質問 1:Your SmartCenter Server fails and does not reboot. One of your remote Security Gateways managed by the SmartCenter Server reboots. What happens to that remote Gateway after reboot?
A. Since the SmartCenter Server is not available to the remote Gateway, fetching the Security Policy and logging will both fail.
B. Since the SmartCenter Server is not available, the remote Gateway cannot fetch the Security Policy. Therefore, no traffic is allowed through the Gateway.
C. Since the SmartCenter Server is not available, the remote Gateway cannot fetch the Security Policy. Therefore, all traffic is allowed through the Gateway.
D. Since the SmartCenter Server is not available, the remote Gateway uses the local Security Policy, but does not log traffic.
E. The remote Gateway fetches the last installed Security Policy locally, and passes traffic normally. The Gateway will log locally, since the SmartCenter Server is not available.
正解:E
質問 2:IIse manages a distributed NGX installation for a large bank. IIse needs to know which Security Gateways have licenses that will expire within the next 30 days. Which SmartConsole application should IIse use to gather this information?
A. SmartUpdate
B. SmartView Monitor
C. SmartView Status
D. SmartView Tracker
E. SmartDashboard
正解:A
質問 3:You network includes ClusterXL running Multicast mode on two members, as shown in this topology:

Your network is expanding, and you need to add new interfaces: 10.10.10.1/24 on Member A, and 10.10.10.2/24 on Member B.
The virtual IP address for interface 10.10.10.0/24 is 10.10.10.3. What is the correct procedure to add these interfaces?
A. 1.Disable "Cluster membership" from one Gateway via cpconfig.
2.Configure the new interface via sysconfig from the "non-member" Gateway.
3.Reenable "Cluster membership" on the Gateway.
4.Perform the same step on the other Gateway.
5.Update the topology in the cluster object for the cluster and members.
6.Install the Security Policy.
B. 1.Run cpstop on one member, and configure the new interface via sysconfig.
2.Run cpstart on the member. Repeat the same steps on another member.
3.Update the topology in the cluster object for the cluster and both members.
4.Instal the Security Policy.
C. 1.Use sysconfig to configure the new interfaces on both members.
2.Update the topology in the cluster object for the cluster and both members.
3.Install the Security Policy.
D. 1.Use the ifconfig command to configure and enable the new interface.
2.Run cpstop and cpstart on both members at the same time.
3.Update the topology in the cluster object for the cluster and both members.
4.Install the Security Policy.
正解:B
質問 4:How can you reset Secure Internal Communications (SIC) between a SmartCenter Server and Security Gateway?
A. Use SmartUpdate to retype the activation key of the Security Gateway.
B. From cpconfig on the SmartCenter Server, choose the Secure Internal Communication option and retype the activation key.Next, retype the same key in the gateway object in SmartDashboard and reinitialize Secure Internal Communications (SIC).
C. Run the command fwm sic_reset to reinitialize the Internal Certificate Authority (ICA) of the SmartCenter Server. Then retype the activation key on the Security Gateway from SmartDashboard.
D. From the SmartCenter Server's command line type fw putkey -p <shared key> <IP Address of SmartCenter Server>.
E. From the SmartCenter Server's command line type fw putkey -p <shared key> <IP Address of Security Gateway>.
正解:B
質問 5:Choose the BEST sequence for configuring user management on SmartDashboard, for use with and LDAP server.
A. Enable LDAP in Global Properties, configure a host-node object for the LDAP Server, and configure a server object for the LDAP Account Unit.
B. Configure a workstation object for the LDAP server, configure a server object for the LDAP Account Unit, and enable LDAP in Global Properties.
C. Configure a server object for the LDAP Account Unit, enable LDAP in Global Properties, and create an LDAP server using an OPSEC application.
D. Configure a server object for the LDAP Account Unit, and create an LDAP resource object.
E. Configure a server object for the LDAP Account Unit, enable LDAP in Global Properties, and create an LDAP resource object.
正解:A
質問 6:Which mechanism is used to export Check Point logs to third party applications?
A. ELA
B. CPLogManager
C. SmartView Tracker
D. OPSE
E. LEA
正解:E
質問 7:Your company has two headquarters, one in London, one in New York. Each headquarters includes several branch offices. The branch offices only need to communicate with the headquarters in their country, not with each other, and only the headquarters need to communicate directly. What is the BEST configuration for VPN Communities among the branch offices and their headquarters, and between the two headquarters? VPN Communities comprised of:
A. two mesh Communities, one for each headquarters and their branch offices; and one star Community, where New York is the center of the Community and London is the satellite.
B. Two star and one mesh Community, each star Community is set up for each site, with headquarters as the center of the Community, and branches as satellites. The mesh Communities are between the New York and London headquarters.
C. two mesh Communities, one for each headquarters and their branch offices; and one star Community, in which London is the center of the Community and New York is the satellite.
D. three mesh Communities:one for London headquarters and its branches, one for New York headquarters and its branches, and one for London and New York headquarters.
正解:B
弊社のCheckPoint 156-915を利用すれば試験に合格できます
弊社のCheckPoint 156-915は専門家たちが長年の経験を通して最新のシラバスに従って研究し出した勉強資料です。弊社は156-915問題集の質問と答えが間違いないのを保証いたします。

この問題集は過去のデータから分析して作成されて、カバー率が高くて、受験者としてのあなたを助けて時間とお金を節約して試験に合格する通過率を高めます。我々の問題集は的中率が高くて、100%の合格率を保証します。我々の高質量のCheckPoint 156-915を利用すれば、君は一回で試験に合格できます。
弊社は無料CheckPoint 156-915サンプルを提供します
お客様は問題集を購入する時、問題集の質量を心配するかもしれませんが、我々はこのことを解決するために、お客様に無料156-915サンプルを提供いたします。そうすると、お客様は購入する前にサンプルをダウンロードしてやってみることができます。君はこの156-915問題集は自分に適するかどうか判断して購入を決めることができます。
156-915試験ツール:あなたの訓練に便利をもたらすために、あなたは自分のペースによって複数のパソコンで設置できます。
安全的な支払方式を利用しています
Credit Cardは今まで全世界の一番安全の支払方式です。少数の手続きの費用かかる必要がありますとはいえ、保障があります。お客様の利益を保障するために、弊社の156-915問題集は全部Credit Cardで支払われることができます。
領収書について:社名入りの領収書が必要な場合、メールで社名に記入していただき送信してください。弊社はPDF版の領収書を提供いたします。
一年間の無料更新サービスを提供します
君が弊社のCheckPoint 156-915をご購入になってから、我々の承諾する一年間の更新サービスが無料で得られています。弊社の専門家たちは毎日更新状態を検査していますから、この一年間、更新されたら、弊社は更新されたCheckPoint 156-915をお客様のメールアドレスにお送りいたします。だから、お客様はいつもタイムリーに更新の通知を受けることができます。我々は購入した一年間でお客様がずっと最新版のCheckPoint 156-915を持っていることを保証します。
TopExamは君に156-915の問題集を提供して、あなたの試験への復習にヘルプを提供して、君に難しい専門知識を楽に勉強させます。TopExamは君の試験への合格を期待しています。
弊社は失敗したら全額で返金することを承諾します
我々は弊社の156-915問題集に自信を持っていますから、試験に失敗したら返金する承諾をします。我々のCheckPoint 156-915を利用して君は試験に合格できると信じています。もし試験に失敗したら、我々は君の支払ったお金を君に全額で返して、君の試験の失敗する経済損失を減少します。
CheckPoint Accelerated CCSE NGX (156-915.1) 認定 156-915 試験問題:
1. Mary is recently hired as the Security Administrator for a public relations company. Mary's manager has asked her to investigate ways to improve the performance of the firm's perimeter Security Gateway. Mary must propose a plan based on the following required and desired results:
Required Result#1: Do not purchase new hardware.
Required Result#2: Use configuration changes that do not reduce security.
Desired Result#1: Reduce the number of explicit rules in the Rule Base.
Desired Result#2: Reduce the volume of logs.
Desired Result#3: Improve the Gateway's performance.
Proposed Solution:
Mary recommends the following changes to the Gateway's configuration:
Replace all domain objects with network and group objects.
Check "Log implied rules" and "Accept ICMP requests" in Global Properties.
Use Global Properties, instead of explicit rules, to control ICMP, VRRR, and RIP.
Does Mary's proposed solution meet the required and desired results?
A) The solution meets all required results, and two of the desired results.
B) The solution meets all required results, and one of the desired results.
C) The solution meets all required and desired results.
D) The solution meets all required results, and none of the desired results.
E) The solution does not meet the required results.
2. Regarding QoS guarantees and limits, which of the following statements is FALSE?
A) If both a rule and per-connection limit are defined for a rule, the per-connection limit must not be greater than the rule limit.
B) If both a limit and guarantee per rule are defined in a QoS rule, the limit must be smaller than the guarantee.
C) If a guarantee is defined in a sub-rule, a guarantee must be defined for the rule above it.
D) The guarantee of a sub-rule cannot be greater than the guarantee defined for the rule above it.
E) A rule guarantee must not be less than the sum defined in the guarantees' sub-rules.
3. Your organization has many VPN-1 Edge gateways at various branch offices, to allow VPN-1 SecureClient users to access company resources. For security reasons, your organization's Security Policy requires all Internet traffic initiated behind the VPN-1 Edge gateways first be inspected by your headquarters' VPN-1 Pro Security Gateway. How do you configure VPN routing in this star VPN Community?
A) To the Internet and other targets only
B) To the center only
C) To the center and other satellites, through the center
D) To the center, or through the center to other satellites, then to the Internet and other VPN targets
4. In SmartView Tracker, which rule shows when a packet is dropped due to anti-spoofing?
A) Cleanup Rule
B) Rule 1
C) Rule 999
D) Rule 0
E) Stealth Rule
5. Regarding QoS guarantees and limits, which of the following statements is FALSE?
A) If both a rule and per-connection limit are defined for a rule, the per-connection limit must not be greater than the rule limit.
B) If both a limit and guarantee per rule are defined in a QoS rule, the limit must be smaller than the guarantee.
C) If a guarantee is defined in a sub-rule, a gurarantee must be defined for the rule above it.
D) A rule guarantee must not be less than the sum defiined in the guarantees' sub-rules.
E) The guarantee of a sub-rule cannot be greater than the guarantee defined for the rule above it.
質問と回答:
質問 # 1 正解: B | 質問 # 2 正解: B | 質問 # 3 正解: D | 質問 # 4 正解: D | 質問 # 5 正解: B |