Free CheckPoint 156-310 Exam Dumps Questions & Answers

Dr Billis a Security Administrator preparing to configure his VPN-1/FireWall-1 Rule Base, to accommodate Voice over IP (VoIP) traffic. Dr Billhas the information displayed below.
Does Dr Billhave enough information to configure his objects and rules?

• A.Yes,Dr Billhas sufficient information to configure his objects and rules.
• B.No,Dr Billdoes not have enough information to configure his objects and rules.Dr Billneeds to know the IP address of the SIP redirect server.
• C.No,Dr Billdoes not have enough information to configure his objects and rules.Dr Billneeds to know the IP address of the SIP user-agent server.
• D.Dr Billis trying to pass SIP traffic through NG with Application Intelligence. NG with Application Intelligence does not support SIP.Dr Billmust use an H.323 VoIP solution for NG with Application Intelligence.
• E.No,Dr Billdoes not have enough information to configure his objects and rules.Dr Billneeds to know the IP address of the VoIP gateway.

How do you enable connection logging to the Policy Server when using Secure Client?

• A.Create the file st.log in the log directory.
• B.Go to the registry and add key EnableLogging=1.
• C.Select 'Enable Logging' under options in the tool menu of the Secure Client GUI.
• D.Enable logging in the Policy server.
• E.Set logging to Alert in the Tracking field of the Rule Base.

The IKE encryption scheme encrypts the original TCP and IP headers along with the packet data.

• A.True
• B.False

VPN-1/FireWall-1 allows a Security Administrator to define four types of Certificate Authorities. Which of the following is NOT a type of Certificate Authority that can be defined in VPN-1/FirwWall-1?

• A.OPSEC PKI
• B.VPN-1 Certificate Manager
• C.Caching Only Certificate Manager
• D.Entrust PKI
• E.External SmartCenter Server

Which encryption algorithms are supported by FWZ? (Choose all that apply)

• A.3DES
• B.DES
• C.RC2
• D.CAST
• E.FWZ-1