100% valid Checkpoint 156-915 Flydumps with more new added questions.By training the Checkpoint 156-915 questions, you will save a lot time in preparing the exam.Visit https://www.pass4itsure.com/156-915.html to get the 100% pass Checkpoint 156-915 ensure!
QUESTION 81
When does it mean when a Security Gateway is labeled untrusted in the Smart provisioning status view?
A. the Security Gateway is down.
B. SIC has not been established between the Security Gateway and the Security management.
C. Smart Provisioning is not enabled on the Security Gateway
D. cpd is not running at the Security Gateway
Correct Answer: B QUESTION 82
Pushing a SmartPravisoning Profile to a gateway failed. What are possible reasons for that?
(i) SIC is not established
(ii)SSH demon is not running on the gateway.
(iii) An admin has logged in locally on the gateway. 35
(iv)
LSM is not enabled on the gateway (v)Gateway is in maintenance mode
A.
(i), (iv) or (v)
B.
(i) or (v)
C.
(iii) or (v)
D.
(ii), (iii), (iv)
Correct Answer: B QUESTION 83
Control connections between the security management server and gateway are not encrypted by VPN community. How are these connections secured?
A. They are not encrypted, hut are authenticated by the Gateway
B. They are secured by PPTP
C. They are not secured
Correct Answer: A QUESTION 84
Which of the following is TRUE concerning numbered VPN Tunnel Warfare’s (VIIs)?
A. VTIs are supported on SecurePlatform Pro
B. VTTs cannot share IP addresses
C. VTls are assigned only local addresses, not remote addresses
D. VTTs can use an already existing physical-interface IP address
Correct Answer: A QUESTION 85
Which of the following is NOT accelerated by SecureXL?
A. FTP
B. HTTPS
C. TELNET
D. SSH
Correct Answer: B QUESTION 86
Identify the correct step performed by smartupdate to upgrade a remote security gateway. After selecting packages / distribute and install selected package and choosing the target gateway.
A. Selected package is copied from the CD-ROM of the smartupdate PC directly to the security gateway and installation is performed.
B. Selected package is copied from the package repository on the security management server to the security gateway but the installation is not performed
C. Smart update wizard walks the administrator through a distributed package.
D. Selected package is copied from the package repository on the security management server to the security gateway and installation is performed.
Correct Answer: D QUESTION 87
What is NOT true about Management Portal?
A. Choosing Accept control connections in Implied Rules includes Management Portal access
B. Management Portal requires a license
C. Default Port for Management Portal access is 4433
D. Management Portal could be reconfigured for using HTTP instead of HTTPS
Correct Answer: A QUESTION 88
Provisioning Profiles can NOT be applied to:
A. UTM- EDGE Appliances
B. UTM-1 Appliances 39
C. IP Appliances
D. Power-1 Appliances
Correct Answer: C QUESTION 89
Based on the following information, which statement below is TRUE?
DLP rule base has the following conditions:
Date type = Large file (.500KB)
Source = my organization
Destination = free web mails Protocol = any Action = ask user At other rules are set to detect. User check is enabled and installed on all client machines
A. a user sent an e-mail that was matched by the large file rule and by another rule with action, detect. As a result the action taken by DLP is detected and the user will not be prompted by user check.
B. A user sends an e-mail with a small body and an attachment is a 600 KB, ZIP file containing 200 files each with a size of 10 KB (before compression). The user will be prompted by user check.
C. When a user sends an e-mail with a small body and 5 attachments, each of 200KB to, he will be prompted by user check.
D. When a user uploads a 600 kB file to his Yahoo account via Web mail (via his browser) he will be prompted by user check
Correct Answer: D QUESTION 90
Which of the following commands can be used to bind a NIC to a single processor when using a
40 performance pack on a secure platform?
A. Set proc
B. Splat proc
C. Fw fat path nic
D. Sim affinity
Correct Answer: D QUESTION 91
What port is used for communication to the User Center with Smart update?
A. CPM200
B. HTTPS 443
C. HTTP 80
D. TCP 8080
Correct Answer: B QUESTION 92
You are using tracelogger to debug SSL VPN’s server and obtain a textual traffic dump. Which type of traffic will you not see in output?
A. Traffic outbound from internal networks
B. Traffic to the portal
C. Traffic outbound to external networks
D. Traffic inbound from external networks
Correct Answer: B QUESTION 93
41 You are using tracelogger to debug SSL VPN’s server side and obtain a textual traffic dump which type of traffic wills you NOT see in the output?
A. Traffic outbound from the internal networks
B. Traffic to the portal
C. Traffic outbound to the external networks
D. Traffic inbound from the external networks
Correct Answer: B QUESTION 94
What could the following regular expression be used for in a DLP rule?
$ 9 [0-9] *, [0-9] [0-9] [0-9], [0-9] [0-9]
Select the best answer
A. As a Data Type to prevent programmers from leaking code outside the company
B. As a compound data type representation.
C. As a Data Type to prevent employees from sending an email that contains a complete price-list of nine products
D. As a Data Type to prevent the France Department from leaking salary information to employees
Correct Answer: C QUESTION 95
Your Customer wishes to install smart workflow on top of R/0 security SERVER (windows system0. what is the required disk SPACE?
A. 1256 MB
B. 1 GB
C. 512 MB
D. 880 MB
Correct Answer: D QUESTION 96
The following graphic illustrates which command being issued a Secure Platform?
A. fwsecurexl stats
B. fwaccel stats
C. fw accel stats
D. fw securexl stats
Correct Answer: C QUESTION 97
If Bob wanted to create a management high availability configuration, what is minimum number of security management servers required in order to achieve this goal?
A. Three
B. Two
C. Four
D. One
Correct Answer: B QUESTION 98
Domain name can not be changed in smart provisioning and domain name is grayed out what is possible reason for this?
A. There is no SmartProvisionmg license installed.
B. Profile is not assigned to any Gateway
C. Domain profile setting on device level is set to Mandatory.
D. Domain name settings are always fetched from firewall object
Correct Answer: A
QUESTION 99
To help organize events, smart reporter uses filtered queries. Which of the following is not a smart Event event property you can query?
A. State Open, Cloacd, Fnlao, Alarm
B. Type scans, denial of service unauthorized entry
C. Event critical, suspect, false alarm
D. Time last hour, last day, last week
Correct Answer: B QUESTION 100
From the following rule base, for which rules will the connection templates be generated in secureXL?
A. Rule nos 2 to 5 45
B. Rule nos 2 and 5
C. Rule no 2 only
D. All rules except rule no 3
Correct Answer: C
Checkpoint 156-915 Exam Certification Guide presents you with an organized test preparation routine through the use of proven series elements and techniques.“Do I Know This Already?”quizzes open each chapter and allow you to decide how much time you need to spend on each section.Checkpoint 156-915 lists and Foundation Summary tables make referencing easy and give you a quick refresher whenever you need it.Challenging Checkpoint 156-915 review questions help you assess your knowledge and reinforce key concepts. Checkpoint 156-915 exercises help you think about exam objectives in real-world situations,thus increasing recall during exam time.
