最新の156-915問題集で試験を準備する

CheckPoint 156-915 試験概要:

CheckPoint 156-915 試験シラバストピック:

CheckPoint Accelerated CCSE NGX (156-915.1) 認定 156-915 試験問題：

問題 #1

You want to upgrade a cluster withc two members to VPN-1 NGX. The SmartCenter Server and both members are version VPN-1/FireWall-1 NG FP3, with the latest Hotfix. What is the correct upgrade procedure?
1. Change the version, in the General Properties of the gateway-cluster object.
2. Upgrade the SmartCenter Server, and reboot after upgrade.
3. Run cpstop on one member, while leaving the other member running. Upgrade one member at a time, and reboot after upgrade.
4. Reinstall the Security Policy.

A. 2.3.1.4
B. 2,4,3,1
C. 3,2,1,4
D. 1.2.3.4
E. 1,3,2,4

問題 #2

After importing the NGX schema into an LDAP server, what should you enable?
Schema checking

A. Encryption
B. Secure Internal Communications
C. UserAuthority
D. ConnectControl

問題 #3

You network includes ClusterXL running Multicast mode on two members, as shown in this topology:

Your network is expanding, and you need to add new interfaces: 10.10.10.1/24 on Member A, and 10.10.10.2/24 on Member B.
The virtual IP address for interface 10.10.10.0/24 is 10.10.10.3. What is the correct procedure to add these interfaces?

A. 1.Run cpstop on one member, and configure the new interface via sysconfig.
2.Run cpstart on the member. Repeat the same steps on another member.
3.Update the topology in the cluster object for the cluster and both members.
4.Instal the Security Policy.
B. 1.Disable "Cluster membership" from one Gateway via cpconfig.
2.Configure the new interface via sysconfig from the "non-member" Gateway.
3.Reenable "Cluster membership" on the Gateway.
4.Perform the same step on the other Gateway.
5.Update the topology in the cluster object for the cluster and members.
6.Install the Security Policy.
C. 1.Use sysconfig to configure the new interfaces on both members.
2.Update the topology in the cluster object for the cluster and both members.
3.Install the Security Policy.
D. 1.Use the ifconfig command to configure and enable the new interface.
2.Run cpstop and cpstart on both members at the same time.
3.Update the topology in the cluster object for the cluster and both members.
4.Install the Security Policy.

問題 #4

Jack's project is to define the backup and restore section of his organization's disaster recovery plan for his organization??s distributed NGX installation. Jack must meet the following required and desired objectives:
Required Objective: The security policy repository must be backed up no less frequently than every 24 hours.
Desired Objective: The NGX components that enforce the Security Policies should be backed up no less frequently than once a week.
Desired Objective: Back up NGX logs no less frequently than once a week.
Jack's disaster recovery plan is as follows:
1.*Use the cron utility to run the upgrade_export command each night on the SmartCenter Servers. Configure the organization's routine backup software to back up the files created by the upgrade_export command.
2.*Configure the SecurePlanform backup utility to back up the Security Gateways every Saturday night.
3.*Use the cron utility to run the upgrade_export comand each Saturday night on the Log Servers. Configure an automatic, nightly logswitch. Configure the organization's routine backup software to back up the switched logs every night.
Jack's plan:

A. Meets the required objective but does not meet either desired objective.
B. Meets the required objective and both desired objectives.
C. Does not meet the required objective.
D. Meets the required objective and only one desired objective.

問題 #5

When restoring NGX using the upgrade_import command, which of the following items are NOT restored?

A. Security Policies
B. Route tables
C. Licenses
D. Global properties
E. User groups

解説：