Online Access Free 156-915 Practice Test

Which VPN Community object is used to configure VPN routing within the
SmartDashboard?

• A.Remote Access
• B.Mesh
• C.Star
• D.Map

You are reviewing SmartView Tracker entries, and see a Connection Rejection on a Check Point QoS rule. What causes the Connecion Rejection?

• A.Burst traffic matching the Default Rule is exhausting the Check Point QoS global packet buffers.
• B.The guarantee of one of the rule??s sub-rules exceeds the guarantee in the rule itself.
• C.The Constant Bit Rate for a Low Latency Class has been exceeded by greater than
  10%, and the Maximal Delay is set below requirements.
• D.No QoS rule exists to match the rejected traffic.
• E.The number of guaranteed connections is exceeded. The rule's action properties are not set to accept additional connections.

Which of the following actions is most likely to improve the performance of Check Point QoS?

• A.Put the most frequently used rules at the bottom of the QoS Rule Base.
• B.Install Check Point QoS only on the external interfaces of the QoS Module.
• C.Define weights in the Default Rule in multiples of 10.
• D.Turn "per rule guarantees" into "per connection guarantees".
• E.Turn "per rule limits" into "per connection limits".

Your is a Security Administrator preparing to implement a VPN solution for his multisite organization. To comply with industry regulations, Your's VPN solution must meet the following requirements:
Portability: Standard
Key management: Automatic, external PKI
Session Keys: Changed at configured times during a connection's lifetime Key length: No less than 128-bit Data integrity: Secure against inversion and brute-force attacks What is the most appropriate setting You should choose?

• A.IKE VPNs: SHA1 encryption for IKE Phase 1, and MD5 encryption for Phase 2; AES hash
• B.IKE VPNs: AES encryption for IKE Phase 1, and DES encryption for Phase 2; SHA1 hash
• C.IKE VPNs: CAST encryption for IKE Phase 1, and SHA1 encryption for Phase 2; DES hash
• D.IKE VPNs: AES encryption for IKE Phase 1, and AES encryption for Phase 2; SHA1 hash
• E.IKE VPNs: DES encryption for IKE Phase 1, and 3DES encryption for Phase 2; MD5 hash

Your NGX Enterprise SmartCenter Server is working normally. However, you must reinstall the SmartCenter Server, but keep the SmartCenter Server configuration (for example, all Security Policies, database, etc.) How would you reinstall the Server and keep its configuration?

• A.1.Run the latest upgrade_export utility to export the configuration
  2.Keep the exported file in the same location.
  3.Use SmartUpdate to reinstall the SmartCenter Server.
  4.Run upgrade_import to import the configuration.
• B.1.Run the latest upgrade_export utility to export the configuration
  2.Leave the exported. tgz file in $ FWDIR.
  3.Install the primary SmartCenter Server on top of the configuration
  4.Run upgrade_import to import the configuration.
• C.1. Download the latest upgrade_export utility, and run it from $FWDIR\bin to export the confirguration into a.tgz file.
  2. Transfer the .tgz file to another network machine.
  3. Uninstall all NGX packages and reboot.
  4. Install a new primary SmartCenter Server.
  5. Run upgrade_import to import the configuration
• D.1. Insert the NGX CD-ROM, and select the option to export the configuration into a.tgz file
  2. Transfer the .tgz fiel to another networked maching.
  3. Uninstall all NGX packages, and reboot.
  4. Use the NGX CD-ROM to select the upgrade_import option to import the configuration.