CheckPoint CheckPoint Certification 156-915.65 Questions & Answers

• Question 81:

  In ClusterXL, which of the following processes are defined by default as critical devices?

  A. assld

  B. fwd

  C. fwm

  D. cpp

  Correct Answer: B

• Question 82:

  When launching SmartDashboard, what information is required to log into VPN-1 NGX R65?

  A. User Name, Password, SmartCenter Server IP

  B. User Name, SmartCenter Server IP, certificate fingerprint file

  C. Password, SmartCenter Server IP, LDAP Server

  D. Password, SmartCenter Server IP

  Correct Answer: B

• Question 83:

  You have a High Availability ClusterXL configuration. Machines are not synchronized. What happens to connections on failover?

  A. It is not possible to configure High Availability that is not synchronized.

  B. Connections cannot be established until cluster members are fully synchronized.

  C. Old connections are lost but can be reestablished.

  D. Old connections are lost and but are automatically recovered whenever the failed machine recovers.

  Correct Answer: C

• Question 84:

  You plan to migrate an NG with Application Intelligence (Al) R55 SmartCenter Server on Windows to VPN1 NGX R65. You also plan to upgrade four VPN-1 Pro Gateways at remote offices, and one local VPN-1 Pro Gateway at your company's headquarters. The SmartCenter Server configuration must be migrated. What is the correct procedure to migrate the configuration?

  A. 1. Upgrade the five remote Gateways via SmartUpdate.

  2. Upgrade the SmartCenter Server, using the NGX R65 CD.

  B. 1. From the VPN-1 NGX R65 CD on the SmartCenter Server, select "Upgrade". 2.Reboot after installation and upgrade all licenses via SmartUpdate. 3.Reinstall all gateways using NGX R65 and install a policy.

  C. 1. From the VPN-1 NGX R65 CD in the SmartCenter Server, select "Export". 2.Install VPN-1 NGX R65 on a new PC using the option "Installation using imported configuration". 3.Reboot after installation and upgrade all licenses via SmartUpdate. 4.Upgrade software on all five remote Gateways via SmartUpdate.

  D. 1. Copy the $FWDIR\conf directory from the SmartCenter Server. 2.Save directory contents to another file server. 3.Uninstall the SmartCenter Server, and install a new SmartCenter Server. 4.Move the saved directory contents to $FWDIR\conf replacing the default installation files. 5.Reinstall all gateways using VPN-1 NGX R65 and install a Security Policy.

  Correct Answer: C

• Question 85:

  What must a public hospital Security Administrator do to comply with new health-care legislation requirements for logging all traffic accepted through the perimeter Security Gateway?

  A. Define two log servers on the VPN-1 NGX R65 Gateway object. Enable "Log Implied Rules" on the first log server. Enable "Log Rule Base" on the second log server. Use Eventia Reporter to merge the two log server records into the same database for HIPPA log audits.

  B. Install the "View Implicit Rules" package using SmartUpdate.

  C. In Global Properties > Reporting Tools check the box "Enable tracking all rules (including rules marked as 'None' in the Track column). Send these logs to a secondary log server for a complete logging history. Use your normal log server for standard logging for troubleshooting.

  D. Check the "Log Implied Rules Globally" box on the VPN-1 NGX R65 Gateway object.

  Correct Answer: C

• Question 86:

  The customer has a small Check Point installation which includes one Window XP workstation working as SmartConsole ,, one Solaris server working as SmartCenter, and a third server running SecurePlatform working as Security Gateway. This is an example of:

  A. Hybrid Installation

  B. Unsupported configuration

  C. Stand-Alone Installation

  D. Distributed Installation

  Correct Answer: A

• Question 87:

  Which of the following is TRUE concerning numbered VPN Tunnel Interfaces (VTIs)?

  A. VTIS are supported on SecurePlatform

  B. VTIS cannot share IP addresses

  C. VTIs can use an already existing physical-interface IP address

  D. VTIS are assigned only local addresses, not remote addresses

  Correct Answer: A

• Question 88:

  When configuring VPN High Availability (HA) with MEP, which of the following is correct?

  A. The decision on which MEP Security Gateway to use is made on the remote gateway's side (non-MEP side).

  B. MEP Gateways must be managed by the same SmartCenter Server.

  C. MEP VPN Gateways cannot be geographically separated machines.

  D. If one Gateway fails, the synchronized connection fails over to another Gateway and the connection continues

  Correct Answer: A

• Question 89:

  SmartDefense profiles are:

  A. Files that take 3MB of RAM from the user console machine.

  B. Able to be cloned, but only from the command line.

  C. Configurable up to 20 for all VPN-1 R65 Gateways and above.

  D. Configurable from either the SmartDefense tab or from the Gateway itself.

  Correct Answer: D

• Question 90:

  Where do you enable popup alerts for SmartDefense settings that have detected suspicious activity?

  A. In SmartView Monitor, select Tools > Alerts

  B. In SmartView Tracker, select Tools > Custom Commands

  C. In SmartDashboard, edit the Gateway object, select SmartDefense > Alerts

  D. In SmartDashboard, select Global Properties > Log and Alert > Alert Commands

  Correct Answer: A