Checkpoint 156-315: Check Point Security Administration NGX II
#1. You work a network administrator for Company.com. You configure a Check Point QoS Rule Base with two rules: an H.323 rule with a weight of 10, and the Default Rule with a weight of 10. The H.323 rule includes a per-connection guarantee of 384 Kbps, and a per-connection limit of 512 Kbps. The per-connection guarantee is for four connections, and no additional connections are allowed in the Action properties. If traffic passing through the QoS Module matches both rules, which of the following is true?
#2. Company.com has many VPN-1 Edge gateways at various branch offices, to allow VPN-1 Secure Client users to access Company.com resources. For security reasons, Company.com’s Secure policy requires all Internet traffic initiated behind the VPN-1 Edge gateways first be inspected by your headquarters’ VPN-1 Pro Security Gateway. How do you configure VPN routing in this star VPN Community?
#6. You want to upgrade a Secure Platform NG with Application Intelligence (AI) R55 Gateway to Secure Platform NGX R60 via Smart Update. Which package is needed in the repository before upgrading?
#7. Exhibit: The exhibit displays the cphaprob state command output from a New Mode High Availability cluster member. Which machine has the highest priority?
#8. Exhibit: Company tries to configure Directional VPN Rule Match in the Rule Base. But the Match column does not have the option to see the Directional Match. Company sees the screen displayed in the exhibit. What is the problem?
#10. Company is the Security Administrator for Company.com. Company.com FTP servers have old hardware and software. Certain FTP commands cause the FTP servers to malfunction. Upgrading the FTP Servers is not an option this time. Which of the following options will allow Company to control which FTP commands pass through the Security Gateway protecting the FTP servers?
gen. -0.823
Forum
Master braindump