Exam Number/Code: 156-315
Questions and Answers:142 Q&As
Updated: 2009-09-23
Exam Name: Check Point Certified Security Expert NGX
examsoon professional IT Q&As vendors, offer well after-sale service for 156-315 braindumps. To all the customers buy the real 156-315 questions and answers, examsoon provide track service for 156-315 study guides. when you buy the Q&As with in 3 months. you can enjoy the upgrade Q&As service for free with 156-315 practice exam. If in this period, the certified test center change the CheckPoint CheckPoint 156-315 braindumps Q&As, we will update the 156-315 simulations Q&A in the first time, and provide you the download update for free
156-315 Free Demo Download
examsoon offers free demo for 156-315 142 Q & As with Expert Explanations). You can check out the interface, question quality and usability of our practice exams before you decide to buy it.
Download 156-315 Exam Pdf Demo
Download 156-315 Exam iEngine Demo
Exam : Check Point 156-315
Title : Check Point Certified Security Expert NGX
1. Which of the following commands shows full synchronization status?
A. cphaprob -i list
B. cphastop
C. fw ctl pstat
D. cphaprob -a if
E. fw hastat
Answer: A
2. You are preparing to configure your VoIP Domain Gatekeeper object. Which two other objects should you have created first?
A. An object to represent the IP phone network, AND an object to represent the host on which the proxy is installed
B. An object to represent the PSTN phone network, AND an object to represent the IP phone network
C. An object to represent the IP phone network, AND an object to represent the host on which the gatekeeper is installed
D. An object to represent the Q.931 service origination host, AND an object to represent the H.245 termination host
E. An object to represent the call manager, AND an object to represent the host on which the transmission router is installed
Answer: C
3. Greg is creating rules and objects to control VoIP traffic in his organization, through a VPN-1 NGX Security Gateway. Greg creates VoIP Domain SIP objects to represent each of his organization’s three SIP gateways. Greg then creates a simple group to contain the VoIP Domain SIP objects. When Greg attempts to add the VoIP Domain SIP objects to the group, they are not listed. What is the problem?
A. The related end-points domain specifies an address range.
B. VoIP Domain SIP objects cannot be placed in simple groups.
C. The installed VoIP gateways specify host objects.
D. The VoIP gateway object must be added to the group, before the VoIP Domain SIP object is eligible to be added to the group.
E. The VoIP Domain SIP object’s name contains restricted characters.
Answer: B
4. The following rule contains an FTP resource object in the Service field:
Source: local_net
Destination: Any
Service: FTP-resource object
Action: Accept
How do you define the FTP Resource Properties > Match tab to prevent internal users from sending corporate files to external FTP servers, while allowing users to retrieve files?
A. Enable the "Get" method on the match tab.
B. Disable "Get" and "Put" methods on the Match tab.
C. Enable the "Put" and "Get" methods.
D. Enable the "Put" method only on the match tab.
E. Disable the "Put" method globally.
Answer: A
5. Which of the following QoS rule-action properties is an Advanced action type, only available in Traditional mode?
A. Guarantee Allocation
B. Rule weight
C. Apply rule only to encrypted traffic
D. Rule limit
E. Rule guarantee
Answer: A