Online Access Free CheckPoint.156-915.v2022-06-29.q56 Practice Test (Page 6)

156-915 Exam Question 21

You set up a mesh VPN Community, so your internal networks can access your partner's network, and vice versa. Your Security Policy encrypts only FTP and HTTP traffic through a VPN tunnel. All other traffic among your internal and partner networks is sent in clear text.
How do you configure the VPN Community?

A.Disable "accept all encrypted traffic", and put FTP and http in the Excluded services in the Community object. Add a rule in the Security Policy for services FTP and http, with the Community object in the VPN field.

B.Disable "accept all encrypted traffic" in the Community, and add FTP and http services to the Security Policy, with that Community object in the VPN field.

C.Enable "accept all encrypted traffic", but put FTP and http in the Excluded services in the Community. Add a rule in the Security Policy, with services FTP and http, and the Community object in the VPN field.

D.Put FTP and http in the Excluded services in the Community object. Then add a rule in the Security Policy to allow Any as the service, with the Community object in the VPN field.

156-915 Exam Question 22

Which of the following commands is used to restore NGX configuration information?

A.cpconfig

B.cpinfo -i

C.upgrade_import

D.fwm dbimport

E.restore

156-915 Exam Question 23

Select the correct statement about Secure Internal Communications (SIC) Certificates? SIC Certificates:

A.decrease network security by securing administrative communication among the SmartCenter Servers and the Security Gateway.

B.for the SmartCenter Server are created during the SmartCenter Server installation.

C.for NGX Security Gateways are created during the SmartCenter Server installation.

D.are used for securing internal network communications between the SmartView Tracker and an OPSEC device.

E.uniquely identify Check Point enable machines; they have the same function as Authentication Certificates.

156-915 Exam Question 24

Your primary SmartCenter Server is installed on a SecurePlatform Pro machine, which is also a VPN-1 Pro Gateway. You want to implement Management High Availability (HA).
You have a spare machine to configure as the secondary SmartCenter Server. How do you configure the new machine to be the standby SmartCenter Server, without making any changes to the existing primary SmartCenter Server? (Changes can include uninstalling and reinstalling.)

A.The secondary Server cannot be installed on a SecurePlatform Pro machine alone.

B.The new machine cannot be installed as the Internal Certificate Authority on its own.

C.You cannot configure Management HA, when either the primary or secondary SmartCenter Server is running on a VPN-1 Pro Gateway.

D.Install the secondary Server on the spare machine. Add the new machine to the same network as the primary Server.

156-915 Exam Question 25

Which Check Point QoS feature marks the Type of Service (ToS) byte in the IP header?

A.Low Latency Queuing

B.Limits

C.Differentiated Services

D.Guarantees

E.Weighted Fair Queueing

Latest Upload: 233ISACA.CGEIT.v2025-09-19.q537; 152Fortinet.FCP_FWF_AD-7.4.v2025-09-18.q62; 153Scrum.SAFe-Practitioner.v2025-09-18.q63; 141Workday.Workday-Prism-Analytics.v2025-09-17.q17; 131Oracle.1Z0-1055-24.v2025-09-17.q28; 128Oracle.1Z1-182.v2025-09-17.q32; 235Nutanix.NCP-US-6.5.v2025-09-16.q73; 263Oracle.1z0-071.v2025-09-16.q232; 198Oracle.1Z1-922.v2025-09-16.q125; 314CyberArk.PAM-CDE-RECERT.v2025-09-15.q100

156-915 Exam Question 21

156-915 Exam Question 22

156-915 Exam Question 23

156-915 Exam Question 24

156-915 Exam Question 25

Download PDF File