Online Access Free 156-315.13 Practice Test

Which of the following services will cause SecureXL templates to be disabled?

• A.TELNET
• B.HTTPS
• C.LDAP
• D.FTP

Which of the following does NOT happen when using Pivot Mode in ClusterXL?

• A.The packet is forwarded through the same physical interface from which it originally came, not on the sync interface.
• B.The Pivot's Load Sharing decision function decides which cluster member should handle the packet.
• C.The Security Gateway analyzes the packet and forwards it to the Pivot.
• D.The Pivot forwards the packet to the appropriate cluster member.

In a particular IPS protection in R76 in the Logging Settings, what does the Capture Packets option do?

• A.Attaches a packet capture of the traffic that matches this particular protection to each log that the protection generates.
• B.Starts a packet capture at the time of policy install to capture all of the traffic until this protection is hit.
• C.This is not a valid selection in R76
• D.Collects all of the logs for packets that have matched this protection within the last 30 days

When connecting to the SSL VPN portal, you receive a pop-up message indicating that the server hostname does not match the certificate hostname, and the certificate is not signed by a known Certificate Authority (CA). How would you solve this problem?

• A.The administration GUI is pointing to the wrong certificate-hostname location.
• B.Ignore the message. It only occurs before the portal synchronizes with the GUI.
• C.Acquire and install an SSL server certificate from a known C
• D.Resolve the certificate-hostname conflict between the Connectra portal and the administration GUI.

Your current stands alone VPN-1 NG with Application Intelligence (Al) R55 installation is running on SecurePlatform. You plan to implement VPN-1 NGX in a distributed environment, where the existing machine will be the VPN-1 Pro Gateway. An additional machine will serve as the SmartCenter Server. The new machine runs on a Windows Server 2003. You need to upgrade the NG with Al R55 SmartCenter Server configuration to VPN-1 NGX.
How do you upgrade to VPN-1 NGX?

• A.Run the backup command in the existing SecurePlatform machine, to create a backup file. Copy the file to the Windows Server 2003. Uninstall all Check Point products on SecurePlatform by running rpm CPsuitE. R55 command. Reboot. Install new VPN-1 NGX on the existing SecurePlatform machine. Run sysconfig, select VPN-1 Pro Gateway, and reboot. Use VPN-1 NGX CD to install primary SmartCenter Server on the Windows Server 2003. Import the backup file.
• B.Insert the NGX CD in the existing NGwithAI R55 SecurePlatform machine, and answer yes to backup the configuration. Copy the backup file to the Windows Server 2003. Continue the upgrade process. Reboot after upgrade is finished. After SecurePlatform NGX reboots, run sysconfig, select VPN-1 Pro Gateway, and finish the sysconfig process. Reboot again. Use the NGX CD to install the primary SmartCenter on the Windows Server 2003. Import the backup file.
• C.Run backup command on the existing SecurePlatform machine to create a backup file. Copy the file to the Windows Server 2003. Uninstall the primary SmartCenter Server package from NG with Al R55 SecurePlatform using sysconfig. Reboot. Install the NGX primary SmartCenterServer and import the backup file. Open the NGX SmartUpdate, and select "upgrade all packages" on the NG with Al R55 Security Gateway.
• D.Copy the $FWDIR\conf and $FWDIR\lib files from the existing SecurePlatform machine. Create a tar.gzfile, and copy it to the Windows Server 2003. Use VPN-1 NGX CD on the existing SecurePlatform machine to do a new installation. Reboot. Run sysconfig and select VPN-1 Pro Gateway. Reboot. Use the NGX CD to install the primary SmartCenter Server on the Windows Server 2003. On the Windows Server 2003, run upgradeimport command to import $FWDIR\conf and $FWDIR\lib from the SecurePlatform machine.