156-915.1 Exam

Quality and Value for the 156-915.1 Exam

Test4pass Practice Exams for CheckPoint 156-915.1 are written to the highest standards of technical accuracy, using only certified subject matter experts and published authors for development.

100% Guarantee to Pass Your 156-915.1 Exam

If you prepare for the exam using our Test4pass testing engine, we guarantee your success in the first attempt. If you do not pass the CheckPoint 156-915.1 exam (ProCurve Secure WAN) on your first attempt we will give you a FULL REFUND of your purchasing fee AND send you another same value product for free.

CheckPoint 156-915.1 Downloadable, Printable Exams (in PDF format)

Our Exam 156-915.1 Preparation Material provides you everything you will need to take your 156-915.1 Exam. The 156-915.1 Exam details are researched and produced by Professional Certification Experts who are constantly using industry experience to produce precise, and logical. You may get questions from different web sites or books, but logic is the key. Our Product will help you not only pass in the first try, but also save your valuable time.

156-915.1 Downloadable, Interactive Testing engines

We are all well aware that a major problem in the IT industry is that there is a lack of quality study materials. Our Exam Preparation Material provides you everything you will need to take a certification examination. Like actual certification exams, our Practice Tests are in multiple-choice (MCQs) Our CheckPoint 156-915.1 Exam will provide you with free 156-915.1 dumps questions with verified answers that reflect the actual exam. These questions and answers provide you with the experience of taking the actual test. High quality and Value for the 156-915.1 Exam:100% Guarantee to Pass Your CheckPoint exam and get your CheckPoint Certification.

Hot KeyWords On 156-915.1 test

We collect some hot keywords about this exam:
Test4pass , Pass 4 Sure , Test in Side ,Pass Guide ,Test King 156-915.1 exam | 156-915.1 pdf exam | 156-915.1 braindumps | 156-915.1 study guides | 156-915.1 trainning materials | 156-915.1 simulations | 156-915.1 testing engine | 156-915.1 vce | 156-915.1 torrent | 156-915.1 dumps | free download 156-915.1 | 156-915.1 practice exam | 156-915.1 preparation files | 156-915.1 questions | 156-915.1 answers.

How to pass your 156-915.1 exam

You can search on Search Engine and Find Best IT Certification site: Test4pass.com - Find the Method to succeed 156-915.1 test,The safer.easier way to get CheckPoint Certification .

��
��
Exam : Check Point 156-915.1
Title : Accelerated CCSE 1.1 NGX


1. In SmartView Tracker, which rule shows when a packet is dropped due to anti-spoofing?
A. Rule 0
B. Cleanup Rule
C. Rule 1
D. Rule 999
E. Stealth Rule
Answer: A

2. You are preparing to configure your VoIP Domain Gatekeeper object. Which two other objects should you have created first?
A. An object to represent the IP phone network, AND an object to represent the host on which the proxy is installed.
B. An object to represent the PSTN phone network, AND an object to represent the IP phone network
C. An object to represent the IP phone network, AND an object to represent the host on which the gatekeeper is installed.
D. An object to represent the Q.931 service origination host. AND an object to represent the H.245 termination host.
E. An object to represent the call manager. AND an object to represent the host on which the transmission router is installed.
Answer: C

3. Your organization's security infrastructure separates Security Gateways geographically. You must request a central license for one remote Security Gateway. How would you request and apply the license? Request a central license:
A. using the remote Gateway's IP address. Apply the license locally with the cplic put command.
B. for the Gateways' IP address. Apply the license on the SmartCenter Server with the cprlic put command.
C. using the remote Gateway's IP address. Attach the license to the remote Gateway via SmartUpdate.
D. using your SmartCenter Server's IP address. Attach the license to the remote Gateway via SmartUpdate.
E. using the SmartCenter Server's IP address. Apply the license locally on the remote Gateway with the cplic put command.
Answer: D

4. How can you unlock an administrator's account, which was been locked due to SmartCenter Access settings in Global Properties?
A. Type fwm lock_admin -ua from the command line of the SmartCenter Server.
B. Clear the "locked" box of the user's General Properties in SmartDashboard.
C. Type fwm unlock_admin -ua from the command line of the SmartCenter Server
D. Type fwm unlock_admin -ua from the command line of the Security Gateway.
E. Delete the file admin.lock in the $FWDIR/tmp/directory of the SmartCenter Server.
Answer: A

5. Your organization has many VPN-1 Edge gateways at various branch offices, to allow VPN-1 SecureClient users to access company resources. For security reasons, your organization's Security Policy requires all Internet traffic initiated behind the VPN-1 Edge gateways first be inspected by your headquarters' VPN-1 Pro Security Gateway. How do you configure VPN routing in this star VPN Community?
A. To the Internet and other targets only
B. To the center and other satellites, through the center
C. To the center only
D. To the center, or through the center to other satellites, then to the Internet and other VPN targets
Answer: D

6. What is the command to see the licenses of the Security Gateway FWDALLAS from your SmartCenter Server?
A. cprlic print FWDALLAS
B. fw licprint FWDALLAS
C. fw tab -t fwlic FWDALLAS
D. cplic print FWDALLAS
E. fw lic print FWDALLAS
Answer: A

7. In a Management High Availablility (HA) configuration, you can configure synchronization to occur automatically, when:
1. The Security Policy is installed.
2. The Security Policy is saved.
3. The Security Administrator logs in to the secondary SmartCenter Server, and changes its status to active.
4. A scheduled event occurs.
5. The user database is installed.
Select the BEST response for the synchronization sequence. Choose one.
A. 1,2,3
B. 1,2,3,4
C. 1,3,4
D. 1,2,5
E. 1,2,4
Answer: E

8. Your NGX Enterprise SmartCenter Server is working normally. However, you must reinstall the SmartCenter Server, but keep the SmartCenter Server configuration (for example, all Security Policies, database, etc.) How would you reinstall the Server and keep its configuration?
A. 1.Run the latest upgrade_export utility to export the configuration
2.Keep the exported file in the same location.
3.Use SmartUpdate to reinstall the SmartCenter Server.
4.Run upgrade_import to import the configuration.
B. 1.Run the latest upgrade_export utility to export the configuration
2.Leave the exported. tgz file in $ FWDIR.
3.Install the primary SmartCenter Server on top of the configuration
4.Run upgrade_import to import the configuration.
C. 1. Insert the NGX CD-ROM, and select the option to export the configuration into a.tgz file
2. Transfer the .tgz fiel to another networked maching.
3. Uninstall all NGX packages, and reboot.
4. Use the NGX CD-ROM to select the upgrade_import option to import the configuration.
D. 1. Download the latest upgrade_export utility, and run it from $FWDIRbin to export the confirguration into a.tgz file.
2. Transfer the .tgz file to another network machine.
3. Uninstall all NGX packages and reboot.
4. Install a new primary SmartCenter Server.
5. Run upgrade_import to import the configuration
Answer: D

9. When restoring NGX using the upgrade_import command, which of the following items are NOT restored?
A. Security Policies
B. Global properties
C. Licenses
D. User groups
E. Route tables
Answer: E

10. After importing the NGX schema into an LDAP server, what should you enable?
Schema checking
A. Encryption
B. UserAuthority
C. ConnectControl
D. Secure Internal Communications
Answer: A

11. You are reviewing SmartView Tracker entries, and see a Connection Rejection on a Check Point QoS rule. What causes the Connecion Rejection?
A. No QoS rule exists to match the rejected traffic.
B. The number of guaranteed connections is exceeded. The rule's action properties are not set to accept additional connections.
C. The Constant Bit Rate for a Low Latency Class has been exceeded by greater than 10%, and the Maximal Delay is set below requirements.
D. Burst traffic matching the Default Rule is exhausting the Check Point QoS global packet buffers.
E. The guarantee of one of the rule??s sub-rules exceeds the guarantee in the rule itself.
Answer: B

12. Eric wants to see all URLs' full destination paths in the SmartView Tracker logs, not just the fully qualified domain name of the Web servers. For example, the information filed of a log entry displays the URL http: //hp.msn.com/css/home/hpcl1012.css. How can Eric best customize SmartView Tracker to see the logs he wants? Configure the URI resource, and select:
A. "transparent" as the connection method
B. "tunneling" as the connection method
C. "optimize URL logging"; use the URI resource in the rule, with action "accept"
D. "Enforce URL capability"; use the URI resource in the rule, with action "accept"
Answer: C

13. Steve tries to configure Directional VPN Rule Match in the Rule Base. But the Match column does not have the option to see the Directional Match. Steve sees the following screen. What is the problem?
A. Steve must enable directional_match(true) in the objectes_5_0.C file on SmartCenter Server.
B. Steve must enable Advanced Routing on each Security Gateway.
C. Steve must enable VPN Directional Match on the VPN Advanced screen, in Global properties.
D. Steve must enable a dynamic-routing protocol, such as OSPF, on the Gateways.
E. Steve must enable VPN Directional Match on the gateway object??s VPN tab.
Answer: C

14. Your VPN Community includes three Security Gateways. Each Gateway has its own internal network defined as a VPN Domain. You must test the VPN-1 NGX route-based VPN feature, without stopping the VPN. What is the correct order of steps?
A. 1. Add a new interface on each Gateway.
2. Remove the newly added network from the current VPN Domain for each Gateway.
3. Create VTIs on each Gateway, to point to the other two peers
4. Enable advanced routing on all three Gateways.
B. 1. Add a new interface on each Gateway.
2. Remove the newly added network from the current VPN Domain in each gateway object.
3. Create VPN Tunnel Interfaces (VTI) on each gateway object, to point to the other two peers.
4. Add static routes on three Gateways, to route the new network to each peer"s VTI interface.
C. 1. Add a new interface on each Gateway.
2. Add the newly added network into the existing VPN Domain for each Gateway.
3. Create VTIs on each gateway object, to point to the other two peers.
4. Enable advanced routing on all three Gateways.
D. 1. Add a new interface on each Gateway.
2. Add the newly added network into the existing VPN Domain for each gateway object.
3. Create VTIs on each gateway object, to point to the other two peers.
4. Add static routes on three Gateways, to route the new networks to each peer's VTI interface.
Answer: B