Free CheckPoint 156-315 Exam Dumps Questions & Answers

Barak is a Security Administrator for an organization that has two sites using pre-shared secrets in its VPN. The two sites are Oslo and London. Barak has just been informed that a new office is opening in Madrid, and he must enable all three sites to connect via the VPN to each other. Three Security Gateways are managed by the same SmartCenter Server, behind the Oslo Security Gateway. Barak decides to switch from pre-shared secrets to Certificates issued by the Internal Certificate Authority (ICA). After creating the Madrid gateway object with the proper VPN Domain, what are Barak's remaining steps?
1.Disable "Pre-Shared Secret" on the London and Oslo gateway objects.
2.Add the Madrid gateway object into the Oslo and London's mesh VPN Community.
3.Manually generate ICA Certificates for all three Security Gateways.
4.Configure "Traditional mode VPN configuration" in the Madrid gateway object's VPN screen.
5.Reinstall the Security Policy on all three Security Gateways.

• A.1, 2,3,4
• B.1,2,3,5
• C.1, 2, 5
• D.1,2,4,5
• E.1,3,4,5

You plan to install a VPN-1 Pro Gateway for VPN-1 NGX at your company's headquarters.
You have a single Sun SPARC Solaris 9 machine for VPN-1 Pro enterprise
implementation. You need this machine to inspect traffic and keep configuration files.
Which Check Point software package do you install?

• A.ClusterXL and SmartCenter Server
• B.Policy Server and primary SmartCenter Server
• C.VPN-1 Pro Gateway
• D.VPN-1 Pro Gateway and primary SmartCenter Server
• E.SmartCenter Server

Your VPN Community includes three Security Gateways. Each Gateway has its own internal network defined as a VPN Domain. You must test the VPN-1 NGX route-based VPN feature, without stopping the VPN. What is the correct order of steps?

• A.1. Add a new interface on each Gateway.
  2. Remove the newly added network from the current VPN Domain for each Gateway.
  3. Create VTIs on each Gateway, to point to the other two peers
  4. Enable advanced routing on all three Gateways.
• B.1. Add a new interface on each Gateway.
  2. Remove the newly added network from the current VPN Domain in each gateway object.
  3. Create VPN Tunnel Interfaces (VTI) on each gateway object, to point to the other two peers.
  4. Add static routes on three Gateways, to route the new network to each peer's VTI interface.
• C.1. Add a new interface on each Gateway.
  2. Add the newly added network into the existing VPN Domain for each gateway object.
  3. Create VTIs on each gateway object, to point to the other two peers.
  4. Add static routes on three Gateways, to route the new networks to each peer's VTI interface.
• D.1. Add a new interface on each Gateway.
  2. Add the newly added network into the existing VPN Domain for each Gateway.
  3. Create VTIs on each gateway object, to point to the other two peers.
  4. Enable advanced routing on all three Gateways.

Problems sometimes occur when distributing IPSec packets to a few machines in a Load Sharing Multicast mode cluster, even though the machines have the same source and destination IP addresses. What is the best Load Sharing method for preventing this type of problem?

• A.Load Sharing based on SPIs only
• B.Load Sharing based on IP addresses only
• C.Load Sharing based on SPIs and ports only
• D.Load Sharing based on IP addresses, ports, and serial peripheral interfaces (SPI)
• E.Load Sharing based on IP addresses and ports

How do you control the maximum mail messages in a spool directory?

• A.In the Security Server window in Global Properties
• B.In SmartDefense SMTP settings
• C.In the smtp.conf file on the SmartCenter Server
• D.In the gateway object's SMTP settings in the Advanced window
• E.In the SMTP resource object