CheckPoint Accelerated CCSE NGX (156-915.1) Sample Questions:

1. When restoring NGX using the upgrade_import command, which of the following items are NOT restored?

A) Licenses
B) User groups
C) Security Policies
D) Global properties
E) Route tables

2. You are reviewing SmartView Tracker entries, and see a Connection Rejection on a Check Point QoS rule. What causes the Connecion Rejection?

A) The number of guaranteed connections is exceeded. The rule's action properties are not set to accept additional connections.
B) Burst traffic matching the Default Rule is exhausting the Check Point QoS global packet buffers.
C) The Constant Bit Rate for a Low Latency Class has been exceeded by greater than
10%, and the Maximal Delay is set below requirements.
D) No QoS rule exists to match the rejected traffic.
E) The guarantee of one of the rule??s sub-rules exceeds the guarantee in the rule itself.

3. Your is a Security Administrator preparing to implement a VPN solution for his multisite organization. To comply with industry regulations, Your's VPN solution must meet the following requirements:
Portability: Standard
Key management: Automatic, external PKI
Session Keys: Changed at configured times during a connection's lifetime Key length: No less than 128-bit Data integrity: Secure against inversion and brute-force attacks What is the most appropriate setting You should choose?

A) IKE VPNs: CAST encryption for IKE Phase 1, and SHA1 encryption for Phase 2; DES hash
B) IKE VPNs: AES encryption for IKE Phase 1, and DES encryption for Phase 2; SHA1 hash
C) IKE VPNs: SHA1 encryption for IKE Phase 1, and MD5 encryption for Phase 2; AES hash
D) IKE VPNs: DES encryption for IKE Phase 1, and 3DES encryption for Phase 2; MD5 hash
E) IKE VPNs: AES encryption for IKE Phase 1, and AES encryption for Phase 2; SHA1 hash

4. Jeremy manages sites in Tokyo, Calcutta and Dallas, from his office in Chicago. He is trying to create a report for management, detailing the current software level of each Security Gateway. He also wants to create a proposal outline, listing the most cost-effective way to upgrade his Gateways. Which two SmartConsole applications should Jeremy use, to create his report and outline?

A) SmartDashboard and SmartView Tracker
B) SmartLSM and SmartUpdate
C) SmartView Monitor and SmartUpdate
D) SmartDashboard and SmartLSM
E) SmartView Tracker and SmartView Monitor

5. Jack's project is to define the backup and restore section of his organization's disaster recovery plan for his organization??s distributed NGX installation. Jack must meet the following required and desired objectives:
Required Objective: The security policy repository must be backed up no less frequently than every 24 hours.
Desired Objective: The NGX components that enforce the Security Policies should be backed up no less frequently than once a week.
Desired Objective: Back up NGX logs no less frequently than once a week.
Jack's disaster recovery plan is as follows:
1.*Use the cron utility to run the upgrade_export command each night on the SmartCenter Servers. Configure the organization's routine backup software to back up the files created by the upgrade_export command.
2.*Configure the SecurePlanform backup utility to back up the Security Gateways every Saturday night.
3.*Use the cron utility to run the upgrade_export comand each Saturday night on the Log Servers. Configure an automatic, nightly logswitch. Configure the organization's routine backup software to back up the switched logs every night.
Jack's plan:

A) Meets the required objective and both desired objectives.
B) Does not meet the required objective.
C) Meets the required objective but does not meet either desired objective.
D) Meets the required objective and only one desired objective.

Solutions: