156-915の無料問題集（160題）、156-915認定試験参考書

CheckPoint 156-915 問題集

試験コード：156-915

試験名称： Accelerated CCSE NGX (156-915.1)

最近更新時間：2025-03-01

問題と解答：全160問

156-915 無料でデモをダウンロード：

PDF版 Demo ソフト版 Demo オンライン版 Demo

無料問題集156-915 資格取得

質問 1：
What is the behavior of ClusterXL in a High Availability environment?
A. Both members respond to the virtual IP address, but only the active member is able to pass traffic.
B. The active member responds to the virtual IP address, and both memers pass traffic when using their physical addresses.
C. The active member responds to the virtual IP address, and is the only member that passes traffic
D. The passive member responds to the virtual IP address, and both members route traffic when using their physical addresses.
E. Both members respond to the virtual IP address, and both members pass traffic when using their physical addresses.
正解：C

質問 2：
How can you prevent delay-sensitive applications, such as video and voice traffic, from being dropped due to long queue using Check Point QoS solution?
A. DiffServ rule
B. guaranteed per VoIP rule
C. Low latency class
D. Weighted Fair queuing
E. guaranteed per conection
正解：C

質問 3：
You are running a VPN-1 NG with Application Intelligence R54 SecurePlatform VPN-1 Pro Gateway. The Gateway also serves as a Policy Server. When you run patch add cd from the NGX CD, what does this command allow you to upgrade?
A. Both the operating system (OS) and all Check Point products
B. Only the patch utility is upgraded using this command
C. Only the OS
D. Only VPN-1 Pro Security Gateway
E. All products, except the Policy Server
正解：A

質問 4：
A cluster contains two members, with external interfaces 172.28.108.1 and 172.28.108.2.
The internal interfaces are 10.4.8.1 and 10.4.8.2. The external cluster's IP address is
172.28.108.3, and the internal cluster's IP address is 10.4.8.3. The synchronization interfaces are 192.168.1.1 and 192.168.1.2. The Security Administrator discovers State Sychronization is not working properly.cphaprob -a if command output displays as follows:

What is causing the State Synchronization problem?
A. The synchronization network has a cluster, with IP address 192.168.1.3 defined in the gateway-cluster object. Remove the 192.168.1.3 VIP interface from the cluster topology.
B. Interfaces 192.168.1.1 and 192.168.1.2 have defined 192.168.1.3 as a sub-interface.
C. Another cluster is using 192.168.1.3 as one of the unprotected interfaces.
D. The synchronization interface on the cluster member object's Topology tab is enabled with "Cluster Interface". Disable this interface.
正解：A

質問 5：
You configure a Check Point Qos Rule Base with two rules: an H.323 rule with a weight of
10, and the Default Rule with a weight 10. The H.323 rule includes a per-connection guarantee of 384 Kbps, and a per-connection allowed in the Action properties. If traffic passing through the Qos Module matches both rules,which of the following statements is true?
A. The H.323 rule will consume no more that 2048 Kbps of available bandwidth.
B. 50% of available bandwidth will be allocated to the H.323 rule.
C. 50% of available bandwidth will be allocated to the Default Rule.
D. Neither rule will be allocated more than 10% of available bandwidth.
E. Each H.323 connection will receive at least 512 Kbps of bandwidth.
正解：A

質問 6：
Herman is attempting to configure a site-to-site VPN with one of his firm's business partners. Herman thinks Phase 2 negotiations are failing. Which SmartConsole application should Herman use to confirm his suspicions?
A. SmartUpdate
B. SmartView Monitor
C. SmartView Status
D. SmartView Tracker
E. SmartDashboard
正解：D

質問 7：
You set up a mesh VPN Community, so your internal networks can access your partner's network, and vice versa. Your Security Policy encrypts only FTP and HTTP traffic through a VPN tunnel. All other traffic among your internal and partner networks is sent in clear text.
How do you configure the VPN Community?
A. Enable "accept all encrypted traffic", but put FTP and http in the Excluded services in the Community. Add a rule in the Security Policy, with services FTP and http, and the Community object in the VPN field.
B. Disable "accept all encrypted traffic" in the Community, and add FTP and http services to the Security Policy, with that Community object in the VPN field.
C. Disable "accept all encrypted traffic", and put FTP and http in the Excluded services in the Community object. Add a rule in the Security Policy for services FTP and http, with the Community object in the VPN field.
D. Put FTP and http in the Excluded services in the Community object. Then add a rule in the Security Policy to allow Any as the service, with the Community object in the VPN field.
正解：B

弊社のCheckPoint 156-915を利用すれば試験に合格できます

弊社のCheckPoint 156-915は専門家たちが長年の経験を通して最新のシラバスに従って研究し出した勉強資料です。弊社は156-915問題集の質問と答えが間違いないのを保証いたします。

この問題集は過去のデータから分析して作成されて、カバー率が高くて、受験者としてのあなたを助けて時間とお金を節約して試験に合格する通過率を高めます。我々の問題集は的中率が高くて、100％の合格率を保証します。我々の高質量のCheckPoint 156-915を利用すれば、君は一回で試験に合格できます。

弊社は無料CheckPoint 156-915サンプルを提供します

お客様は問題集を購入する時、問題集の質量を心配するかもしれませんが、我々はこのことを解決するために、お客様に無料156-915サンプルを提供いたします。そうすると、お客様は購入する前にサンプルをダウンロードしてやってみることができます。君はこの156-915問題集は自分に適するかどうか判断して購入を決めることができます。

156-915試験ツール：あなたの訓練に便利をもたらすために、あなたは自分のペースによって複数のパソコンで設置できます。

安全的な支払方式を利用しています

Credit Cardは今まで全世界の一番安全の支払方式です。少数の手続きの費用かかる必要がありますとはいえ、保障があります。お客様の利益を保障するために、弊社の156-915問題集は全部Credit Cardで支払われることができます。

領収書について：社名入りの領収書が必要な場合、メールで社名に記入していただき送信してください。弊社はPDF版の領収書を提供いたします。

一年間の無料更新サービスを提供します

君が弊社のCheckPoint 156-915をご購入になってから、我々の承諾する一年間の更新サービスが無料で得られています。弊社の専門家たちは毎日更新状態を検査していますから、この一年間、更新されたら、弊社は更新されたCheckPoint 156-915をお客様のメールアドレスにお送りいたします。だから、お客様はいつもタイムリーに更新の通知を受けることができます。我々は購入した一年間でお客様がずっと最新版のCheckPoint 156-915を持っていることを保証します。

TopExamは君に156-915の問題集を提供して、あなたの試験への復習にヘルプを提供して、君に難しい専門知識を楽に勉強させます。TopExamは君の試験への合格を期待しています。

弊社は失敗したら全額で返金することを承諾します

我々は弊社の156-915問題集に自信を持っていますから、試験に失敗したら返金する承諾をします。我々のCheckPoint 156-915を利用して君は試験に合格できると信じています。もし試験に失敗したら、我々は君の支払ったお金を君に全額で返して、君の試験の失敗する経済損失を減少します。

CheckPoint Accelerated CCSE NGX (156-915.1) 認定 156-915 試験問題:

1. Which NGX component displays the number of packets accepted, rejected, and dropped on a specific Security Gateway, in real time?

A) SmartUpdate
B) SmartView Status
C) SmarView Monitor
D) Eventia Reporter
E) Reporting Module

2. Which operating system is not supported by VPN-1 SecureClient?

A) Windows 2000 Professional
B) RedHat Linux 7.0
C) Windows XP SP2
D) MacOS X
E) IPSO 3.9

3. You network includes ClusterXL running Multicast mode on two members, as shown in this topology:

Your network is expanding, and you need to add new interfaces: 10.10.10.1/24 on Member A, and 10.10.10.2/24 on Member B.
The virtual IP address for interface 10.10.10.0/24 is 10.10.10.3. What is the correct procedure to add these interfaces?

A) 1.Disable "Cluster membership" from one Gateway via cpconfig.
2.Configure the new interface via sysconfig from the "non-member" Gateway.
3.Reenable "Cluster membership" on the Gateway.
4.Perform the same step on the other Gateway.
5.Update the topology in the cluster object for the cluster and members.
6.Install the Security Policy.
B) 1.Run cpstop on one member, and configure the new interface via sysconfig.
2.Run cpstart on the member. Repeat the same steps on another member.
3.Update the topology in the cluster object for the cluster and both members.
4.Instal the Security Policy.
C) 1.Use sysconfig to configure the new interfaces on both members.
2.Update the topology in the cluster object for the cluster and both members.
3.Install the Security Policy.
D) 1.Use the ifconfig command to configure and enable the new interface.
2.Run cpstop and cpstart on both members at the same time.
3.Update the topology in the cluster object for the cluster and both members.
4.Install the Security Policy.

4. After you add new interfaces to this cluster, how can you check if the new interfaces and associated virtual IP address are recognized by ClusterXL?

A) By running the cphaprob -a if command on both members.
B) By running the cpconfig command on both members
C) By running the cphaprob -r list command on both members
D) By running the cphaprob state command on both members.
E) By running the fw ctl iflist command on both members

5. You create implicit and explicit rules for the following network. The group object "internal- networks" includes networks 10.10.10.0 and 10.10.20.0. Assume "Accept ICMP requests" is enabled as before last in the Global Properties.

Based on these rules, what happens if you Ping from host 10.10.10.5 to a host on the Internet, by IP address? ICMP will be:

A) dropped by rule 0
B) dropped by rule 2, the Cleanup Rule.
C) dropped by the last implicit rule.
D) accepted by the implicit rule
E) accepted by rule 1.

質問と回答：

質問 # 1
正解： E

質問 # 2
正解： E

質問 # 3
正解： B

質問 # 4
正解： A

質問 # 5
正解： E