156-315.71 Exam Questions

Cody is notified by blacklist.org that his site has been reported as a spam relay, due to his SMTP Server being unprotected. Cody decides to implement an SMTP Security Server, to p...

You want to upgrade a SecurePlatform NG with Application Intelligence (Al) R55 Gateway to SecurePlatform NGX R60 via SmartUpdate. Which package is needed in the repository before u...

Your current stanD. alone VPN-1 NG with Application Intelligence (Al) R55 installation is running on SecurePlatform. You plan to implement VPN-1 NGX in a distributed environment, w...

If you check the box "Use Aggressive Mode", in the IKE Properties dialog box:

DShield is a Check Point feature used to block which of the following threats?

How do you control the maximum mail messages in a spool directory?

Greg is creating rules and objects to control VoIP traffic in his organization, through a VPN-1 NGX Security Gateway. Greg creates VoIP Domain SIP objects to represent each of his...

You plan to install a VPN-1 Pro Gateway for VPN-1 NGX at your company's headquarters. You have a single Sun SPARC Solaris 9 machine for VPN-1 Pro enterprise implementation. You nee...

The following is cphaprob state command output from a New Mode High Availability cluster member. Which machine has the highest priority?

Which service type does NOT invoke a Security Server?

Your current VPN-1 NG with Application Intelligence (Al) R55 stanD. alone VPN-1 Pro Gateway and SmartCenter Server run on SecurePlatform. You plan to implement VPN-1 NGX in a distr...

What is a requirement for setting up Management High Availability?

Which of the following TCP port numbers is used to connect the VPN-1 Gateway to the Content Vector Protocol (CVP) server?

Which operating system is NOT supported by VPN-1 Secure Client?

The following configuration is for VPN-1 NGX:ls this configuration correct for Management High Availability (HA)? Check Point 156-315.71 Exam

Which VPN Community object is used to configure VPN routing within the SmartDashboard?

You are preparing a lab for a ClusterXL environment, with the following topology: Vip internal cluster IP = 172.16.10.1; Vip external cluster IP = 192.168.10.3 Cluster Member 1: fo...

You want to upgrade a cluster with two members to VPN-1 NGX. The SmartCenter Server and both members are version VPN-1/Firewall-1 NG FP3, with the latest Hotfix. What is the correc...

By default, a standby SmartCenter Server is automatically synchronized by an active SmartCenter Check Point 156-315.71 Exam Server, when:

VPN-1 NGX supports VoIP traffic in all of the following environments, except which environment?

You receive an alert indicating a suspicious FTP connection is trying to connect to one of your internal hosts. How do you block the connection in real time and verify the connecti...

Which of the following QoS rulE. action properties is an Advanced action type, only available in Traditional mode?

Which OPSEC server is used to prevent users from accessing certain Web sites?

Regarding QoS guarantees and limits, which of the following statements is FALSE?

Your network includes ClusterXL running Multicast mode on two members, as shown in this topology: Your network is expanding, and you need to add new interfaces: 10.10.10.1/24 on Me...

Check Point 156-315.71 Exam You are configuring the VoIP Domain object for a SIP environment, protected by VPN-1 NGX. Which VoIP Domain object type can you use?

When you add a resource service to a rule, which ONE of the following actions occur?

To change an existing ClusterXL cluster object from Multicast to Unicast mode, what configuration change must be made?

State Synchronization is enabled on both members in a cluster, and the Security Policy is successfully installed. No protocols or services have been unselected for selective sync....

From the following output of cphaprob state, which ClusterXL mode is this?

You configure a Check Point QoS Rule Base with two rules: an H.323 rule with a weight of 10, and the Default Rule with a weight of 10. The H.323 rule includes a per-connection guar...

You plan to migrate a VPN-1 NG with Application Intelligence (Al) R55 SmartCenter Server to VPN-1 NGX. You also plan to upgrade four VPN-1 Pro Gateways at remote offices, and one l...

Which Security Server can perform content-security tasks, but CANNOT perform authentication tasks?

Your network traffic requires preferential treatment by other routers on the network, in addition to the QoS Module, which Check Point QoS feature should you use?

When upgrading to NGX R65, which Check Point products do not require a license upgrade to be current?

Which of these components does NOT require a VPN-1 NGX R65 license?

Which of the following is a TRUE statement concerning contract verification?

Which of the following SSL Network Extender server-side prerequisites are correct? Select all that apply.

After installing VPN-1 Pro NGQ R65, you discover that one port on your Intel Quad NIC on the Security Gateway is not fetched by a get topology request. What is the most likely caus...

Which of the following provides a unique user ID for a digital Certificate?

For object-based VPN routing to succeed, what must be configured?

What proprietary Check Point protocol is the basis of the functionality of Check Point ClusterXL inter-module communication?

Which of the following is part of the PKI? Select all that apply.

Which of the following are valid PKI architectures?

Which of the following are valid reasons for beginning with a fresh installation VPN-1 NGX R65, instead of upgrading a previous version to VPN-1 NGX R65? Select all that apply.

Public keys and digital certificates provide which of the following? Select three.

Which of the following uses the same key to decrypt as it does to encrypt?

Which of the following happen when using Pivot Mode in ClusterXL? Select all that apply.

Central License management allows a Security Administrator to perform which of the following? Select all that apply.

How should Check Point packages be uninstalled?