CheckPoint CheckPoint Certification 156-915.65 Questions & Answers

• Question 31:

  How do you use SmartView Monitor to compile traffic statistics for your company's Internet activity during production hours?

  A. Use the "Traffic Counters" settings and SmartView Monitor to generate a graph showing the total HTTP traffic for the day

  B. Select the "Tunnels" view, and generating a report on the statistics

  C. View total packets passed through the Security Gateway

  D. Configure a Suspicious Activity Rule which triggers an alert when HTTP traffic passes through the Gateway

  Correct Answer: A

• Question 32:

  Where do you enable popup alerts for SmartDefense settings that have detected suspicious activity?

  A. In SmartView Monitor, select Tools > Alerts

  B. In SmartView Tracker, select Tools > Custom Commands

  C. In SmartDashboard, edit the Gateway object, select SmartDefense > Alerts

  D. In SmartDashboard, select Global Properties > Log and Alert > Alert Commands

  Correct Answer: A

• Question 33:

  An internal host 10.4.8.108 successfully pings its Legacy Mode Cluster and receives replies. The following is the ARP table from the internal Windows host 10.4.8.108. Based on this information, what is the active cluster member's IP address?According to the output, which member is the standby machine?

  

  A. 10.4.8.2

  B. 10.4.8.3

  C. The active cluster member's IP address cannot be determined by this arp cache

  D. 10.4.8.1

  Correct Answer: C

• Question 34:

  Which of the following is NOT supported with Office Mode?

  A. SSL Network Extender

  B. L2TP

  C. SecureClient

  D. Transparent Mode

  Correct Answer: D

• Question 35:

  Which VPN-1 NGX R65 component displays the number of packets accepted, rejected, and dropped on a specific Security Gateway, in real time?

  A. SmarrViewMonitor

  B. SmarrView Status

  C. SmartUpdate

  D. Eventia Analyzer

  Correct Answer: D

• Question 36:

  State Synchronization is enabled on both members in a cluster, and the Security Policy is successfully installed. No protocols or services have been deselected for "selective sync". The following is the fw tab -t connections -s output from both members:Is State Synchronization working properly between the two members?

  

  A. Members A and B are synchronized, because #SLINKS are identical in the connections table.

  B. Members A and B are not synchronized, because #VALS in the connections table are not close.

  C. Members A and B are not synchronized, because #PEAKfor both members is not close in the connections table.

  D. Members A and B are synchronized, because ID for both members is identical in the connections table.

  Correct Answer: B

• Question 37:

  How should Check Point packages be uninstalled?

  A. In the same order in which the installation wrapper initially installed them

  B. In any order as long as all packages are removed

  C. In the opposite order in which the installation wrapper initially installed them

  D. In any order; CPsuite must be the last package uninstalled.

  Correct Answer: C

• Question 38:

  A third shift Security Administrator configured and installed a new Security Policy early this morning. When you arrive, he tells you that he has been receiving complaints that Internet access is very slow. You suspect the Security Gateway virtual memory might be the problem. How would you check this using SmartConsole?

  A. SmartViewMonitor

  B. SmartView Tracker

  C. Eventia Analyzer

  D. This information can only be viewed with fw ctl pstat command from the CLI.

  Correct Answer: A

• Question 39:

  You are the Security Administrator for a university. The university's FTP servers have old hardware and software. Certain FTP commands cause the FTP servers to malfunction. Upgrading the FTP servers is not an option at this time. Where can you define Blocked FTP Commands passing through the Security Gateway protecting the FTP servers?

  A. SmartDefense > Application Intelligence > FTP > FTP Security Server

  B. Rule Base > Action Field > Properties

  C. FTP Service Object > Advanced > Blocked FTP Commands

  D. Global Properties > Security Server > Allowed FTP Commands

  Correct Answer: A

• Question 40:

  You have two NOKIA Appliances: one IP530 and one IP380. Both appliances have IPSO 3.9 and NGX R65 VPN-1 Power installed in a distributed deployment. Can they be members of a Gateway Cluster?

  A. No, because the appliances must be of the same model (both should be IP530 or IP380)

  B. NO, because NOKIA does not have a cluster option.

  C. Yes, as long as they have the same IPSO and VPN-1 versions.

  D. NO, because the Security Gateways must be installed in a stand-alone installation.

  Correct Answer: C