CheckPoint Check Point Security Administration NGX II (156-315.1) Sample Questions:

1. Cody is notified by blacklist.org that his site has been reported as a spam relay, due to his SMTP Server being unprotected. Cody decides to implement an SMTP Security Server, to prevent the server from being a spam relay. Which of the following is the most efficient configuration method?

A) Configure the SMTP Security Server to apply a generic "from" address to all outgoing mail.
B) Configure the SMTP Security Server to perform MX resolving.
C) Configure the SMTP Security Server to allow only mail to or from names, within Cody's corporate domain.
D) Configure the SMTP Security Server to work with an OPSEC based product, for content checking.
E) Configure the SMTP Security Server to perform filtering, based on IP address and SMTP protocols.

2. What is the behavior of ClusterXL in a High Availability environment?

A) The active member responds to the virtual IP address,nd is the only member that passes traffic
B) The active member responds to the virtual IP address,nd both members pass traffic when using their physical addresses.
C) The passive member responds to the virtual IP address, and both members route traffic when using their physical addresses.
D) Both members respond to the virtual IP address, and both members pass traffic when using their physical addresses.
E) Both members respond to the virtual IP address, but only the active member is able to pass traffic.

3. In a distributed VPN-1 Pro NGX environment, where is the Internal Certificate Authority (ICA) installed?

A) Certificate Manager Server
B) On the primary SmartCenter Server
C) On the Policy Server
D) On the Security Gateway
E) On the Smart View Monitor

4. Wayne configures an HTTP Security Server to work with the content vectoring protocol to screen forbidden sites. He has created a URI resource object using CVP with the following settings:
Use CVP
Allow CVP server to modify content
Return data after content is approved
He adds two rules to his Rule Base: one to inspect HTTP traffic going to known forbidden sites, the other to allow all other HTTP traffic.
Wayne sees HTTP traffic going to those problematic sites is not prohibited.
What could cause this behavior?

A) The Security Server Rule is after the general HTTP Accept Rule.
B) The Security Server is not configured correctly.
C) The Security Server is communicating with the CVP server, but no restriction is defined in the CVP server.
D) The Security Server is not communicating with the CVP server.

5. You have an internal FTP server, and you allow downloading, but not uploading. Assume Network Address Translation is set up correctly, and you want to add an inbound rule with:
Source: Any
Destination: FTP server
Service: an FTP resource object.
How do you configure the FTP resource object and the action column in the rule to achieve this goal?

A) Enable both "Put" and "Get" methods in the FTP Resource Properties and use them in the rule, with action drop.
B) Disable "Get" and "Put" methods in the FTP Resource Properties and use it in the rule, with action accept.
C) Enable only the "Get" method in the FTP Resource Properties and use it in the rule, with action drop.
D) Enable only the "Get" method in the FTP Resource Properties, and use this method in the rule, with action accept.
E) Enable only the "Put" method in the FTP Resource Properties and use it in the rule, with action accept.

Solutions: