156-915.65 Online Practice Questions and Answers

The Web Filtering Policy can be configured to monitor URLs in order to:

A. Log sites that are currently being blocked.

B. Log sites from blocked categories.

C. Alert the Administrator to block a suspicious site.

D. Block sites only once.

Which of the following would NOT be a function of the Check Point license-upgrade tool?

A. Upgrade locally managed licenses.

B. Simulate the license-upgrade process.

C. Manually upgrade a specific license.

D. View the status of the currently installed licenses.

You have three Gateways in a mesh community. Each gateway's VPN Domain is their internal network as defined on the Topology tab setting "All IP Addresses behind Gateway based on Topology information." You want to test the route-based VPN, so you created VTIs among the Gateways and created static route entries for the VTIs. However, when you test the VPN, you find out the VPN still go through the regular domain IPSec tunnels instead of the routed VTI tunnels. What is the problem and how do you make the VPN to use the VTI tunnels?

A. Route-based VTI takes precedence over the Domain VPN. Troubleshootthe static route entries to insure that they are correctly pointing to the VTI gateway IP

B. Domain VPN takes precedence over the route-based VTI. To make the VPN go through VTI, remove the Gateways out of the mesh community and replace with a star community

C. Route-based VTI takes precedence over the Domain VPN. To make the VPN go through VTI, use dynamic-routing protocol like OSPF or BGP to route the VTI address to the peer instead of static routes

D. Domain VPN takes precedence over the route-based VTI. To make the VPN go through VTI, use an empty group object as each Gateway's VPN Domain

Which of the following is a supported Sticky Decision function of Sticky Connections for Load Sharing?

A. Multi-connection support for VPN-1 cluster members

B. Support for Performance Pack acceleration

C. Support for all VPN deployments (except those with third-party VPN peers)

D. Support for SecureClient/SecuRemote/SSL Network Extender encrypted connections

How do you define a service object for a TCP port range?

A. Manage Services, New Other, Provide name and define Protocol: x-y

B. Manage Services, New TCP, Provide name and define Port: x-y

C. Manage Services, New Other, Provide name and define Protocol: 17, Range: x-y

D. Manage Services, New Group, Provide name and Add all service ports for range individually to the group object

A third shift Security Administrator configured and installed a new Security Policy early this morning. When you arrive, he tells you that he has been receiving complaints that Internet access is very slow. You suspect the Security Gateway virtual memory might be the problem. How would you check this using SmartConsole?

A. SmartViewMonitor

B. SmartView Tracker

C. Eventia Analyzer

D. This information can only be viewed with fw ctl pstat command from the CLI.

How do you recover communications between your SmartCenter Server and Security Gateway if you "lock" yourself out via a rule or policy mis-configuration?

A. cpstop

B. fw unload policy

C. fw delete all.all

D. fwunloadlocal

The command fw fetch causes the:

A. SmartCenter Server to retrieve the debug logs of the target Security Gateway

B. Security Gateway to retrieve the user database information from the tables on the SmartCenter Server.

C. SmartCenter Server to retrieve the IP addresses of the target Security Gateway

D. Security Gateway to retrieve the compiled policy and inspect code from the SmartCenter Server and install it to the kernel