Online Access Free 156-315.13 Exam Questions

Which Check Point QoS feature is used to dynamically allocate relative portions of available bandwidth?

• A.Differentiated Services
• B.Low Latency Queuing
• C.Weighted Fair Queuing
• D.Guarantees

Due to some recent performance issues, you are asked to add additional processors to your firewall. If you already have CoreXL enabled, how are you able to increase Kernel instances?

• A.Use cpconfig to reconfigure CoreXL.
• B.In SmartUpdate, right-click on Firewall Object and choose Add Kernel Instances.
• C.Kernel instances are automatically added after process installed and no additional configuration is needed.
• D.Once CoreXL is installed you cannot enable additional Kernel instances without reinstallingR76.

What is a possible reason for the grayed out Restore Version button in the screenshot of the Database Revision Control while trying to restore Old_Structure?

• A.With SmartWorkflow active, only SmartWorkflow revisions could be restored.
• B.No SmartWorkflow session is started.
• C.Old_Structure was not approved in SmartWorkflow.
• D.Self-created versions cannot be restored if there are newer versions created in SmartWorkflow.

You can NOT use SmartDashboard's SmartDirectory features to connect to the LDAP server. What should you investigate?
1.Verify you have read-only permissions as administrator for the operating system.
2.Verify there are no restrictions blocking SmartDashboard's User Manager from connecting to the LDAP server.
3.Check that the Login Distinguished Name configured has root (Administrator) permission (or at least write permission) in the access control configuration of the LDAP server.

• A.1, 2, and 3
• B.1 and 3
• C.2 and 3
• D.1 and 2

Refer to the to the network topology below.

You have IPS software Blades active on security Gateways sglondon, sgla, and sgny, but still experience attacks on the Web server in the New York DMZ. How is this possible?

• A.Since other Gateways do not have IPS activated, attacks may originate from their networks without any noticing
• B.Attacker may have used a touch of evasion techniques like using escape sequences instead of clear text commands. It is also possible that there are entry points not shown in the network
  layout, like rouge access points.
• C.An IPS may combine different technologies, but is dependent on regular signature updates and well-turned automatically algorithms. Even if this is accomplished, no technology can offer 100% protection.
• D.All of these options are possible.