156-315.13 by CheckPoint Actual Free Exam Q&As

Question 1

Review the cphaprob state command output from one New Mode High Availability ClusterXL cluster member.

Which member will be active after member 192.168.1.2 fails over and is rebooted?

A. 192.168.1.1 B. 192.168.1.2 C. Both members' state will be active. D. Both members' state will be in collision.

Discussion 0

Correct Answer: A Vote an answer

Question 2

The SmartEvent Correlation Unit:

A. adds events to the events database. B. displaya the received events. C. assigns a severity level to an event. D. looks for patterns according to the installed Event Policy.

Discussion 0

Correct Answer: D Vote an answer

Question 3

Damon enables an SMTP resource for content protection. He notices that mail seems to slow down on occasion, sometimes being delivered late. Which of the following might improve throughput performance?

A. Configuring the SMTP resource to bypass the CVP resource B. Configuring the CVP resource to return the mail to the Gateway C. Configuring the Content Vector Protocol (CVP) resource to forward the mail to the internal SMTP server, without waiting for a response from the Security Gateway D. Increasing the Maximum number of mail messages in the Gateway's spool directory E. Configuring the SMTP resource to only allow mail with Damon's company's domain name in the header

Discussion 0

Correct Answer: C Vote an answer

Question 4

When configuring an LDAP Group object, which option should you select if you want the gateway to reference the groups defined on the LDAP server for authentication purposes?

A. All Account-Unit's Users B. Only Group in Branch C. OU Auth and select Group Name D. Only Sub Tree

Discussion 0

Correct Answer: B Vote an answer

Question 5

Jacob is using a mesh VPN Community to create a sitE. to-site VPN. The VPN properties in this mesh Community display in this graphic: Which of the following statements is TRUE?

A. Jacob must change the datA. integrity settings for this VPN Community. MD5 is incompatible with AES. B. If Jacob changes the setting, "Perform key exchange encryption with" from "3DES" to "DES", he will enhance the VPN Community's security and reduce encryption overhead. C. Jacob's VPN Community will perform IKE Phase 1 key-exchange encryption, using the longest key VPN-1 NGX supports. D. If Jacob changes the setting "Perform IPSec data encryption with" from "AES-128" to "3DES", he will increase the encryption overhead.

Discussion 0

Correct Answer: D Vote an answer

Question 6

Which of the following statements is TRUE concerning MEP VPN's?

A. State synchronization between Security Gateways is NOT required. B. The VPN Client is assigned a Security Gateway to connect to based on a priority list, should the first connection fail. C. MEP VPN's are restricted to the location of the gateways. D. MEP Security Gateways cannot be managed by separate Management Servers.

Discussion 0

Correct Answer: A Vote an answer

Question 7

You enable Sweep Scan Protection and Host port scan in IPS to determine if a large amount of traffic from a specific internal IP address is a network attack, or a user's system is infected with a worm. Will you get all the information you need from these actions?

A. No. These IPS protections will only block the traffic, but it will not provide a detailed analysis of the traffic. B. No. To verify if this is a worm or an active attack, you must also enable TCP attack defenses. C. Yes. IPS will limit the traffic impact from the scans, and identify if the pattern of the traffic matches any known worms. D. No. The logs and alert can provide some level of information, but determining whether the attack is intentional or a worm, requires further research.

Discussion 0

Correct Answer: D Vote an answer

Question 8

How many pre-defined exclusions are included by default in SmartEvent R71 as part of the product installation?

A. 3 B. 5 C. 0 D. 10

Discussion 0

Correct Answer: A Vote an answer

Question 9

When you check Web Server in a host-node object, what happens to the host?

A. IPS Web Intelligence is enabled to check on the host. B. The Web server daemon is enabled on the host. C. More granular controls are added to the host, in addition to Web Intelligence tab settings. D. You can specify allowed ports in the Web server's node-object properties. You then do not need to list all allowed ports in the Rule Base.

Discussion 0

Correct Answer: C Vote an answer

Question 10

Which of the following commands can be used to troubleshoot ClusterXL sync issues?

A. fw tab -s -t connections > file_name B. fw debug cxl connections > file_name C. fw tab -u connections > file_name D. fw ctl -s -t connections > file_name

Discussion 0

Correct Answer: A Vote an answer

Question 11

You are a SSL VPN Administrator. Your users complain that their Outlook Web Access is running extremely slowly, and their overall browsing experience continues to worsen. You suspect it could be a logging problem. Which of the following log files does Check Point recommend you purge?

A. mod_ws_owd.log B. httpd*.log C. alert_owd.log D. event_ws.log

Discussion 0

Correct Answer: B Vote an answer

CheckPoint Check Point Certified Security Expert - 156-315.13 Exam Practice Test