156-315.13 by CheckPoint Valid Free Exam Practice Test

Question 1

Your VPN Community includes three Security Gateways. Each Gateway has its own internal network defined as a VPN Domain. You must test the VPN-1 NGX route-based VPN feature, without stopping the VPN. What is the correct order of steps?

A. 1. Add a new interface on each Gateway.
2.Add the newly added network into the existing VPN Domain for each Gateway.
3.Create VTIs on each gateway object, to point to the other two peers.
4.Enable advanced routing on all three Gateways. B. 1. Add a new interface on each Gateway.
2.Remove the newly added network from the current VPN Domain for each Gateway.
3.Create VTIs on each Gateway, to point to the other two peers
4.Enable advanced routing on all three Gateways. C. 1. Add a new interface on each Gateway.
2.Remove the newly added network from the current VPN Domain in each gateway object.
3.Create VPN Tunnel Interfaces (VTI) on each gateway object, to point to the other two peers.
4.Add static routes on three Gateways, to route the new network to each peer's VTI interface. D. 1. Add a new interface on each Gateway.
2.Add the newly added network into the existing VPN Domain for each gateway object.
3.Create VTIs on each gateway object, to point to the other two peers.
4.Add static routes on three Gateways, to route the new networks to each peer's VTI interface.

Correct Answer: C

Question 2

Even after configuring central logging on Connectra, Connectra logs are not displaying in SmartView Tracker. What could be the cause of this problem?

A. You must install the Security Policy, and try again. B. You must reestablish logging from Connectra to the Management Server, using a dummy log-server object. C. R70 does not support a host object with the same IP address as a Management Server used as secondary log server or management station. D. You must install the Management Server database.

Correct Answer: D

Question 3

You have two IP Appliances: one IP565 and one IP395. Both appliances have IPSO 6.2 and R76 installed in a distributed deployment. Can they be members of a Gateway Cluster?

A. No, because the appliances must be of the same model (both should be IP565 or IP395). B. No, because IP does not have a cluster option. C. No, because the Security Gateways must be installed in a stand-alone installation. D. Yes, as long as they have the same IPSO and Check Point versions.

Correct Answer: D

Question 4

What process is responsible for transferring the policy file from SmartCenter to the Gateway?

A. CPRID B. FWD C. CPD D. FWM

Correct Answer: C

Question 5

Regarding QoS guarantees and limits, which of the following statements is FALSE?

A. A rule guarantee must not be less than the sum the guarantees defined in its sub-rules. B. If both a rule limit and a per connection limit are defined for a rule, the per connection limit must not be greater than the rule limit. C. If both a limit and a guarantee per rule are defined in a QoS rule, then the limit must be smaller than the guarantee. D. If a guarantee is defined in a sub-rule, then a guarantee must be defined for the rule above it.

Correct Answer: C

Question 6

What could be a reason why synchronization between primary and secondary Security Management Servers does not occur?

A. You have installed both Security Management Servers on different server systems (e. g. one machine on HP hardware and the other one on DELL). B. You are using different time zones. C. You did not activate synchronization within Global Properties. D. If the set of installed products differ from each other, the Security Management Servers do not synchronize the database to each other.

Correct Answer: D

Question 7

______________ is NOT an SmartEvent event-triggered Automatic Reaction.

A. SNMP Trap B. External Script C. Mail D. Block Access

Correct Answer: D

Question 8

When an Endpoint user is able to authenticate but receives a message from the client that it is unable to enforce the desktop policy, what is the most likely scenario?

A. The user is attempting to connect with the wrong Endpoint client. B. A Desktop Policy is not configured. C. The gateway could not locate the user in SmartDirectory and is allowing the connection with limitations based on a generic profile. D. The user's rights prevent access to the protected network.

Correct Answer: A

Question 9

In which ClusterXL Load Sharing mode, does the pivot machine get chosen automatically by ClusterXL?

A. Unicast Load Sharing B. CCP Load Sharing C. Multicast Load Sharing D. Hot Standby Load Sharing

Correct Answer: A

Question 10

What is the best method for scheduling backup's on multiple firewalls?

A. WebUI B. SmartProvisioning C. Smart Dashboard D. SmartUpdate

Correct Answer: B

Question 11

Which of the following can NOT be modified by editing the cp_httpd_admin.conf file?

A. Administrative Access Level B. Modifying Web server certificate attributes C. The web server port D. Toggling HTTP or HTTPS protocol use

Correct Answer: A

CheckPoint Check Point Certified Security Expert - 156-315.13 Exam Practice Test