Free CheckPoint 156-915 Exam Dumps Questions & Answers

Your SmartCenter Server fails and does not reboot. One of your remote Security Gateways managed by the SmartCenter Server reboots. What happens to that remote Gateway after reboot?

• A.  Since the SmartCenter Server is not available, the remote Gateway cannot fetch the Security Policy. Therefore, no traffic is allowed through the Gateway.
• B.  Since the SmartCenter Server is not available to the remote Gateway, fetching the Security Policy and logging will both fail.
• C.  Since the SmartCenter Server is not available, the remote Gateway cannot fetch the Security Policy. Therefore, all traffic is allowed through the Gateway.
• D.  Since the SmartCenter Server is not available, the remote Gateway uses the local Security Policy, but does not log traffic.
• E.  The remote Gateway fetches the last installed Security Policy locally, and passes traffic normally. The Gateway will log locally, since the SmartCenter Server is not available.

Where can a Security Administrator adjust the unit of measurement (bps, Kbps or Bps), for Check Point QoS bandwidth?

• A.  Check Point gateway object properties
• B.  Global Properties
• C.  QoS Class objects
• D.  $CPDIR/conf/qos_props.pf
• E.  Advanced Action options in each QoS rule.

Your company has two headquarters, one in London, one in New York. Each headquarters includes several branch offices. The branch offices only need to communicate with the headquarters in their country, not with each other, and only the headquarters need to communicate directly. What is the BEST configuration for VPN Communities among the branch offices and their headquarters, and between the two headquarters? VPN Communities comprised of:

• A.  Two star and one mesh Community, each star Community is set up for each site, with headquarters as the center of the Community, and branches as satellites. The mesh Communities are between the New York and London headquarters.
• B.  two mesh Communities, one for each headquarters and their branch offices; and one star Community, where New York is the center of the Community and London is the satellite.
• C.  two mesh Communities, one for each headquarters and their branch offices; and one star Community, in which London is the center of the Community and New York is the satellite.
• D.  three mesh Communities:one for London headquarters and its branches, one for New York headquarters and its branches, and one for London and New York headquarters.

Stephanie wants to reduce the encryption overhead and improve performance for her mesh VPN Community. The Advanced VPN Properties screen below displays adjusted page settings:

What can Stephanie do to achieve her goal?

• A.  Change the setting "Use Diffie-Hellman group" to "Group 5 (1536 bit)".
• B.  Check the box "Support IP compression".
• C.  Reduce the setting "Renegotiate IKE security associations every" to "720".
• D.  Check the box "Use aggressive mode".
• E.  Check the box "Use Perfect Forward Secrecy".

You have locked yourself out of SmartDashboard with the rules you just installed on your stand alone Security Gateway. Now you cannot access the SmartCenter Server or any SmartConsole tools via SmartDashboard. How can you reconnect to SmartDashboard?

• A.  Run cpstop on the SmartCenter Server.
• B.  Run fw uninstall localhost on the Security Gateway.
• C.  Run fw unloadlocal on the Security Gateway.
• D.  Delete the $ fwdir/database/manage.lock file and run cprestart.
• E.  Run fw unlocklocal on the SmartCenter Server.