CheckPoint 156-315 Exam Syllabus Topics:
| Section | Objectives |
|---|---|
| Topic 1: Management High Availability | - Primary/Secondary Management Roles - Database Synchronization |
| Topic 2: VPN and Site-to-Site Security | - Remote Access VPN Concepts - Site-to-Site VPN Setup |
| Topic 3: Firewall and Threat Prevention Optimization | - Threat Prevention Tools - Performance Tuning |
| Topic 4: Advanced Policy Configuration | - NAT and Access Rules - Security Policy Best Practices |
| Topic 5: Advanced Gateway Deployment | - Distributed Gateway Configuration - ClusterXL & HA Configuration |
| Topic 6: Advanced Security Monitoring | - SmartEvent Deployment - Logging and Compliance |
CheckPoint Check Point Security Administration NGX II (156-315.1) Sample Questions:
Question #1
Greg is creating rules and objects to control VoIP traffic in his organization, through a VPN-
1 NGX Security Gateway. Greg creates VoIP Domain SIP objects to represent each of his organization's three SIP gateways. Greg then creates a simple group to contain the VoIP Domain SIP objects. When Greg attempts to add the VoIP Domain SIP objects to the group, they are not listed. What is the problem?
A. The installed VoIP gateways specify host objects.
B. The VoIP Domain SIP object's name contains restricted characters.
C. VoIP Domain SIP objects cannot be placed in simple groups.
D. The VoIP gateway object must be added to the group, before the VoIP Domain SIP object is eligible to be added to the group.
E. The related end-points domain specifies an address range.
Question #2
Assume an intruder has compromised your current IKE Phase 1 and Phase 2 keys. Which of the following options will end the intruder's access, after the next Phase 2 exchange occurs?
A. DES Key Reset
B. MD5 Hash Completion
C. Phase 3 Key Revocation
D. Perfect Forward Secrecy
E. SHA1 Hash Completion
Question #3
You want only RAS signals to pass through H.323 Gatekeeper and other H.323 protocols, passing directly between end points. Which routing mode in the VoIP Domain Gatekeeper do you select?
A. Direct
B. Call Setup and Call Control
C. Call Setup
D. Direct and Call Setup
Question #4
The following diagram illustrates how a VPN-1 SecureClient user tries to establish a VPN with hosts in the external_net and internal_net from the Internet. How is the Security Gateway VPN Domain created?
A. Internal Gateway VPN Domain = internal_net;
External VPN Domain = external net + external gateway object + internal_net.
B. Internal Gateway VPN Domain = internal_net;
External Gateway VPN Domain = internal_net + external_net
C. Internal Gateway VPN Domain = internal_net.
External Gateway VPN Domain = internal VPN Domain + internal gateway object + external_net
D. Internal Gateway VPN Domain = internal_net.
External Gateway VPN Domain = external_net + internal gateway object
Question #5
Damon enables an SMTP resource for content protection. He notices that mail seems to slow down on occasion, sometimes being delivered late. Which of the following might improve throughput performance?
A. Increasing the Maximum number of mail messages in the Gateway's spool directory
B. Configuring the SMTP resource to only allow mail with Damon's company's domain name in the header
C. Configuring the Content Vector Protocol (CVP) resource to forward the mail to the internal SMTP server, without waiting for a response from the Security Gateway
D. Configuring the SMTP resource to bypass the CVP resource
E. Configuring the CVP resource to return the mail to the Gateway
Solutions:
| Question #1 Answer: C | Question #2 Answer: D | Question #3 Answer: A | Question #4 Answer: C | Question #5 Answer: C |
985 Customer Reviews
Quality and ValueITCertKing Practice Exams are written to the highest standards of technical accuracy, using only certified subject matter experts and published authors for development - no all study materials.
Tested and ApprovedWe are committed to the process of vendor and third party approvals. We believe professionals and executives alike deserve the confidence of quality coverage these authorizations provide.
Easy to PassIf you prepare for the exams using our ITCertKing testing engine, It is easy to succeed for all certifications in the first attempt. You don't have to deal with all dumps or any free torrent / rapidshare all stuff.
Try Before BuyITCertKing offers free demo of each product. You can check out the interface, question quality and usability of our practice exams before you decide to buy.
