CheckPoint 156-915.65Accelerated CCSE NGX R65

10 Q&A

Version 3.0

http://www.selfexamprep.com/156-915.65.htm

Leading the way in IT testing and certification tools, www.SelfExamPrep.com

- 2 -

Important Note, Please Read Carefully

Other 156-915.65 productsA) Offline Testing engineUse the offline Testing engine product topractice the questions in an exam environment.

Build a foundation of knowledge which will be useful also after passing the exam.

Latest VersionWe are constantly reviewing our products. New material is added and old material isrevised. Free updates are available for 90 days after the purchase. You should check yourmember zone at 156-915.65 and update 3-4 days before the scheduled exam date.

Here is the procedure to get the latest version:

1.Go towww.156-915.65.com2.Click on Log in3.The latest versions of all purchased products are downloadable from here. Just click thelinks.For most updates,it is enough just to print the new questions at the end of the newversion, not the whole document.

FeedbackIf you spot a possible improvement then please let us know. We always interested inimproving product quality.Feedback should be send to feedback@156-915.65.com. You should include thefollowing: Exam number, version, page number, question number, and your login Email.

Our experts will answer your mail promptly.

CopyrightEach iPAD file is a green exe file. if we find out that a particular iPAD Viewer file isbeing distributed by you, 156-915.65 reserves the right to take legal action against youaccording to the International Copyright Laws.

ExplanationsThis product does not include explanations at the moment. If you are interested inproviding explanations for this exam, please contact feedback@156-915.65.com.

Leading the way in IT testing and certification tools, www.SelfExamPrep.com

- 3 -

www.156-915.65.com Q: 1 When upgrading to NGX R65, which Check Pointproducts do not require a license upgrade to be current?

A. None, all versions require a license upgrade

B. VPN-1NGX(R64) and later

C. VPN-1NGX(R60) and later

D. VPN-1 NG with Application Intelligence (R54) and later

Answer: C

www.156-915.65.com Q: 2 Where is it necessary to configure historical records inSmartView Monitor to generate Express reports in Eventia Reporter?

A. In SmartDashboard, the SmartView Monitor page in the VPN-1 Security Gatewayobject B . In Eventia Reporter, under Express > Network ActivityC. In Eventia Reporter, under Standard > CustomD. In SmartView Monitor, under Global Properties > Log and Masters

Answer: A

www.156-915.65.com Q: 3 QUESTION NO: 5 CORRECT TEXT Where do youenable popup alerts for SmartDefense settings that have detected suspiciousactivity? A . In SmartView Monitor, select Tools > Alerts B . In SmartViewTracker, select Tools > Custom CommandsAnswer & ExplanationCorrect AnswerAExplanationsNo more information available

Leading the way in IT testing and certification tools, www.SelfExamPrep.com

- 4 -

Answer: Check 156-915.65 eEngine, Download from Member Center

www.156-915.65.com Q: 4 Which Check Point product is used to create and savechanges to a Log Consolidation Policy?

A. Eventia Reporter Client

B. SmartDashboard Log Consolidator

C. SmartCenterServer

D. Eventia Reporter Server

Answer: B

www.156-915.65.com Q: 5 Which of the following would NOT be a reason forbeginning with a fresh installation of VPN-1 NGX R65, instead of upgrading aprevious version to VPN-1 NGX R65?

A. You see a more logical way to organize your rules and objects.

B. YOU want to keep your Check Point configuration.

C. Your Security Policy includes rules and objects whose purpose you do not know.

D. Objects and rules' naming conventions have changed overtime.

Answer: B

Leading the way in IT testing and certification tools, www.SelfExamPrep.com

- 5 -

www.156-915.65.com Q: 6 How do you block some seldom-used FTP commands,such as CWD, and FIND from passing through the Gateway? A . Use FTP SecurityServer settings in SmartDefense.

A. Add the restricted commands to theaftpd.conf file in the SmartCenter Server.

B. Configure the restricted FTP commands in the Security Servers screen of the Globalproperties.

C. Enable FTP Bounce checking inSmartDefense.

Answer: A

www.156-915.65.com Q: 7 Match each of the following commands to their correctfunction. Each command only has one function listed

Leading the way in IT testing and certification tools, www.SelfExamPrep.com

- 6 -

A. C1>F6; C2>F4; C3>F2; C4>F5

B. C1>F4; C2>F6; C3>F3; C4>F2

C. C1>F2; C2>F4; C3>F1; C4>F5

D. C1>F2; C2>F1; C3>F6; C4>F4

Answer: A

www.156-915.65.com Q: 8 When configuring VPN High Availability (HA) withMEP, which of the following is correct?

A. The decision on which MEP Security Gateway to use is made on the remotegateway's side (non-MEP side).

B. MEP Gateways must be managed by the sameSmartCenter Server.

C. MEP VPN Gateways cannot be geographically separated machines.

D. If one Gateway fails, the synchronized connection fails over to another Gateway andthe connection continues

Answer: A

www.156-915.65.com Q: 9 How do you block some seldom-used FTP commands,such as CWD, and FIND from passing through the Gateway?

A. Use FTP Security Server settings inSmartDefense

B. Add the restricted commands to theaftpd.conf file in the SmartCenter Server.

C. Configure the restricted FTP commands in the Security Servers screen of the Globalproperties.

Leading the way in IT testing and certification tools, www.SelfExamPrep.com

- 7 -

D. Enable FTP Bounce checking inSmartDefense.

Answer: A

www.156-915.65.com Q: 10 Which NGX R65 logs can you configure to send toDShield.org?

A. SNMP and account logs

B. Alert and user-defined alert logs

C. Account and alert logs

D. Audit and alert logs

Answer: B