156-315.76 Exam Questions

When synchronizing clusters, which of the following statements are true? Select all that apply.

VPN traffic control would fall under which VPN component?

Which of the following is an example of the hash function?

When configuring site-to-site VPN High Availability (HA) with MEP, which of the following is correct?

Consider the following actions that VPN-1 NGX can take when it control packets. The Policy Package has been configured for Traditional Mode VPN. Identify the options that includes...

Which of the following does IPSec use during IPSec key negotiation?

Which of the following SSL Network Extender server-side prerequisites are correct? Select all that apply.

After installing VPN-1 Pro NGQ R65, you discover that one port on your Intel Quad NIC on the Security Gateway is not fetched by a get topology request. What is the most likely caus...

Which of the following provides a unique user ID for a digital Certificate?

For object-based VPN routing to succeed, what must be configured?

What proprietary Check Point protocol is the basis of the functionality of Check Point ClusterXL inter- module communication?

Which of the following is part of the PKI? Select all that apply.

Which of the following are valid PKI architectures?

Which of the following are valid reasons for beginning with a fresh installation VPN-1 NGX R65, instead of upgrading a previous version to VPN-1 NGX R65? Select all that apply.

Public keys and digital certificates provide which of the following? Select three.

Which of the following uses the same key to decrypt as it does to encrypt?

Central License management allows a Security Administrator to perform which of the following? Select all that apply.

How should Check Point packages be uninstalled?

Which encryption scheme provides in-place encryption?

What is the command to upgrade an NG with Application Intelligence R55 SmartCenter running on SecurePlatform to VPN-1 NGX R65?

What can be said about RSA algorithms? Select all that apply.

What is the most typical type of configuration for VPNs with several externally managed Gateways?

Match the ClusterXL Modes with their configurations.

Match the Terms with their definitions:

Multi-Corp has two sites using certificates-based VPN issued by the Internal Certificate Authority (ICA). The two sites, Tokyo and Paris, are configured using a Simplified VPN poli...

In a Management High Availability (HA) configuration, you can configure synchronization to occur automatically, when: 1. The Security Policy is installed. 2. The Security Policy is...

Match the remote-access VPN Connection mode features with their descriptions:

What is the maximum number of cores supported by CoreXL?

Which Check Point QoS feature allows a Security Administrator to define special classes of service for delay-sensitive applications?

Which statement is TRUE for route-based VPNs?

Which operating system(s) support(s) unnumbered VPN Tunnel Interfaces (VTIs) for route-based VPNs?

Which of the following items can be provisioned via a Profile through SmartProvisioning?

What does it mean when a Security Gateway is labeled Untrusted in the SmartProvisioning Status view?

Using the Backup Target functionality in SmartProvisioning, what targets are available?

The We-Make-Widgets company has purchased twenty UTM-1 Edge appliances for their remote offices. Kim decides the best way to manage those appliances is to use SmartProvisioning and...

SmartProvisioning can provision the Operating System and network settings on which of the following?

Which of the following load-balancing methods is not valid?

The relay mail server configured under Email Notifications is used by the DLP Gateway to: (Choose the BEST answer.)

For a dedicated DLP Gateway that runs in inline bridge mode, why is it important to properly define the topology?

Which protocol is not supported for DLP?

What happens when an Administrator activates the DLP Portal for Self Incident Handling and enters its fully qualified domain name (DNS name)?

You just upgraded to R71 and are using the IPS Software Blade. You want to enable all critical protections while keeping the rate of false positive very low. How can you achieve th...

You enable Sweep Scan Protection and Host port scan in IPS to determine if a large amount of traffic from a specific internal IP address is a network attack, or a user's system is...

You need to verify the effectiveness of your IPS configuration for your Web server farm. You have a colleague run penetration tests to confirm that the Web servers are secure again...

You need to determine if your company's Web servers are accessed an excessive number of times from the same host. How would you configure this in the IPS tab?

You are responsible for the IPS configuration of your Check Point firewall. Inside the Denial of service section you need to set the protection parameters against the Teardrop atta...

Which application is used to create a File-Share Application?

Which procedure will create an Internal User?

With is the SmartEvent Correlation Unit's function?

Which version is the minimum requirement for SmartProvisioning?