmartCenter using the command "patch add cd". 5.On the new machine, install SecurePlatform as the NGX R65 Security Gateway only. 6.Run sysconfig to complete the configuration. 7.From SmartDashboard, reconfigure the Gateway object to the new version, and reset SIC. Your company enforces a strict change control policy, which of the following would be best to quickly drop an attacker's specific active connection?

  E. Change the Rule Base and install the policy to all security gateways

  F. SAM Block Intruder feature of SmartView Tracker

  G. Intrusion Detection System (IDS) policy install

  H. SAM Suspicious Activity Rules feature of SmartView Monitor

  Correct Answer: B

• Question 26:

  What is a Consolidation Policy?

  A. A global Policy used to share a common enforcement policy for multiple similar Security Gateways

  B. The collective name of the logs generated by Eventia Reporter

  C. The collective name of the Security Policy, Address Translation, and SmartDefense Policies

  D. The specific Policy written in SmartDashboard to configure which log data is stored in the Eventia Reporter database

  Correct Answer: D

• Question 27:

  Which Security Servers can perform authentication tasks, but CANNOT perform content security tasks?

  A. Telnet

  B. HTTP

  C. FTP

  D. SMTP

  Correct Answer: A

• Question 28:

  Match the Best Management High Availability synchronization-status descriptions for your SmartCenter Server (SCS)

  

  A. A3.B 1.C2.D4

  B. A4.B3.C 1.D2

  C. A3.B2.C 1.D4

  D. A3.B 1.C4.D2

  Correct Answer: A

• Question 29:

  By default, when you click File > Switch Active File from SmartView Tracker, the SmartCenter Server:

  A. Prompts you to enter a filename, then saves the log file.

  B. Saves the current log file, names the log file by date and time, and starts a new log file.

  C. Purges the current log file, and starts a new log file.

  D. Purges the current log, and prompts you for the new log's mode.

  Correct Answer: B

• Question 30:

  How do you recover communications between your SmartCenter Server and Security Gateway if you "lock" yourself out via a rule or policy mis-configuration?

  A. cpstop

  B. fw unload policy

  C. fw delete all.all

  D. fwunloadlocal

  Correct Answer: D