156-215.65Checkpoint

heck Point Security Administration I NGX

http://killexams.com/pass4sure/exam-detail/156-215.65

QUESTION: 354 When you change an implicit rule's order from "last" to "first" in Global Properties, how do you make the change take effect? A. Select install database from the Policy menu. B. Run fw fetch from the Security Gateway. C. Select save from the file menu. D. Reinstall the Security Policy. Answer: D QUESTION: 355 As a Security Administrator, you must refresh the Client Authentication authorization time-out every time a new user connection is authorized. How do you do this? Enable the: A. "Refreshable Timeout" setting, in the gateway object's Authentication screen. B. "Refreshable Timeout" setting, in the Limit tab of the Client Authentication Action properties screen. C. "Refreshable timeout", in the Global Properties Authentication screen. D. "Refreshable Timeout", in the user object's Authentication screen. Answer: B QUESTION: 356 Which antivirus scanning method does not work if the Gateway is connected as a node in proxy mode? A. Scan by File Type B. Scan by Direction C. Scan by Server D. Scan by IP Address

Answer: B QUESTION: 357 The third-shift Administrator was updating SmartCenter Access settings in Global Properties. He managed to lock all of the administrators out of their accounts. How should you unlock these accounts? A. Type fwm lock_admin a from the command line of the SmartCenter Server B. Reinstall the SmartCenter Server and restore using upgrade_import. C. Login to SmartDashboard as the special "cpconfig_admin" user account; right-click on each administrator object and select "unlock". D. Delete the file admin.lock in the $FWDIR/tmp/ directory of the SmartCenter Server. Answer: A QUESTION: 358 An unprotected SMTP Server causes your site to be reported as a spam relay. Which of the following is the most efficient configuration method to implement an SMTP Security Server to prevent this? A. Configure the SMTP Security Server to apply a generic "from" address to all outgoing mail. B. Configure the SMTP Security Server to work with an OPSEC based product, for content checking. C. Configure the SMTP Security Server to perform filtering, based on IP address and SMTP protocols. D. Configure the SMTP Security Server to allow only mail to or from names, within your corporate domain. Answer: D

QUESTION: 359 Which specific VPN-1 NGX R65 GUI would you use to add an address translation rule? A. SmartDashboard B. SmartNAT C. SmartConsole D. SmartView Monitor Answer: A QUESTION: 360 Assuming the Cleanup Rule is included in a Rule Base, in which position in the Rule Base should the "Accept ICMP requests" implied rule have no effect? A. After Stealth Rule B. First C. Last D. Before Last Answer: C QUESTION: 361 Which of the following features in SmartDefense, CANNOT be configured per profile? A. Spoofed Reset Protection B. Successive Events C. Report to DShield D. Blocked FTP Commands Answer: B Explanation:

QUESTION: 362 Which of the below is the MOST correct process to reset SIC? A. Click Reset in the Communication window of the Gateway object, and type a new activation key. B. Run cpconfig, and select "Secure Internal Communication > Change One Time Password". C. Click the Communication button for the firewall object, then click Reset. Run cpconfig and type a new activation key. D. Run cpconfig, and click Reset.

Answer: C QUESTION: 363 Another Administrator without access to SmartDashboard installed a new VPN-1 NGX R65 Security Gateway, using SecurePlatform, over the weekend. You want to confirm communication between the Security Gateway and the SmartCenter Server by installing the Security Policy on the Security Gateway. What might prevent you from installing the Policy on the Security Gateway? A. You first need to run the fw unloadlocal command on the SmartCenter Server. B. You have not established Secure Internal Communications (SIC) between the Security Gateway and SmartCenter Server. You must initialize SIC on the SmartCenter Server. C. You first need to run the fw unloadlocal command on the new Security Gateway. D. You have not established Secure Internal Communications (SIC) between the Security Gateway and SmartCenter Server. You must initialize SIC on both the Security Gateway and the SmartCenter Server. Answer: D QUESTION: 364 You are configuring the VoIP Domain object for a SIP environment, protected by VPN-1 NGX R65. Which VoIP Domain object type can you use? A. Call Agent B. Call Manager C. Gateway D. Proxy Answer: D QUESTION: 365

Which of the following deployment scenarios CANNOT be managed by Check Point QoS? A. Two lines connected directly to the Gateway through a hub B. One LAN line and one DMZ line connected to separate Gateway interfaces C. Two lines connected to separate routers, and each router is connected to separate interfaces on the Gateway D. Two lines connected to a single router, and the router is connected directly to the Gateway Answer: D QUESTION: 366 A _______ rule is used to prevent all traffic going to the VPN-1 NGX Security Gateway A. Reject B. Stealth C. Cleanup D. SmartDefense Answer: B

For More exams visit http://killexams.com

Kill your exam at First Attempt....Guaranteed!