Check Point Certified Security Expert (156-315.13) Free Practice Test

Question 1

Which of the following statements is FALSE regarding OSPF configuration on SecurePlatform Pro?

A. router ospf 1 creates an OSPF routing instance and this process ID should be the same on all Gateways.

B. router ospf 1 creates an OSPF routing instance and this process ID should be different for each Security Gateway.

C. router ospf 1 creates the Router ID for the Security Gateway and should be the same ID for all Gateways.

D. router ospf 1 creates the Router ID for the Security Gateway and should be different for all Gateways.

Correct Answer: A

Question 2

Which of the following commands shows full synchronization status?

A. fw ctl iflist

B. cphaprob -i list

C. cphaprob -a if

D. fw hastat

Correct Answer: B

Question 3

You want VPN traffic to match packets from internal interfaces. You also want the traffic to exit the Security Gateway bound for all site-to-site VPN Communities, including Remote Access Communities. How should you configure the VPN match rule?

A. Communities > Communities

B. internal_clear > All_GwToGw

C. Internal_clear > External_Clear

D. internal_clear > All_communities

Correct Answer: D

Question 4

What is the command to enter the router shell?

A. gated

B. router

C. routerd

D. clirouter

Correct Answer: B

Question 5

Which Check Point QoS feature allows a Security Administrator to define special classes of service for delay-sensitive applications?

A. Guarantees

B. Low Latency Queuing

C. Differentiated Services

D. Weighted Fair Queuing

Correct Answer: B

Question 6

Your primary SmartCenter Server is installed on a SecurePlatform Pro machine, which is also a VPN-1 Pro Gateway. You want to implement Management High Availability (HA). You have a spare machine to configure as the secondary SmartCenter Server. How do you configure the new machine to be the standby SmartCenter Server, without making any changes to the existing primary SmartCenter Server? (Changes can include uninstalling and reinstalling.)

A. You cannot configure Management HA, when either the primary or secondary SmartCenter Server is running on a VPN-1 Pro Gateway.

B. The secondary Server cannot be installed on a SecurePlatform Pro machine alone.

C. Install the secondary Server on the spare machine. Add the new machine to the same network as the primary Server.

D. The new machine cannot be installed as the Internal Certificate Authority on its own.

Correct Answer: A

Question 7

In SmartDirectory, what is each LDAP server called?

A. LDAP Server

B. Account Server

C. LDAP Unit

D. Account Unit

Correct Answer: D

Question 8

You are running the license_upgrade tool on your SecurePlatform Gateway. Which of the following can you NOT do with the upgrade tool?

A. Simulate the license-upgrade process.

B. View the licenses in the SmartUpdate License Repository.

C. View the status of currently installed licenses.

D. Perform the actual license-upgrade process.

Correct Answer: B

Question 9

Remote clients are using SSL VPN to authenticate via LDAP server to connect to the organization. Which gateway process is responsible for the authentication?

A. vpnd

B. fwd

C. fwm

D. cpvpnd

Correct Answer: D

Question 10

What is the benefit to running SmartEvent in Learning Mode?

A. To run SmartEvent with preloaded sample data in a test environment

B. To run SmartEvent, with a step-by-step online configuration guide for training/setup purposes

C. To generate a report with system Event Policy modification suggestions

D. There is no SmartEvent Learning Mode

Correct Answer: C

Question 11

Greg is creating rules and objects to control VoIP traffic in his organization, through a VPN-1 NGX Security Gateway. Greg creates VoIP Domain SIP objects to represent each of his organization's three SIP gateways. Greg then creates a simple group to contain the VoIP Domain SIP objects. When Greg attempts to add the VoIP Domain SIP objects to the group, they are not listed. What is the problem?

A. The installed VoIP gateways specify host objects.

B. The VoIP gateway object must be added to the group, before the VoIP Domain SIP object is eligible to be added to the group.

C. The related end points domain specifies an address range.

D. The VoIP Domain SIP object's name contains restricted characters.

E. VoIP Domain SIP objects cannot be placed in simple groups.

Correct Answer: E

Question 12

How do you enable SecureXL (command line) on GAiA?

A. fwsecurexl on

B. fw accel on

C. fw securexl on

D. fwaccel on

Correct Answer: D

Question 13

Security server configuration settings are stored in _______________ .

A. $FWDIR/conf/fwopsec.conf

B. $FWDIR/conf/AMT.conf

C. $FWDIR/conf/fwauthd.conf

D. $FWDIR/conf/fwrl.conf

Correct Answer: C

Welcome to TestSimulate

CheckPoint Check Point Certified Security Expert (156-315.13) Free Practice Test