156-215.65 Free Demo Download

Certinside offers free demo for 156-215.65 329 Q & As with Expert Explanations). You can check out the interface, question quality and usability of our practice exams before you decide to buy it.


Download 156-215.65 Exam Pdf Demo

Download 156-215.65 Exam iEngine Demo

　
　
Exam : Check Point 156-215.65
Title : Check Point Security Administration I NGX

1. Which statement below is TRUE about management plug-ins?
A. The plug-in is a package installed on the Security Gateway.
B. Using a plug-in offers full central management only if special licensing is applied to specific features of the plug-in.
C. A management plug-in interacts with a SmartCenter Server to provide new features and support for new products.
D. Installing a management plug-in is just like an upgrade process. (It overwrites existing components.)
Answer: C

2. Which of the following statements about Bridge mode are TRUE?
A. Assuming a new installation, bridge mode requires changing the existing IP routing of the network.
B. All ClusterXL modes are supported.
C. When managing a Security Gateway in Bridge mode, it is possible to use a bridge interface for Network Address Translation.
D. A bridge must be configured with a pair of interfaces.
Answer: D

3. When troubleshooting the behavior of Check Point Stateful Inspection, it is important to consider "inbound" vs "outbound" packet inspection from the point of view of the __________.
A. Logical Topology
B. Administrator
C. Security Gateway
D. Internet
Answer: C

4. MegaCorp’s security infrastructure separates Security Gateways geographically. You must request a central license for one remote Security Gateway. You must request a central license:
A. Using your SmartCenter Server’s IP address, attach the license to the remote Gateway via SmartUpdate.
B. Using the remote Gateway’s IP address, attach the license to the remote Gateway via SmartUpdate.
C. Using each of the Gateways’ IP addresses, apply the licenses on the SmartCenter Server with the cprlic put command.
D. Using the remote Gateway’s IP address, apply the license locally with the cplic put command.
Answer: A

5. It is required to completely reboot the OS after which of the following changes are made on the Security Gateway?
i.e. cprestart command is not sufficient
1. Adding a hot-swappable NIC to the OS for the first time.
2. Uninstalling the VPN-1 Power/UTM package.
3. Installing the VPN-1 Power/UTM package.
4. Re-establishing SIC to the SmartCenter Server.
5. Doubling the maximum number of connections accepted by the Security Gateway
A. 1, 2, 3 only
B. 3 only
C. 3, 4, and 5 only
D. 1, 2, 3, 4, and 5
Answer: A

6. Which SmartConsole component can Administrators use to track remote administrative activities?
A. The WebUI
B. SmartView Monitor
C. Eventia Reporter
D. SmartView Tracker
Answer: D

7. The customer has a small Check Point installation which includes one Window XP workstation working as SmartConsole , one Solaris server working as SmartCenter, and a third server running SecurePlatform working as Security Gateway. This is an example of:
A. Distributed Installation
B. Hybrid Installation
C. Unsupported configuration
D. Stand-Alone Installation
Answer: A

8. Of the three mechanisms Check Point uses for controlling traffic, which enables firewalls to incorporate layer 4 awareness in packet inspection?
A. Stateful Inspection
B. SmartDefense
C. Application Intelligence
D. Packet filtering
Answer: A

9. The customer has a small Check Point installation which includes one Linux Enterprise 3.0 server working as SmartConsole and a second server running Windows 2003 working as both SmartCenter server and the Security Gateway. This is an example of:
A. Hybrid Installation
B. Stand-Alone Installation
C. Distributed Installation
D. Unsupported configuration
Answer: D

10. In a "Stand-Alone Installation" the functionality of the SmartCenter Server would be installed together with which other Check Point architecture component?
A. SecureClient
B. SmartConsole
C. Security Gateway
D. None, SmartCenter Server would be installed by itself
Answer: C

11. The customer has a small Check Point installation which includes one Window 2003 server working as SmartConsole and a second server running SPLAT working as both SmartCenter server and the Security Gateway. This is an example of:
A. Distributed Installation
B. Unsupported configuration
C. Stand-Alone Installation
D. Hybrid Installation
Answer: C

12. Some control operations and user interactions are difficult or impossible to execute at the kernel level. The _________ component provides a mechanism for such operations.
A. encryption
B. daemon
C. management
D. security
Answer: B

156-315.65 Free Demo Download

Certinside offers free demo for 156-315.65 193 Q & As with Expert Explanations). You can check out the interface, question quality and usability of our practice exams before you decide to buy it.


Download 156-315.65 Exam Pdf Demo

Download 156-315.65 Exam iEngine Demo

　
　
Exam : CheckPoint 156-315.65
Title : Check Point Certified Expert NGX R65

1. What physical machine must have access to the UserCenter public IP when checking for new packages with SmartUpdate?
A. VPN-1 Security Gateway getting the new upgrade package
B. SmartUpdate installed SmartCenter Server PC
C. SmartUpdate Repository SQL database Server
D. SmartUpdate GUI PC
Answer: D

2. Choose all correct statements. SmartUpdate, located on a VPN-1 NGX SmartCenter Server, allows you to:
(1) Remotely perform a first time installation of VPN-1 NGX on a new machine
(2) Determine OS patch levels on remote machines
(3) Update installed Check Point and any OPSEC certified software remotely
(4) Update installed Check Point software remotely
(5) Track installed versions of Check Point and OPSEC products
(6) Centrally manage licenses
A. 4, 5, & 6
B. 2, 4, 5, & 6
C. 1 & 4
D. 1, 3, 4, & 6
Answer: B

3. What port is used for communication to the UserCenter with SmartUpdate?
A. HTTP
B. HTTPS
C. TCP 8080
D. CPMI
Answer: B

4. Concerning these products: SecurePlatform, VPN-1 Pro Gateway, UserAuthority Server, Nokia OS, UTM-1, Eventia Reporter, and Performance Pack, which statement is TRUE?
A. All but the Nokia OS can be upgraded to VPN-1 NGX R65 with SmartUpdate.
B. All but Performance Pack can be upgraded to VPN-1 NGX R65 with SmartUpdate.
C. All can be upgraded to VPN-1 NGX R65 with SmartUpdate.
D. All but the UTM-1 can be upgraded to VPN-1 NGX R65 with SmartUpdate.
Answer: C

5. You are using SmartUpdate to fetch data and perform a remote upgrade of an NGX Security Gateway. Which of the following statements is FALSE?
A. If SmartDashboard is open during package upload and upgrade, the upgrade will fail.
B. A remote installation can be performed without the SVN Foundation package installed on a remote NG with Application Intelligence Security Gateway
C. SmartUpdate can query the SmartCenter Server and VPN-1 Gateway for product information
D. SmartUpdate can query license information running locally on the VPN-1 Gateway
Answer: B

6. What tools CANNOT be launched from SmartUpdate NGX R65?
A. cpinfo
B. SecurePlatform Web UI
C. Nokia Voyager
D. snapshot
Answer: D

7. What action can be run from SmartUpdate NGX R65?
A. remote_uninstall_verifier
B. upgrade_export
C. mds_backup
D. cpinfo
Answer: D

8. Why should the upgrade_export configuration file (.tgz) be deleted after you complete the import process?
A. It will prevent a future successful upgrade_export since the .tgz file cannot be overwritten.
B. It will conflict with any future upgrades run from SmartUpdate.
C. SmartUpdate will start a new installation process if the machine is rebooted.
D. It contains your security configuration, which could be exploited.
Answer: D

9. You plan to migrate an NG with Application Intelligence (AI) R55 SmartCenter Server on Windows to VPN-1 NGX R65. You also plan to upgrade four VPN-1 Pro Gateways at remote offices, and one local VPN-1 Pro Gateway at your company’s headquarters. The SmartCenter Server configuration must be migrated. What is the correct procedure to migrate the configuration?
A. 1. From the VPN-1 NGX R65 CD on the SmartCenter Server, select "Upgrade".
2. Reboot after installation and upgrade all licenses via SmartUpdate.
3. Reinstall all gateways using NGX R65 and install a policy.
B. 1. From the VPN-1 NGX R65 CD in the SmartCenter Server, select "Export".
2. Install VPN-1 NGX R65 on a new PC using the option "Installation using imported configuration"
3. Reboot after installation and upgrade all licenses via SmartUpdate.
4. Upgrade software on all five remote Gateways via SmartUpdate.
C. 1. Copy the $FWDIRconf directory from the SmartCenter Server.
2. Save directory contents to another file server.
3. Uninstall the SmartCenter Server, and install a new SmartCenter Server.
4. Move the saved directory contents to $FWDIRconf replacing the default installation files.
5. Reinstall all gateways using VPN-1 NGX R65 and install a Security Policy.
D. 1. Upgrade the five remote Gateways via SmartUpdate.
2. Upgrade the SmartCenter Server, using the NGX R65 CD.
Answer: B

10. What action CANNOT be run from SmartUpdate NGX R65?
A. Get all Gateway Data
B. Reboot gateway
C. Preinstall verifier…
D. Fetch sync status
Answer: D

11. You are a Security Administrator preparing to deploy a new HFA (Hotfix Accumulator) to ten Security Gateways at five geographically separated locations. What is the BEST method to implement this HFA?
A. Send a Certified Security Engineer to each site to perform the update
B. Use SmartUpdate to install the packages to each of the Security Gateways remotely
C. Use a SSH connection to SCP the HFA to each Security Gateway. Once copied locally, initiate a remote installation command and monitor the installation progress with SmartView Monitor.
D. Send a CDROM with the HFA to each location and have local personnel install it
Answer: B

12. You want to upgrade an NG with Application Intelligence R55 Security Gateway running on SecurePlatform to VPN-1 NGX R65 via SmartUpdate. Which package(s) is(are) needed in the Repository prior to upgrade?
A. SecurePlatform NGX R65 package
B. VPN-1 Power/UTM NGX R65 package
C. SecurePlatform and VPN-1 Power/UTM NGX R65 packages
D. SVN Foundation and VPN-1 Power/UTM packages
Answer: A

156-915.1 Free Demo Download

Certinside offers free demo for 156-915.1 160 Q & As with Expert Explanations). You can check out the interface, question quality and usability of our practice exams before you decide to buy it.


Download 156-915.1 Exam Pdf Demo

Download 156-915.1 Exam iEngine Demo

156-315.1 Free Demo Download

Certinside offers free demo for 156-315.1 142 Q & As with Expert Explanations). You can check out the interface, question quality and usability of our practice exams before you decide to buy it.


Download 156-315.1 Exam Pdf Demo

Download 156-315.1 Exam iEngine Demo

156-215.1 Free Demo Download

Certinside offers free demo for 156-215.1 254 Q & As with Expert Explanations). You can check out the interface, question quality and usability of our practice exams before you decide to buy it.


Download 156-215.1 Exam Pdf Demo

Download 156-215.1 Exam iEngine Demo

156-315 Free Demo Download

Certinside offers free demo for 156-315 142 Q & As with Expert Explanations). You can check out the interface, question quality and usability of our practice exams before you decide to buy it.


Download 156-315 Exam Pdf Demo

Download 156-315 Exam iEngine Demo

　
　
Exam : Check Point 156-315
Title : Check Point Certified Security Expert NGX

1. Greg is creating rules and objects to control VoIP traffic in his organization, through a VPN-1 NGX Security Gateway. Greg creates VoIP Domain SIP objects to represent each of his organization’s three SIP gateways. Greg then creates a simple group to contain the VoIP Domain SIP objects. When Greg attempts to add the VoIP Domain SIP objects to the group, they are not listed. What is the problem?
A. The related end-points domain specifies an address range.
B. VoIP Domain SIP objects cannot be placed in simple groups.
C. The installed VoIP gateways specify host objects.
D. The VoIP gateway object must be added to the group, before the VoIP Domain SIP object is eligible to be added to the group.
E. The VoIP Domain SIP object’s name contains restricted characters.
Answer: B

2. The following rule contains an FTP resource object in the Service field:
Source: local_net
Destination: Any
Service: FTP-resource object
Action: Accept
How do you define the FTP Resource Properties > Match tab to prevent internal users from sending corporate files to external FTP servers, while allowing users to retrieve files?
A. Enable the "Get" method on the match tab.
B. Disable "Get" and "Put" methods on the Match tab.
C. Enable the "Put" and "Get" methods.
D. Enable the "Put" method only on the match tab.
E. Disable the "Put" method globally.
Answer: A

3. To change an existing ClusterXL cluster object from Multicast to Unicast mode, what configuration change must be made?
A. Change the cluster mode to Unicast on the cluster object. Reinstall the Security Policy.
B. Reset Secure Internal Communications (SIC) on the cluster-member objects. Reinstall the Security Policy.
C. Run cpstop and cpstart, to re-enable High Availability on both objects. Select Pivot mode in cpconfig.
D. Change the cluster mode to Unicast on the cluster-member object.
E. Switch the internal network’s default Security Gateway to the pivot machine’s IP address.
Answer: A

4. Which of the following commands shows full synchronization status?
A. cphaprob -i list
B. cphastop
C. fw ctl pstat
D. cphaprob -a if
E. fw hastat
Answer: A

5. You are preparing to configure your VoIP Domain Gatekeeper object. Which two other objects should you have created first?
A. An object to represent the IP phone network, AND an object to represent the host on which the proxy is installed
B. An object to represent the PSTN phone network, AND an object to represent the IP phone network
C. An object to represent the IP phone network, AND an object to represent the host on which the gatekeeper is installed
D. An object to represent the Q.931 service origination host, AND an object to represent the H.245 termination host
E. An object to represent the call manager, AND an object to represent the host on which the transmission router is installed
Answer: C

6. 10.0 is the synchronization network. What is the problem with this configuration?
A. The SmartCenter Pro Server cannot be in the synchronization network.
B. There is no problem with this configuration. It is correct.
C. Members do not have the same number of NICs.
D. The internal network does not have a third cluster member.
E. Cluster members cannot use the VLAN switch. They must use hubs.
Answer: B
8. You want to upgrade a SecurePlatform NG with Application Intelligence (AI) R55 Gateway to SecurePlatform NGX R60 via SmartUpdate. Which package is needed in the repository before upgrading?
A. SVN Foundation and VPN-1 Express/Pro
B. VPN-1 and FireWall-1
C. SecurePlatform NGX R60
D. SVN Foundation
E. VPN-1 Pro/Express NGX R60
Answer: C
9. Which service type does NOT invoke a Security Server?
A. HTTP
B. FTP
C. Telnet
D. CIFS
E. SMTP
Answer: D

7. Which of the following QoS rule-action properties is an Advanced action type, only available in Traditional mode?
A. Guarantee Allocation
B. Rule weight
C. Apply rule only to encrypted traffic
D. Rule limit
E. Rule guarantee
Answer: A

8. You are preparing a lab for a ClusterXL environment, with the following topology:
Vip internal cluster IP = 172.16.10.1; Vip external cluster IP = 192.168.10.3
Cluster Member 1: four NICs, three enabled: qfe0: 192.168.10.1/24, qfe1: 10.10.10.1/24, qfe2: 172.16.10.1/24
Cluster Member 2: five NICs, three enabled; hme0: 192.168.10.2/24, eth1: 10.10.10.2/24, eth2: 172.16.10.2/24
Member Network tab on internal-cluster interface: is 10.10.10.0, 255.255.255.0
SmartCenter Pro Server: 172.16.10.3
External interfaces 192.168.10.1 and 192.168.10.2 connect to a Virtual Local Area Network (VLAN) switch. The upstream router connects to the same VLAN switch. Internal interfaces 10.10.10.1 and 10.10.10.2 connect to a hub. There is no other machine in the 10.10.10.0 network. 172.19.10.0 is the synchronization network. What is the problem with this configuration?
A. The SmartCenter Pro Server cannot be in the synchronization network.
B. There is no problem with this configuration. It is correct.
C. Members do not have the same number of NICs.
D. The internal network does not have a third cluster member.
E. Cluster members cannot use the VLAN switch. They must use hubs.
Answer: B

9. 10.3
Cluster Member 1: four NICs, three enabled: qfe0: 192.168.10.1/24, qfe1: 10.10.10.1/24, qfe2: 172.16.10.1/24
Cluster Member 2: five NICs, three enabled; hme0: 192.168.10.2/24, eth1: 10.10.10.2/24, eth2: 172.16.10.2/24
Member Network tab on internal-cluster interface: is 10.10.10.0, 255.255.255.0
SmartCenter Pro Server: 172.16.10.3
External interfaces 192.168.10.1 and 192.168.10.2 connect to a Virtual Local Area Network (VLAN) switch. The upstream router connects to the same VLAN switch. Internal interfaces 10.10.10.1 and 10.10.10.2 connect to a hub. There is no other machine in the 10.10.10.0 network. 172.19.10.0 is the synchronization network. What is the problem with this configuration?
A. The SmartCenter Pro Server cannot be in the synchronization network.
B. There is no problem with this configuration. It is correct.
C. Members do not have the same number of NICs.
D. The internal network does not have a third cluster member.
E. Cluster members cannot use the VLAN switch. They must use hubs.
Answer: B
8. You want to upgrade a SecurePlatform NG with Application Intelligence (AI) R55 Gateway to SecurePlatform NGX R60 via SmartUpdate. Which package is needed in the repository before upgrading?
A. SVN Foundation and VPN-1 Express/Pro
B. VPN-1 and FireWall-1
C. SecurePlatform NGX R60
D. SVN Foundation
E. VPN-1 Pro/Express NGX R60
Answer: C

10. 1; Vip external cluster IP = 192.168.10.3
Cluster Member 1: four NICs, three enabled: qfe0: 192.168.10.1/24, qfe1: 10.10.10.1/24, qfe2: 172.16.10.1/24
Cluster Member 2: five NICs, three enabled; hme0: 192.168.10.2/24, eth1: 10.10.10.2/24, eth2: 172.16.10.2/24
Member Network tab on internal-cluster interface: is 10.10.10.0, 255.255.255.0
SmartCenter Pro Server: 172.16.10.3
External interfaces 192.168.10.1 and 192.168.10.2 connect to a Virtual Local Area Network (VLAN) switch. The upstream router connects to the same VLAN switch. Internal interfaces 10.10.10.1 and 10.10.10.2 connect to a hub. There is no other machine in the 10.10.10.0 network. 172.19.10.0 is the synchronization network. What is the problem with this configuration?
A. The SmartCenter Pro Server cannot be in the synchronization network.
B. There is no problem with this configuration. It is correct.
C. Members do not have the same number of NICs.
D. The internal network does not have a third cluster member.
E. Cluster members cannot use the VLAN switch. They must use hubs.
Answer: B
8. You want to upgrade a SecurePlatform NG with Application Intelligence (AI) R55 Gateway to SecurePlatform NGX R60 via SmartUpdate. Which package is needed in the repository before upgrading?
A. SVN Foundation and VPN-1 Express/Pro
B. VPN-1 and FireWall-1
C. SecurePlatform NGX R60
D. SVN Foundation
E. VPN-1 Pro/Express NGX R60
Answer: C
9. Which service type does NOT invoke a Security Server?
A. HTTP
B. FTP
C. Telnet
D. CIFS
E. SMTP
Answer: D

11. Robert has configured a Common Internet File System (CIFS) resource to allow access to the public partition of his company’s file server, on \eriscogoldenapplefilespublic. Robert receives reports that users are unable to access the shared partition, unless they use the file server’s IP address. Which of the following is a possible cause?
A. Mapped shares do not allow administrative locks.
B. The CIFS resource is not configured to use Windows name resolution.
C. Access violations are not logged.
D. Remote registry access is blocked.
E. Null CIFS sessions are blocked.
Answer: B

12. Your current VPN-1 NG with Application Intelligence (AI) R55 stand-alone VPN-1 Pro Gateway and SmartCenter Server run on SecurePlatform. You plan to implement VPN-1 NGX in a distributed environment, where the existing machine will be the SmartCenter Server, and a new machine will be the VPN-1 Pro Gateway only. You need to migrate the NG with AI R55 SmartCenter Server configuration, including such items as Internal Certificate Authority files, databases, and Security Policies.
How do you request a new license for this VPN-1 NGX upgrade?
A. Request a VPN-1 NGX SmartCenter Server license, using the new machine’s IP address. Request a new local license for the NGX VPN-1 Pro Gateway.
B. Request a VPN-1 NGX SmartCenter Server license, using the new machine’s IP address. Request a new central license for the NGX VPN-1 Pro Gateway.
C. Request a new VPN-1 NGX SmartCenter Server license, using the NG with AI SmartCenter Server IP address. Request a new central license for the NGX VPN-1 Pro Gateway.
D. Request a VPN-1 NGX SmartCenter Server license, using the NG with AI SmartCenter Server IP address. Request a new central license for the NGX VPN-1 Pro Gateway, licensed for the existing SmartCenter Server IP address.
Answer: D