1. Home
  2. CheckPoint
  3. 156-915.65

Accelerated CCSE NGX R65

Exam Details

  • Exam Code
    :156-915.65
  • Exam Name
    :Accelerated CCSE NGX R65
  • Certification
    :CheckPoint Certification
  • Vendor
    :CheckPoint
  • Total Questions
    :204 Q&As
  • Last Updated
    :Mar 10, 2025

CheckPoint CheckPoint Certification 156-915.65 Questions & Answers

  • Question 61:

    Which of these components does NOT require a VPN-1 NGX R65 license?

    A. Check Point Gateway

    B. SmartCenterServer

    C. SmartConsole

    D. SmartUpdate upgrading/patching

  • Question 62:

    How do you define a service object for a TCP port range?

    A. Manage Services, New Other, Provide name and define Protocol: x-y

    B. Manage Services, New TCP, Provide name and define Port: x-y

    C. Manage Services, New Other, Provide name and define Protocol: 17, Range: x-y

    D. Manage Services, New Group, Provide name and Add all service ports for range individually to the group object

  • Question 63:

    What physical machine must have access to the User Center public IP when checking for new packages with SmartUpdate?

    A. SmartUpdate installed SmartCenter Server PC

    B. SmartUpdate GUI PC

    C. VPN-1 Security Gateway getting the new upgrade package

    D. SmartUpdate Repository SQL database Server

  • Question 64:

    After installing VPN-1 Pro NGX R65, you discover that one port on your Intel Quad NIC on the Security Gateway is not fetched by a get topology request What is the most likely cause and solution?

    A. Make sure the driver for you particular NIC is available, and reinstall. You will be prompted for the driver.

    B. The NIC is faulty. Replace it and reinstall.

    C. If an interface is not configured, it is not recognized. Assign an IP and subnet mask using the WebUl.

    D. Your NIC driver is installed but was not recognized. Apply the latest SecurePlatform R65 Hotfix Accumulator (HFA).

  • Question 65:

    Your primary SmartCenter Server is installed on a SecurePlatform Pro machine, which is also a VPN.1 Power Gateway. You want to implement Management High Availability (HA). You have a spare machine to configure as the secondary SmartCenter Server. How do you configure the new machine to be the standby SmartCenter Server?

    A. Use cpprod_util to reconfigure the primary SmartCenter Server to become the secondary on the VPN-1 Power Gateway. Install a new primary SmartCenter Server on the spare machine and set to "standby". Synchronize the "active" secondary to the "standby" primary in order to migrate the configuration.

    B. Install the secondary Server on the spare machine. Add the new machine to any network routable to the primary Server. Synchronize the machines.

    C. You cannot configure Management HA, when either the primary or secondary SmartCenter Server is running on a VPN-1 Pro Gateway.

    D. Install the secondary Server on the spare machine. Add the new machine to the same network as the primary Server. Synchronize the machines.

  • Question 66:

    How do you block some seldom-used FTP commands, such as CWD, and FIND from passing through the Gateway?

    A. Use FTP Security Server settings in SmartDefense

    B. Add the restricted commands to the aftpd.conf file in the SmartCenter Server.

    C. Configure the restricted FTP commands in the Security Servers screen of the Global properties.

    D. Enable FTP Bounce checking in SmartDefense.

  • Question 67:

    Match the Best Management High Availability synchronization.status descriptions for your SmartCenter Server (SCS)

    A. A3.B 1.C2.D4

    B. A4.B3.C 1.D2

    C. A3.B2.C 1.D4

    D. A3.B 1.C4.D2

  • Question 68:

    The Check Point ClusterXL mode must synchronize the physical interface IP and MAC addresses on all clustered interfaces

    A. New Mode HA

    B. Legacy Mode HA

    C. Multicast Mode Load Sharing

    D. Pivot Mode Load Sharing

  • Question 69:

    Which of these components does NOT require a VPN-1 NGX R65 license?

    A. Check Point Gateway

    B. SmartCenterServer

    C. SmartConsole

    D. SmartUpdate upgrading/patching

  • Question 70:

    When configuring VPN High Availability (HA) with MEP, which of the following is correct?

    A. The decision on which MEP Security Gateway to use is made on the remote gateway's side (non-MEP side).

    B. MEP Gateways must be managed by the same SmartCenter Server.

    C. MEP VPN Gateways cannot be geographically separated machines.

    D. If one Gateway fails, the synchronized connection fails over to another Gateway and the connection continues

Related Exams:

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only CheckPoint exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your 156-915.65 exam preparations and CheckPoint certification application, do not hesitate to visit our Vcedump.com to find your solutions here.