Online Access Free 156-915 Practice Test

Jerry is concerned that a denial-of-service (DoS) attack may affect his VPN Communities.
He decides to implement IKE DoS protection. Jerry needs to minimize the performance impact of implementing this new protection. Which of the following configuraions is MOST appropriate for Jerry?

• A.Set Support IKE DoS protection from identified source to "Stateless", and Support IKE DoS protection from unidentified source to "None".
• B.Set Support IKE DoS protection from identified source to "Stateless," and Support IKE DoS protection from unidentified source to "Puzzles".
• C.Set Support IKE DoS protection from identified source to "Puzzles", and Support IKE DoS protection from unidentified source to "Stateless".
• D.Set Support IKE DoS Protection from identified source, and Support IKE DoS protection from unidentified source to "Puzzles".
• E.Set "Support IKE DoS protection" from identified source, and "Support IKE DoS protection" from unidentified source to "Stateless".

The following configuration is for VPN-1 NGX:

Is this configuration correct for Management High Availability (HA)?

• A.No, the SmartCenter Servers must reside on the same network.
• B.No, the SmartCenter Servers must be installed on the same operating system.
• C.No, the SmartCenter Servers do not have the same number of NICs.
• D.No, a VPN-1 NGX SmartCenter Server cannot run on Red Hat Linux 7.3.
• E.No, A VPN-1 NGX SmartCenter Server can only be in a Management HA configuration, if the operating system is Solaris.

How are cached usermames and passwords cleared from the memory of an NGX Security Gateway?

• A.Usernames and passwords only clear from memory after they time out.
• B.By pushing new user information from the LDAP server.
• C.By retrieving LDAP user information, using the fw fetchldap command.
• D.By using the Clear User Cache button in SmartDashboard.
• E.By installing a Security Policy

Jane needs to back up the routing, interface, and DNS configuration information from her NGX SecurePlatform Pro Security Gateway. Which backup-and-restore solution do you recommend for Jane?

• A.Database Revision Control
• B.SecurePlatform backup utilities
• C.Policy Package management
• D.upgrade_export and upgrade_import commands
• E.Manual copies of the $FWDIR/ conf directory

Select the correct statement about Secure Internal Communications (SIC) Certificates? SIC Certificates:

• A.for the SmartCenter Server are created during the SmartCenter Server installation.
• B.uniquely identify Check Point enable machines; they have the same function as Authentication Certificates.
• C.decrease network security by securing administrative communication among the SmartCenter Servers and the Security Gateway.
• D.for NGX Security Gateways are created during the SmartCenter Server installation.
• E.are used for securing internal network communications between the SmartView Tracker and an OPSEC device.