156-915.65 Online Practice Questions and Answers

When synchronizing clusters, which of the following statements is NOT true?

A. Client Auth or Session Auth connections through a cluster member will be lost if the cluster member fails.

B. The state of connections using resources is maintaineci by a Security Server, so these connections cannot be synchronizeci.

C. In the case of a failover, accounting information on the failed member may be lost ciespite a properly working synchronization

D. Only cluster members running on the same OS platform can be synchronizeci.

What physical machine must have access to the User Center public IP when checking for new packages with SmartUpdate?

A. SmartUpdate installed SmartCenter Server PC

B. SmartUpdate GUI PC

C. VPN-1 Security Gateway getting the new upgrade package

D. SmartUpdate Repository SQL database Server

When configuring Port Scanning, which level of sensitivity detects more than 100 inactive ports are tried for a period of 30 seconds?

A. LOW

B. High

C. None. Such a level does not exist.

D. Medium

The Check Point ClusterXL mode must synchronize the physical interface IP and MAC addresses on all clustered interfaces

A. New Mode HA

B. Legacy Mode HA

C. Multicast Mode Load Sharing

D. Pivot Mode Load Sharing

Which command would provide the most comprehensive diagnostic information to Check Point Technical Support?

A. cpinfo date.cpinfo.txt

B. cpstat> date.cpstat.txt

C. netstat > date.netstat.txt

D. diag

Which of the following is TRUE concerning numbered VPN Tunnel Interfaces (VTIs)?

A. VTIs are supported on SecurePlatform

B. VTIS cannot share IP addresses

C. VTIs can use an already existing physical-interface IP address

D. VTIS are assigned only local addresses, not remote addresses

Which of the following is TRUE concerning numbered VPN Tunnel Interfaces (VTIs)?

A. VTIS are supported on SecurePlatform

B. VTIS cannot share IP addresses

C. VTIs can use an already existing physical-interface IP address

D. VTIS are assigned only local addresses, not remote addresses

You have two NOKIA Appliances: one IP530 and one IP380. Both appliances have IPSO 3.9 and NGX R65 VPN-1 Power installed in a distributed deployment. Can they be members of a Gateway Cluster?

A. No, because the appliances must be of the same model (both should be IP530 or IP380)

B. NO, because NOKIA does not have a cluster option.

C. Yes, as long as they have the same IPSO and VPN-1 versions.

D. NO, because the Security Gateways must be installed in a stand-alone installation.

What is a Consolidation Policy?

A. A global Policy used to share a common enforcement policy for multiple similar Security Gateways

B. The collective name of the logs generated by Eventia Reporter

C. The collective name of the Security Policy, Address Translation, and SmartDefense Policies

D. The specific Policy written in SmartDashboard to configure which log data is stored in the Eventia Reporter database

Antivirus protection on a VPN-1 Gateway is available for all of the following protocols, EXCEPT

A. POP3

B. TELNET

C. HTTP

D. FTP