156-315.76 Exam Questions

To force clients to use Integrity Secure Workspace when accessing sensitive applications, the Administrator can configure Connectra:

Which of the following statements about SSL VPN is TRUE?

SSL termination takes place:

Which port is typically used by SSL Network Extender, if the Connectra Portal will also be used on the same IP address?

For an initial installation of Connectra, which of the following statements is TRUE?

Why would an old Connectra Gateway IP be displayed to remote SSL Network Extender users, after changing it to a different IP? You must:

To configure a client to properly log in to the user portal using a certificate, the Administrator MUST:

Can end users be forced to authenticate by using client certificates and username/password credentials?

A user attempts to initialize a network application using SSL Network Extender. The application fails to start. What is the MOST LIKELY solution?

To configure a Security Management Server for an SSL VPN Gateway, you can set up log forwarding from that Gateway. All of the following tasks must be performed to accomplish this,...

Among the authentication schemes SSL VPN employs for users, which scheme does Check Point recommend so all servers are replicated?

You have configured an LDAP account unit and confirmed the Apply & Fetch Branches option works in SSL VPN, but end users still cannot be authenticated. What is the MOST LIKELY caus...

You are a SSL VPN administrator. Your users complain that their Outlook Web Access is running extremely slowly, and their overall browsing experience continues to worsen. You suspe...

When connecting to the SSL VPN portal, you receive a pop-up message indicating that the server hostname does not match the certificate hostname, and the certificate is not signed b...

You are using tracelogger to debug SSL VPN's server side and obtain a textual traffic dump. Which type of traffic will you NOT see in the output?

You are a SSL VPN Administrator. Your users complain that their Outlook Web Access is running extremely slowly, and their overall browsing experience continues to worsen. You suspe...

Network applications accessed using SSL Network Extender have been found to fail after one of their TCP connections has been left idle for more than one hour. You determine that yo...

Even after configuring central logging on Connectra, Connectra logs are not displaying in SmartView Tracker. What could be the cause of this problem?

Which procedure enables the SSL VPN blade on the gateway?

Which internal user authentication protocols are supported in SSL VPN?

Which Remote Desktop protocols are supported natively in SSL VPN?

Your customer asks you about the Performance Pack. You explain to him that a Performance Pack is a software acceleration product which improves the performance of the Security Gate...

Which command can be used to verify SecureXL statistics?

In ClusterXL, which of the following are defined by default as a critical device?

You are trying to configure Directional VPN Rule Match in the Rule Base. But the Match column does not have the option to see the Directional Match. You see the following window. W...

Which of these four Check Point QoS technologies prevents the transmission of redundant packets when multiple copies of a packet are concurrently queued on the same flow?

Using the output below, why is the QoS rule not limiting the internal users to 2000 Bps of GNUtella traffic?

Which technology would describe RDED for Qos?

Please review the following QoS policy: Assume you have 200 Kbps bandwidth available at all times. Which statement would describe this policy?

How do you block some seldom-used FTP commands, such as CWD, and FIND from passing through the Gateway?

Using IPS, how do you notify the Security Administrator that malware is scanning specific ports? By enabling:

What is the meaning of the option Connect to the Internet?

Refer to the network topology below. You have IPS Software Blades active on the Security Gateways sglondon, sgla, and sgny, but still experience attacks on the Web server in the Ne...

Your online bookstore has customers connecting to a variety of Web servers to place or change orders and check order status. You ran penetration tests through the Security Gateway...

The TotallyCoolSecurity Company has a large security staff. Bob configured a new IPS Chicago_Profile for fw-chicago using Detect mode. After reviewing logs, Matt noticed that fw- C...

If Victor wanted to edit new Signature Protections, what tab would he need to access in SmartDashboard?

Using the output below, what does the red flag indicate for the MS08-067 Protection?

In R71, how would you define a rule to block all traffic sent to or from Germany?

In a particular IPS protection in R76 in the Logging Settings, what does the Capture Packets option do?

When deploying a dedicated DLP Gateway behind a perimeter firewall on an interface leading to the internal network (there is only one internal network):

For proper system operation, the Administrator has to configure the DLP Portal and define its DNS name for which of the following conditions?

In R76, My Organization e-mail addresses or domains are used for:

Which of the following is NOT TRUE regarding HTTPS traffic being passed through a DLP gateway?

In Company XYZ, the DLP Administrator defined a new template Data Type that is based on an empty PDF form for an insurance claim. Which of the following statements about this new d...

Which DLP action would describe the following action: The data transmission event is logged in SmartView Tracker. Administrators with permission can view the data that was sent. Th...

All of the following are used by the DLP engine to match a message during a scan, EXCEPT:

Which of the following components contains the Events Data Base?

What is a task of the SmartEvent Server?

What is a task of the SmartEvent Client?

Which of the following functions CANNOT be performed in ClientInfo on computer information collected?