CheckPoint 156-315 Exam Syllabus Topics:
| Section | Objectives |
|---|---|
| Firewall and Threat Prevention Optimization | - Threat Prevention Tools - Performance Tuning |
| Advanced Security Monitoring | - SmartEvent Deployment - Logging and Compliance |
| Advanced Policy Configuration | - Security Policy Best Practices - NAT and Access Rules |
| VPN and Site-to-Site Security | - Site-to-Site VPN Setup - Remote Access VPN Concepts |
| Management High Availability | - Database Synchronization - Primary/Secondary Management Roles |
| Advanced Gateway Deployment | - ClusterXL & HA Configuration - Distributed Gateway Configuration |
CheckPoint Check Point Security Administration NGX II (156-315.1) Sample Questions:
Question #1
Assume an intruder has compromised your current IKE Phase 1 and Phase 2 keys. Which of the following options will end the intruder's access, after the next Phase 2 exchange occurs?
A. DES Key Reset
B. MD5 Hash Completion
C. Phase 3 Key Revocation
D. Perfect Forward Secrecy
E. SHA1 Hash Completion
Question #2
You set up a mesh VPN Community, so your internal networks can access your partner's network, and vice versa. Your Security Policy encrypts only FTP and HTTP traffic through a VPN tunnel. All other traffic among your internal and partner networks is sent in clear text.
How do you configure the VPN Community?
A. Put FTP and HTTP in the Excluded services in the Community object. Then add a rule in the Security Policy to allow Any as the service, with the Community object in the VPN field.
B. Disable "accept all encrypted traffic" in the Community, and add FTP and HTTP services to the Security Policy, with that Community object in the VPN field.
C. Enable "accept all encrypted traffic", but put FTP and HTTP in the Excluded services in the Community. Add a rule in the Security Policy, with services FTP and http, and the Community object in the VPN field.
D. Disable "accept all encrypted traffic", and put FTP and HTTP in the Excluded services in the Community object. Add a rule in the Security Policy for services FTP and http, with the Community object in the VPN field.
Question #3
To change an existing ClusterXL cluster object from Multicast to Unicast mode, what configuration change must be made?
A. Change the cluster mode to Unicast on the cluster object. Reinstall the Security Policy.
B. Run cpstop and cpstart, to re-enable High Availability on both objects. Select Pivot mode in cpconfig.
C. Change the cluster mode to Unicast on the cluster-member object.
D. Switch the internal network's default Security Gateway to the pivot machine's IP address.
E. Reset Secure Internal Communications (SIC) on the cluster-member objects. Reinstall the Security Policy.
Question #4
Which operating system is NOT supported by VPN-1 SecureClient?
A. Windows 2000 Professional
B. Windows XP SP2
C. RedHat Linux 8.0
D. IPSO 3.9
E. MacOS X
Question #5
Which of the following commands shows full synchronization status?
A. fw ctl pstat
B. cphaprob -a if
C. fw hastat
D. cphastop
E. cphaprob -i list
Solutions:
| Question #1 Correct Answer: D | Question #2 Correct Answer: B | Question #3 Correct Answer: A | Question #4 Correct Answer: D | Question #5 Correct Answer: E |
1185 Customer Reviews
Quality and ValueITCertKing Practice Exams are written to the highest standards of technical accuracy, using only certified subject matter experts and published authors for development - no all study materials.
Tested and ApprovedWe are committed to the process of vendor and third party approvals. We believe professionals and executives alike deserve the confidence of quality coverage these authorizations provide.
Easy to PassIf you prepare for the exams using our ITCertKing testing engine, It is easy to succeed for all certifications in the first attempt. You don't have to deal with all dumps or any free torrent / rapidshare all stuff.
Try Before BuyITCertKing offers free demo of each product. You can check out the interface, question quality and usability of our practice exams before you decide to buy.
