Online Access Free 156-315 Exam Questions

You want only RAS signals to pass through H.323 Gatekeeper and other H.323 protocols, passing directly between end points. Which routing mode in the VoIP Domain Gatekeeper do you select?

• A.Direct and Call Setup
• B.Direct
• C.Call Setup and Call Control
• D.Call Setup

Where can a Security Administrator adjust the unit of measurement (bps, Kbps or Bps), for Check Point QoS bandwidth?

• A.Global Properties
• B.Advanced Action options in each QoS rule
• C.$CPDIR/conf/qos_props.pf
• D.Check Point gateway object properties
• E.QoS Class objects

You have a production implementation of Management High Availability, at version VPN-1 NG with Application Intelligence R55. You must upgrade your two SmartCenter Servers to VPN-1 NGX. What is the correct procedure?

• A.1. Synchronize the two SmartCenter Servers.
  2. Upgrade the secondary SmartCenter Server.
  3. Upgrade the primary SmartCenter Server.
  4. Configure both SmartCenter Server host objects version to VPN-1 NGX.
  5. Synchronize the Servers again.
• B.1. Synchronize the two SmartCenter Servers.
  2. Perform an advanced upgrade on the primary SmartCenter Server.
  3. Configure the primary SmartCenter Server host object to version VPN-1 NGX.
  4. Synchronize the two Servers again.
  5. Upgrade the secondary SmartCenter Server.
  6. Configure the secondary SmartCenter Server host object to version VPN-1 NGX.
  7. Synchronize the Servers again.
• C.1. Perform an advanced upgrade on the primary SmartCenter Server.
  2. Configure the primary SmartCenter Server host object to version VPN-1 NGX.
  3. Synchronize the primary with the secondary SmartCenter Server.
  4. Upgrade the secondary SmartCenter Server.
  5. Configure the secondary SmartCenter Server host object to version VPN-1 NGX.
  6. Synchronize the Servers again.
• D.1. Synchronize the two SmartCenter Servers.
  2. Perform an advanced upgrade on the primary SmartCenter Server.
  3. Upgrade the secondary SmartCenter Server.
  4. Configure both SmartCenter Server host objects to version VPN-1 NGX.
  5. Synchronize the Servers again.

Damon enables an SMTP resource for content protection. He notices that mail seems to slow down on occasion, sometimes being delivered late. Which of the following might improve throughput performance?

• A.Configuring the SMTP resource to bypass the CVP resource
• B.Configuring the SMTP resource to only allow mail with Damon's company's domain name in the header
• C.Increasing the Maximum number of mail messages in the Gateway's spool directory
• D.Configuring the Content Vector Protocol (CVP) resource to forward the mail to the internal SMTP server, without waiting for a response from the Security Gateway
• E.Configuring the CVP resource to return the mail to the Gateway

Yoav is a Security Administrator preparing to implement a VPN solution for his multi-site organization. To comply with industry regulations, Yoav's VPN solution must meet the following requirements:
Portability: Standard
Key management: Automatic, external PKI
Session keys: Changed at configured times during a connection's lifetime Key length: No less than 128-bit Data integrity: Secure against inversion and brute-force attacks What is the most appropriate setting Yoav should choose?

• A.IKE VPNs: SHA1 encryption for IKE Phase 1, and MD5 encryption for Phase 2; AES hash
• B.IKE VPNs: AES encryption for IKE Phase 1, and DES encryption for Phase 2; SHA1 hash
• C.IKE VPNs: CAST encryption for IKE Phase 1, and SHA1 encryption for Phase 2; DES hash
• D.IKE VPNs: DES encryption for IKE Phase 1, and 3DES encryption for Phase 2; MD5 hash
• E.IKE VPNs: AES encryption for IKE Phase 1, and AES encryption for Phase 2; SHA1 hash