CheckPoint Check Point Security Administration NGX II (156-315.1) Sample Questions:

1. You have an internal FTP server, and you allow downloading, but not uploading. Assume Network Address Translation is set up correctly, and you want to add an inbound rule with:
Source: Any
Destination: FTP server
Service: an FTP resource object.
How do you configure the FTP resource object and the action column in the rule to achieve this goal?

A) Disable "Get" and "Put" methods in the FTP Resource Properties and use it in the rule, with action accept.
B) Enable only the "Get" method in the FTP Resource Properties, and use this method in the rule, with action accept.
C) Enable both "Put" and "Get" methods in the FTP Resource Properties and use them in the rule, with action drop.
D) Enable only the "Get" method in the FTP Resource Properties and use it in the rule, with action drop.
E) Enable only the "Put" method in the FTP Resource Properties and use it in the rule, with action accept.

2. You are configuring the VoIP Domain object for an H.323 environment, protected by VPN-1 NGX. Which VoIP Domain object type can you use?

A) Transmission Router
B) Call Agent
C) Proxy
D) Call Manager
E) Gatekeeper

3. What is the consequence of clearing the "Log VoIP Connection" box in Global Properties?

A) Dropped VoIP traffic is logged, but accepted VoIP traffic is not logged.
B) VoIP protocol-specific log fields are not included in SmartView Tracker entries.
C) IP addresses are used, instead of object names, in log entries that reference VoIP Domain objects.
D) The SmartCenter Server stops importing logs from VoIP servers.
E) The log field setting in rules for VoIP protocols are ignored.

4. Jennifer wants to protect internal users from malicious Java code, but she does not want to strip Java scripts. Which is the BEST configuration option?

A) Use the URI resource to strip script tags
B) Use the URI resource to strip ActiveX tags
C) Use CVP in the URI resource to block Java code
D) Use the URI resource to block Java code
E) Use the URI resource to strip applet tags

5. You plan to migrate a VPN-1 NG with Application Intelligence (AI) R55 SmartCenter Server to VPN-1 NGX. You also plan to upgrade four VPN-1 Pro Gateways at remote offices, and one local VPN-1 Pro Gateway at your company's headquarters. The SmartCenter Server configuration must be migrated. What is the correct procedure to migrate the configuration?

A) 1. From the VPN-1 NGX CD in the SmartCenter Server, select "advance upgrade".
2. After importing the SmartCenter configuration into the new NGX SmartCenter, reboot.
3. Upgrade all licenses and software on all five remote Gateways via SmartUpdate.
B) 1. Upgrade the SmartCenter Server, using the VPN-1 NGX CD.
2. Reinstall and update the licenses of the five remote Gateways.
C) 1. Copy the $FWDIR\conf directory from the SmartCenter Server.
2. Save directory contents to another directory.
3. Uninstall the SmartCenter Server, and install a new SmartCenter Server.
4. Move directory contents to $FWDIR\conf.
5. Reinstall all gateways using NGX and install a policy.
D) 1. Upgrade the five remote Gateways via SmartUpdate.
2. Upgrade the SmartCenter Server, using the VPN-1 NGX CD.
E) Upgrade the SmartCenter Server and the five remote Gateways via SmartUpdate, at the same time.

Solutions: