156-915 Exam Training Practice Tests (CheckPoint Accelerated CCSE NGX (156-915.1))]

Question 1

Which operating system is not supported by VPN-1 SecureClient?

A. IPSO 3.9 B. MacOS X C. Windows XP SP2 D. RedHat Linux 7.0 E. Windows 2000 Professional

Correct Answer: A

Question 2

The following is cphaprob state command output from a New Mode High Availability cluster member:
Which machine has the highest priority?

A. 192.168.1.2, since its number is 2 B. 192.168.1.1, because its number is 1 C. This output does not indicate which machine has the highest priority. D. 192.168.1.2, because its state is active.

Correct Answer: B

Question 3

Jordan's company is streaming training videos provided by a third party on the Internet.
Jordan configures NGX so that each department ONLY views Webcasts specific to its department. Jordan created and configured the multicast groups for all interfaces, and configures them to "Drop all multicast except those whose destination is in the list".
However, no multicast transmissions are coming from the Internet. What is a possible cause for the connection problem?

A. The Multicast Rule is below the Stealth Rule. NGX can only pass multicast traffic, if the Multicast Rule is above the Stealth Rule. B. Anti-spoofing is enabled. NGX cannot pass multicast traffic, if anti-spoofing is enabled. C. NGX does not support multicast routing protocols and streaming media through the Security Gateway. D. Jordan did not create the necessary "to and through" Rules, defining how NGX will handle the multicast traffic. E. Multicast groups are configured improperly on the external interface properties of the Security Gateway object.

Correct Answer: D

Question 4

Which component functions as the Internal Certificate Authority for VPN-1 NGX?

A. SmartLSM B. SmartCenter Server C. Security Gateway D. VPN-1 Certificate Manager E. Policy Server

Correct Answer: C

Question 5

You want to establish a VPN, using Certificates. Your VPN will exchange Certificates with an external partner.
Which of the following activities should you do first?

A. Exchange a shared secret, before importing Certificates. B. Create a new logical-server object, to represent your partner's CA C. Exchange exported CA keys and use them to create a new server object, to represent your partner's Certificate Authority (CA) D. Manually import your partner's Certificate Revocation List E. Manually import your partner's Access Control List.

Correct Answer: C

Question 6

You want VPN traffic to match packets from internal interfaces. You also want the traffic to exit the Security Gateway, bound for all site-to-site VPN Communities, including Remote Access Communities. How should you configure the VPN match rule?

A. interna_clear > All_GwToGw B. Internal_clear > Communities C. internal_clear>All_communities D. Internal_clear > External_Clear E. Communities > Communities

Correct Answer: C

Question 7

Which operating system is not supported by VPN-1 SecureClient?

A. IPSO 3.9 B. MacOS X C. Windows XP SP2 D. RedHat Linux 7.0 E. Windows 2000 Professional

Correct Answer: A

Question 8

Carol is the Security Administrator for a chain of grocery stores. Each grocery store is protected by a Security Gateway. Carol is generating a report for the information- technology audit department. The report must include the name of the Security Policy installed on each remote Security Gateway, the data and time the Security Policy was installed, and general performance statistics (CPU Use, average CPU time, active real memeory, ect.).
Which SmartConsole application should Carol use to gather this information?

A. SmartLSM B. SmartView Monitor C. SmartUpdate D. SmartView Tracker E. SmartView Status

Correct Answer: B

Question 9

Your SmartCenter Server fails and does not reboot. One of your remote Security Gateways managed by the SmartCenter Server reboots. What happens to that remote Gateway after reboot?

A. The remote Gateway fetches the last installed Security Policy locally, and passes traffic normally. The Gateway will log locally, since the SmartCenter Server is not available. B. Since the SmartCenter Server is not available, the remote Gateway cannot fetch the Security Policy. Therefore, all traffic is allowed through the Gateway. C. Since the SmartCenter Server is not available to the remote Gateway, fetching the Security Policy and logging will both fail. D. Since the SmartCenter Server is not available, the remote Gateway uses the local Security Policy, but does not log traffic. E. Since the SmartCenter Server is not available, the remote Gateway cannot fetch the Security Policy. Therefore, no traffic is allowed through the Gateway.

Correct Answer: A

Question 10

Which mechanism is used to export Check Point logs to third party applications?

A. LEA B. OPSE C. CPLogManager D. ELA E. SmartView Tracker

Correct Answer: A

CheckPoint Accelerated CCSE NGX (156-915.1) - 156-915 Exam Practice Test