156-915.1 Exam

- Covers the entire recommended syllabus
- Comprehensive questions and answers about 156-915.1 exam
- Verified Answers Researched by Industry Experts and almost 100% correct
- 156-915.1 exam questions updated on regular basis
- Same type as the certification exams, 156-915.1 exam preparation is in multiple-choice questions (MCQs)
- Tested by multiple times before publishing
- Try free 156-915.1 exam demo before you decide to buy it in Hiexam
- Technical support through Live Chat or Email

　
　
Exam : Check Point 156-915.1
Title : Accelerated CCSE 1.1 NGX


1. When restoring NGX using the upgrade_import command, which of the following items are NOT restored?
A. Security Policies
B. Global properties
C. Licenses
D. User groups
E. Route tables
Answer: E

2. Your organization has many VPN-1 Edge gateways at various branch offices, to allow VPN-1 SecureClient users to access company resources. For security reasons, your organization's Security Policy requires all Internet traffic initiated behind the VPN-1 Edge gateways first be inspected by your headquarters' VPN-1 Pro Security Gateway. How do you configure VPN routing in this star VPN Community?
A. To the Internet and other targets only
B. To the center and other satellites, through the center
C. To the center only
D. To the center, or through the center to other satellites, then to the Internet and other VPN targets
Answer: D

3. Your organization's security infrastructure separates Security Gateways geographically. You must request a central license for one remote Security Gateway. How would you request and apply the license? Request a central license:
A. using the remote Gateway's IP address. Apply the license locally with the cplic put command.
B. for the Gateways' IP address. Apply the license on the SmartCenter Server with the cprlic put command.
C. using the remote Gateway's IP address. Attach the license to the remote Gateway via SmartUpdate.
D. using your SmartCenter Server's IP address. Attach the license to the remote Gateway via SmartUpdate.
E. using the SmartCenter Server's IP address. Apply the license locally on the remote Gateway with the cplic put command.
Answer: D

4. Eric wants to see all URLs' full destination paths in the SmartView Tracker logs, not just the fully qualified domain name of the Web servers. For example, the information filed of a log entry displays the URL http: //hp.msn.com/css/home/hpcl1012.css. How can Eric best customize SmartView Tracker to see the logs he wants? Configure the URI resource, and select:
A. "transparent" as the connection method
B. "tunneling" as the connection method
C. "optimize URL logging"; use the URI resource in the rule, with action "accept"
D. "Enforce URL capability"; use the URI resource in the rule, with action "accept"
Answer: C

5. Your VPN Community includes three Security Gateways. Each Gateway has its own internal network defined as a VPN Domain. You must test the VPN-1 NGX route-based VPN feature, without stopping the VPN. What is the correct order of steps?
A. 1. Add a new interface on each Gateway.
2. Remove the newly added network from the current VPN Domain for each Gateway.
3. Create VTIs on each Gateway, to point to the other two peers
4. Enable advanced routing on all three Gateways.
B. 1. Add a new interface on each Gateway.
2. Remove the newly added network from the current VPN Domain in each gateway object.
3. Create VPN Tunnel Interfaces (VTI) on each gateway object, to point to the other two peers.
4. Add static routes on three Gateways, to route the new network to each peer"s VTI interface.
C. 1. Add a new interface on each Gateway.
2. Add the newly added network into the existing VPN Domain for each Gateway.
3. Create VTIs on each gateway object, to point to the other two peers.
4. Enable advanced routing on all three Gateways.
D. 1. Add a new interface on each Gateway.
2. Add the newly added network into the existing VPN Domain for each gateway object.
3. Create VTIs on each gateway object, to point to the other two peers.
4. Add static routes on three Gateways, to route the new networks to each peer's VTI interface.
Answer: B

http://www.Hiexam.com The safer.easier way to get CheckPoint Certification.