Free CheckPoint 156-315 Exam Dumps Questions & Answers

You receive an alert indicating a suspicious FTP connection is trying to connect to one of your internal hosts. How do you block the connection in real time and verify the connection is successfully blocked?

• A.Highlight the suspicious connection in SmartView Tracker > Log mode. Block the connection using Tools > Block Intruder menu. Use Log mode to confirm that the suspicious connection does not reappear.
• B.Highlight the suspicious connection in SmartView Tracker > Active mode. Block the connection using Tools > Block Intruder menu. Use Active mode to confirm that the suspicious connection is dropped.
• C.Highlight the suspicious connection in SmartView Tracker > Log mode. Block the connection using Tools > Block Intruder menu. Use the Log mode to confirm that the suspicious connection is dropped.
• D.Highlight the suspicious connection in SmartView Tracker > Active mode. Block the connection using the Tools > Block Intruder menu. Use the Active mode to confirm that the suspicious connection does not reappear.

You are reviewing SmartView Tracker entries, and see a Connection Rejection on a Check Point QoS rule. What causes the Connection Rejection?

• A.Burst traffic matching the Default Rule is exhausting the Check Point QoS global packet buffers.
• B.The guarantee of one of the rule's sub-rules exceeds the guarantee in the rule itself.
• C.The Constant Bit Rate for a Low Latency Class has been exceeded by greater than
  10%, and the Maximal Delay is set below requirements.
• D.The number of guaranteed connections is exceeded. The rule's action properties are not set to accept additional connections.
• E.No QOS rule exists to match the rejected traffic.

Cody is notified by blacklist.org that his site has been reported as a spam relay, due to his SMTP Server being unprotected. Cody decides to implement an SMTP Security Server, to prevent the server from being a spam relay. Which of the following is the most efficient configuration method?

• A.Configure the SMTP Security Server to allow only mail to or from names, within Cody's corporate domain.
• B.Configure the SMTP Security Server to work with an OPSEC based product, for content checking.
• C.Configure the SMTP Security Server to apply a generic "from" address to all outgoing mail.
• D.Configure the SMTP Security Server to perform filtering, based on IP address and SMTP protocols.
• E.Configure the SMTP Security Server to perform MX resolving.

You are reviewing SmartView Tracker entries, and see a Connection Rejection on a Check Point QoS rule. What causes the Connection Rejection?

• A.Burst traffic matching the Default Rule is exhausting the Check Point QoS global packet buffers.
• B.The guarantee of one of the rule's sub-rules exceeds the guarantee in the rule itself.
• C.The Constant Bit Rate for a Low Latency Class has been exceeded by greater than
  10%, and the Maximal Delay is set below requirements.
• D.The number of guaranteed connections is exceeded. The rule's action properties are not set to accept additional connections.
• E.No QOS rule exists to match the rejected traffic.

You configure a Check Point QoS Rule Base with two rules: an H.323 rule with a weight of
10, and the Default Rule with a weight of 10. The H.323 rule includes a per-connection guarantee of 384 Kbps, and a per-connection limit of 512 Kbps. The per-connection guarantee is for four connections, and no additional connections are allowed in the Action properties. If traffic passing through the QoS Module matches both rules, which of the following statements is true?

• A.The H.323 rule will consume no more than 2048 Kbps of available bandwidth.
• B.Neither rule will be allocated more than 10% of available bandwidth.
• C.Each H.323 connection will receive at least 512 Kbps of bandwidth.
• D.50% of available bandwidth will be allocated to the Default Rule.
• E.50% of available bandwidth will be allocated to the H.323 rule.