156-315.76 Exam Questions

Your current stands alone VPN-1 NG with Application Intelligence (Al) R55 installation is running on SecurePlatform. You plan to implement VPN-1 NGX in a distributed environment, w...

If you check the box "Use Aggressive Mode", in the IKE Properties dialog box:

DShield is a Check Point feature used to block which of the following threats?

How do you control the maximum mail messages in a spool directory?

Greg is creating rules and objects to control VoIP traffic in his organization, through a VPN-1 NGX Security Gateway. Greg creates VoIP Domain SIP objects to represent each of his...

You plan to install a VPN-1 Pro Gateway for VPN-1 NGX at your company's headquarters. You have a single Sun SPARC Solaris 9 machine for VPN-1 Pro enterprise implementation. You nee...

Which service type does NOT invoke a Security Server?

Your current VPN-1 NG with Application Intelligence (Al) R55 stand alone VPN-1 Pro Gateway and SmartCenter Server run on SecurePlatform. You plan to implement VPN-1 NGX in a distri...

What is a requirement for setting up Management High Availability?

Which of the following TCP port numbers is used to connect the VPN-1 Gateway to the Content Vector Protocol (CVP) server?

Which operating system is NOT supported by VPN-1 Secure Client?

The following configuration is for VPN-1 NGX:1s this configuration correct for Management High Availability (HA)?

Which VPN Community object is used to configure VPN routing within the SmartDashboard?

You receive an alert indicating a suspicious FTP connection is trying to connect to one of your internal hosts. How do you block the connection in real time and verify the connecti...

Which of the following QoS rule action properties is an Advanced action type, only available in Traditional mode?

Which OPSEC server is used to prevent users from accessing certain Web sites?

Regarding QoS guarantees and limits, which of the following statements is FALSE?

When you add a resource service to a rule, which ONE of the following actions occur?

From the following output of cphaprob state, which ClusterXL mode is this?

Your network traffic requires preferential treatment by other routers on the network, in addition to the QoS Module, which Check Point QoS feature should you use?

When upgrading to NGX R65, which Check Point products do not require a license upgrade to be current?

Which of these components does NOT require a VPN-1 NGX R65 license?

Which of the following is a TRUE statement concerning contract verification?

Your current VPN-1 NG with Application Intelligence (AI) R55 stand-alone VPN-1 Pro Gateway and SmartCenter Server runs on SecurePlatform. You plan to implement VPN-1 NGX R65 in a d...

You are running the license_upgrade tool on your SecurePlatform Gateway. Which of the following can you NOT do with the upgrade tool?

What action can be run from SmartUpdate NGX R65?

What tools CANNOT be launched from SmartUpdate NGX R65?

Choose all correct statements. SmartUpdate, located on a VPN-1 NGX SmartCenter Server, allows you to: (1) Remotely perform a first time installation of VPN-1 NGX on a new machine (...

You are a Security Administrator preparing to deploy a new HFA (Hot fix Accumulator) to ten Security Gateways at five geographically separated locations. What is the BEST method to...

You are using SmartUpdate to fetch data and perform a remote upgrade of an NGX Security Gateway. Which of the following statements is FALSE?

What port is used for communication to the UserCenter with SmartUpdate?

What physical machine must have access to the UserCenter public IP when checking for new packages with SmartUpdate?

What action CANNOT be run from SmartUpdate NGX R65?

You want to upgrade an NG with Application Intelligence R55 Security Gateway running on SecurePlatform to VPN-1 NGX R65 via SmartUpdate. Which package(s) is(are) needed in the Repo...

Why should the upgrade_export configuration file (.tgz) be deleted after you complete the import process?

Concerning these products: SecurePlatform, VPN-1 Pro Gateway, UserAuthority Server, Nokia OS, UTM-1, Eventia Reporter, and Performance Pack, which statement is TRUE?

If a SmartUpdate upgrade or distribution operation fails on SecurePlatform, how is the system recovered?

Identify the correct step performed by SmartUpdate to upgrade a remote Security Gateway.

Identify the correct step performed by SmartUpdate to upgrade a remote Security Gateway.

What happens in relation to the CRL cache after a cpstop;spstart has been initiated?

Public-key cryptography is considered which of the following?

What is the greatest benefit derived from VPNs compared to frame relay, leased lines any other types of dedicated networks?

What is the bit size of DES?

In cryptography, the Rivest, Shamir, Adelman (RSA) scheme has which of the following? Select all that apply.

Which of the following are supported with the office mode? Select all that apply.

Which network port does PPTP use for communication?

VPN access control would fall under which VPN component?

In ClusterXL, which of the following processes are defined by default as critical devices?

If a digital signature is used to achieve both data-integrity checking and verification of sender, digital signatures are only used when implementing:

Which of the following is supported with Office Mode?