156-315.71 Exam Questions

Check Point recommends deploying SSL VPN:

Which type of routing relies on a VPN Tunnel Interface (VTI) to route traffic?

What are the SmartProvisioning Provisioning Profile indicators?

Which of the following components receives events and assigns severity levels to the events; then invokes any defined automatic reactions and adds the events to the Events Data Bas...

How can you verify that SecureXL is running?

Which of the following can NOT be modified by editing the cp_httpd_admin.conf file?

John is upgrading a cluster from NGX R65 to R71. John knows that you can verify the upgrade process using the pre-upgrade verifier tool. When John is running Pre-Upgrade Verificati...

SmartWorkflow has been enabled with the following configuration: If a security administrator opens a new session and after making changes to policy, submits the session for approva...

If traffic requires preferential treatment by other routers on the network, in addition to the QoS module, which Check Point QoS feature should be used?

You are concerned that the processor for your firewall running NGX R71 SecurePlatform may be overloaded. What file would you view to determine the speed of your processor(s)?

In Company XYZ, the DLP Administrator defined a new Keywords Data Type that contains a list of secret project names; i.e., Ayalon, Yarkon, Yarden. The threshold is set to At least...

With SmartEvent, what is the Client's function?

Which Name Resolution protocols are supported in SSL VPN?

Which statement about LDAP and Active Directory (AD) with SSL VPN is TRUE?

To configure the Cluster Control Protocol (CCP) to use Broadcast, the following command is run:

Which Check Point QoS feature marks the ToS byte in the IP header?

Which of the following platforms does NOT support SecureXL? Check Point 156-315.71 Exam

How does ClusterXL Unicast mode handle new traffic?

When do modifications to the Event Policy take effect?

Which of the following explains Role Segregation?

To clean the system of all events, you should delete the files in which folder(s)?

A user cannot authenticate to SSL VPN. You have verified the user is assigned a user group and reproduced the problem, confirming a failed-login session. You do not see an indicati...

Which Protection Mode does not exist in IPS?

Using SmartProvisioning Profiles, which of the following could be configured for both SecurePlatform AND UTM-1 Edge devices? (i) Backup (ii) Routing (iii) Interfaces (iv) Hosts (v)...

Which of the following does NOT happen when using Pivot Mode in ClusterXL?

Which of the following actions is most likely to improve the performance of Check Point QoS?

John is the MultiCorp Security Administrator. If he suggests a change in the firewall configuration, he must submit his proposal to David, a security manager. One day David is out...

Where is the encryption domain for a SmartLSM Security Gateway configured in R71?

What is NOT true about Management Portal?

From the following output of chaprob state, which ClusterXL mode is this? Check Point 156-315.71 Exam

Mark the configuration options that are available for Data Loss Prevention in R71.

When load sharing Multicast mode is defined in a ClusterXL cluster object, how are packets being handled by cluster members?

What is the advantage for deploying SSL VPN in a DMZ, versus a LAN?

Management Portal should be installed on: (i) Management Server (ii) Security Gateway (iii) Dedicated Server Check Point 156-315.71 Exam

To change the default port of the Management Portal,

What is the proper command for importing users into the R71 User Database?

What port is used for Administrator access for your SSL VPN?

You have just upgraded your HA gateway cluster (both members) from NGX R65 to R71. cphaprob stat shows: Check Point 156-315.71 Exam Which of the following is not a possible cause o...

What is the behavior of ClusterXL in a High Availability environment?

Math the SmartDashboard session status icons with the appropriate SmartWorkflow session status:

What is the command to upgrade a SecurePlatform NG with Application Intelligence (Al) R55 SmartCenter Server to VPN-1 NGX using a CD? Check Point 156-315.71 Exam

You have a production implementation of Management High Availability, at version VPN-1 NG with Application Intelligence R55. You must upgrade your two SmartCenter Servers to VPN-1...

Your primary SmartCenter Server is installed on a SecurePlatform Pro machine, which is also a VPN-1 Pro Gateway. You want to implement Management High Availability (HA). You have a...

You are preparing computers for a new ClusterXL deployment. For your cluster, you plan to use four machines with the following configurations: Cluster Member 1: OS: SecurePlatform,...

You set up a mesh VPN Community, so your internal networks can access your partner's network, and vice versa. Your Security Policy encrypts only FTP and HTTP traffic through a VPN...

How does a standby SmartCenter Server receive logs from all Security Gateways, when an active SmartCenter Server fails over?

You want only RAS signals to pass through H.323 Gatekeeper and other H.323 protocols, passing directly between end points. Which routing mode in the VoIP Domain Gatekeeper do you s...

Which component functions as the Internal Certificate Authority for VPN-1 NGX?

You are configuring the VoIP Domain object for a Skinny Client Control Protocol (SCCP) environment protected by VPN-1 NGX. Which VoIP Domain object type can you use?

What type of packet does a VPN-1 SecureClient send to its Policy Server, to report its Secure Configuration Verification status?