156-315.71 Exam Questions

Using the output below, why is the QoS rule not limiting the internal users to 2000 Bps of GNUtella traffic?

Which technology would describe RDED for Qos?

Please review the following QoS policy: Assume you have 200 Kbps bandwidth available at all times. Which statement would describe this policy?

You are the Security Administrator for a university. The university's FTP servers have old hardware and software. Certain FTP commands cause the FTP servers to malfunction. Upgradi...

How do you block some seldom-used FTP commands, such as CWD, and FIND from passing through the Gateway?

Using IPS, how do you notify the Security Administrator that malware is scanning specific ports? By enabling:

What is the meaning of the option Connect to the Internet?

Refer to the network topology below. You have IPS Software Blades active on the Security Gateways sglondon, sgla, and sgny, but still experience attacks on the Web server in the Ne...

Your online bookstore has customers connecting to a variety of Web servers to place or change orders and check order status. You ran penetration tests through the Security Gateway...

Check Point 156-315.71 Exam The TotallyCoolSecurity Company has a large security staff. Bob configured a new IPS Chicago_Profile for fw-chicago using Detect mode. After reviewing l...

If Victor wanted to edit new Signature Protections, what tab would he need to access in SmartDashboard?

Using the output below, what does the red flag indicate for the MS08-067 Protection?

In R71, how would you define a rule to block all traffic sent to or from Germany?

In a particular IPS protection in R71 in the Logging Settings, what does the Capture Packets Check Point 156-315.71 Exam option do?

When deploying a dedicated DLP Gateway behind a perimeter firewall on an interface leading to the internal network (there is only one internal network):

For proper system operation, the Administrator has to configure the DLP Portal and define its DNS name for which of the following conditions?

In R71, My Organization e-mail addresses or domains are used for:

Which of the following is NOT TRUE regarding HTTPS traffic being passed through a DLP gateway?

In Company XYZ, the DLP Administrator defined a new template Data Type that is based on an empty PDF form for an insurance claim. Which of the following statements about this new d...

Which DLP action would describe the following action: The data transmission event is logged in SmartView Tracker. Administrators with permission can view the data that was sent. Th...

All of the following are used by the DLP engine to match a message during a scan, EXCEPT:

Which of the following components contains the Events Data Base?

What is a task of the SmartEvent Server?

What is a task of the SmartEvent Client?

Which of the following functions CANNOT be performed in ClientInfo on computer information collected?

With SmartEvent, what is the Analyzer's function?

How many pre-defined exclusions are included by default in SmartEvent R71 as part of the product installation?

What is the purpose of the pre-defined exclusions included with SmartEvent R71?

You have selected the event Port Scan from Internal Network in SmartEvent, to detect an event when 30 port scans have occurred within 60 seconds. You also want to detect two port s...

What is the benefit to running SmartEvent in Learning Mode?

Check Point 156-315.71 Exam To backup all events stored in the SmartEvent Server, you should back up the contents of which folder(s)?

For best performance in Event Correlation, you should use:

What access level cannot be assigned to an Administrator in SmartEvent?

Which of the following generates a SmartEvent Report from its SQL database?

Which Check Point product is used to create and save changes to a Log Consolidation Policy?

What is the best tool to produce a report which represents historical system information?

If Jack was concerned about the number of log entries he would receive in the SmartReporter system, which policy would he need to modify?

You need to publish SecurePlatform routes using the ospf routing protocol. What is the correct command structure, once entering the route command, to implement ospf successfully?

Control connections between the Security Management Server and the Gateway are not encrypted by the VPN Community. How are these connections secured?

How does a cluster member take over the VIP after a failover event?

You want to verify that your Check Point cluster is working correctly. Which command line tool can you use?

________is a proprietary Check Point protocol. it is the basis for Check Point ClusterXL inter- module communication.

You are MegaCorp Security Administrator. This company uses a firewall cluster, consisting of two cluster members. The cluster generally works well but one day you find that the clu...

John is configuring a new R71 Gateway cluster but he can not configure the cluster as Third Party Check Point 156-315.71 Exam IP Clustering because this option is not available in...

Organizations are sometimes faced with the need to locate cluster members in different geographic locations that are distant from each other. A typical example is replicated data c...

You are establishing a ClusterXL environment, with the following topology: External interfaces 192.168.10.1 and 192.168.10.2 connect to a VLAN switch. The upstream router connects...

Check point Clustering protocol, works on:

Refer to Exhibit: Check Point 156-315.71 Exam Match the ClusterXL Modes with their configurations

What command will allow you to disable sync on a cluster firewall member?

Which of the following statements about the Port Scanning feature of IPS is TRUE?