Accelerated CCSE NGX (156-915.1) (156-915) Free Practice Test

Question 1

Which of the following is the final step in an NGX backup?

A. Run the cpstop command

B. Test restoration in a non-production environment, using the upgrade_import command.

C. Copy the conf directory to another location.

D. Run the upgrade_export command.

E. Move the *.tgz file to another location.

Correct Answer: B

Question 2

When you find a suspicious connection from a problematic host, you want to block everything from that whole network, not just the host. You want to block this for an hour, but you do not want to add any rules to the Rule Base. How do you achieve this?

A. Create a Suspicious Activity rule in SmartView Tracker.

B. Select "block intruder" from the Tools menu in the SmartView Tracker

C. Create a Suspicious Activity Rule in SmartView.

D. Create an "FW SAM" rule in SmartView Monitor.

Correct Answer: C

Question 3

Your company has two headquarters, one in London, one in New York. Each headquarters includes several branch offices. The branch offices only need to communicate with the headquarters in their country, not with each other, and only the headquarters need to communicate directly. What is the BEST configuration for VPN Communities among the branch offices and their headquarters, and between the two headquarters? VPN Communities comprised of:

A. Two star and one mesh Community, each star Community is set up for each site, with headquarters as the center of the Community, and branches as satellites. The mesh Communities are between the New York and London headquarters.

B. two mesh Communities, one for each headquarters and their branch offices; and one star Community, where New York is the center of the Community and London is the satellite.

C. three mesh Communities:one for London headquarters and its branches, one for New York headquarters and its branches, and one for London and New York headquarters.

D. two mesh Communities, one for each headquarters and their branch offices; and one star Community, in which London is the center of the Community and New York is the satellite.

Correct Answer: A

Question 4

If you are experiencing LDAP issues, which of the following should you check?

A. Overlapping VPN Domains

B. NGX connectivity

C. VPN Load Balancing

D. VPN tunneling

E. Secure Internal Communications (SIC)

Correct Answer: B

Question 5

Anna is working in a large hospital, together with three other Security Administrators.
Which SmartConsole tool should she use to check changes to rules or object properties other administrators made?

A. Eventia Monitor

B. SmartView Monitor

C. SmartView Tracker

D. Eventia Tracker

E. SmartDashboard

Correct Answer: C

Question 6

Shauna is troubleshooting a Security Gateway that is dropping all traffic whenever the most recent Security Policy is installed. Working at the Security Gateway. Shauna needs to uninstall the Policy, but keep the processes running so she can see if there is an issue with the Gateway's firewall tables. Which of the following commands will do this?

A. fw unload 10.1.1.5

B. cprestart

C. fw tab -x -u

D. fw dbload 10.1.1.5

E. cpstop

Correct Answer: A

Question 7

Which NGX feature or command allows Security Administrators to revert to earlier versions of the Security Policy without changing object configurations?

A. cpconfig

B. upgrade_export/upgrade_import

C. Database Revision Control

D. Policy Package management

E. fwm dbexport/fwm dbimport

Correct Answer: D

Question 8

From the following output of cphaprob state, which ClusterXL mode is this?

A. New mode

B. Load Balancing Mode

C. Multicast mode

D. Unicast mode

E. Legacy mode

Correct Answer: D

Question 9

Which of these changes to a Security Policy optimizes Security Gateway performance?

A. Using domain objects in rules when posssible.

B. Using groups within groups in the manual NAT Rule Base.

C. Removing old or unused Security Policies from Policy Packages.

D. Putting the least-used rule at the top of the Rule Base.

E. Logging rules as much as possible.

Correct Answer: C

Question 10

How can you reset the password of the Security Administrator, which was created during initial installation of the SmartCenter Server on SecurePlatform?

A. Launch cpconfig and delete the Administrator's account. Recreate the account with the same name.

B. Type cpm -a, and provide the existing administration account name. Reset the Security Administrator's password.

C. Export the user database into an ASCII file with fwm dbexport. Open this file with an editor, and delete the "Password" portion of the file. Then log in to the account without password. You will be prompted to assign a new password.

D. Launch SmartDashboard, click the admin user account, and overwrite the existing Check Point Password.

E. Launch cpconfig and select "Administrators".

Correct Answer: A

Question 11

When you hide a rule in a Rule Base, how can you then disable the rule?

A. When a rule is hidden, it is automatically disabled. You do not need to disable the rule again.

B. Uninstall the Security Policy, and then disable the rule.

C. Run cpstop and cpstart on the SmartCenter Server, then disable the rule.

D. Clear Hide from Rules drop-down menu, then right-click and select "Disable Rule (s)".

E. Open the Rule Menu, and select Hide and view hidden rules. Select the rule, right-click, and select Disable.

Correct Answer: D

Question 12

You create implicit and explicit rules for the following network. The group object "internal- networks" includes networks 10.10.10.0 and 10.10.20.0. Assume "Accept ICMP requests" is enabled as before last in the Global Properties.

Based on these rules, what happens if you Ping from host 10.10.10.5 to a host on the Internet, by IP address? ICMP will be:

A. dropped by rule 0

B. dropped by the last implicit rule.

C. dropped by rule 2, the Cleanup Rule.

D. accepted by rule 1.

E. accepted by the implicit rule

Correct Answer: D

Welcome to TestSimulate

CheckPoint Accelerated CCSE NGX (156-915.1) (156-915) Free Practice Test