kaoccna 的优势

156-515 试题的质量和价值
mcsepass 模拟测试题具有最高的专业技术含量，只供具有相关专业知识的专家和学者学习和研究之用。
100% 保证您通过 156-515 的考试
如果你使用 mcsepass 模拟测试，我们将保证你的第一次参加考试即取得成功，否则，我们将全额退款！
试用后再购买
mcsepass 提供每种产品免费测试。在您决定购买之前，请检测联接，可能存在的问题及试题质量和适用性。
kaoccna认证考试题库网专业提供 CheckPoint 156-515 最新题库下载，完全覆盖 mcsepass 考试原题。

部分考题展示

　
　
Exam : Check Point 156-515
Title : Check Point Certified Security Expert Plus NGX


1. Which of the following commands identifies whether or not a Security Policy is installed or the Security Gateway is operating with the Initial Policy?
A. fw monitor
B. cp policy
C. cp stat
D. fw policy
E. fw stat
Answer: E

2. The virtual machine inspects each packet at the following points:
-Before the virtual machine, in the inbound direction (i or PREIN)
-After the virtual machine, in the inbound direction (I or POSTIN)
-Before the virtual machine, in the outbound direction (o or PREOUT)
-After the virtual machine, in the outbound direction (O or POSTOUT)
If Ethereal displays a packet with i, I, o, and O entries, what does that likely indicate?
A. The packet was rejected by the Rule Base.
B. The packet was destined for the Gateway.
C. Nothing unusual; the o and O entries only appear if there is a kernel-level error.
D. The packet was rerouted by the Gateway's OS.
E. The packet arrived at the kernel and left the Security Gateway successfully.
Answer: E

3. Which one of these is a temporary pointer log file?
A. $FWDIR/log/xx.logptr
B. $FWDIR/log/xx.log
C. $FWDIR/log/xx.logaccount_ptr
D. $FWDIR/log/xx.logLuuidDB
Answer: D

4. To stop the sr_service debug process, you must first stop VPN-1 SecureClient, delete which of the following files, and restart SecureClient?
A. sr_auth.all
B. sr_topo.all
C. sr_tde.all
D. sr_service.all
E. sr_users.all
Answer: C

5. How can you view cpinfo on a SecurePlatform Pro machine?
A. snoop -i
B. infotab
C. tcpdump
D. Text editor, such as vi
E. infoview
Answer: D

6. A SecuRemote/SecureClient tunnel test uses which port?
A. UDP 18233
B. UDP 2746
C. UDP 18234
D. TCP 18231
E. UDP 18321
Answer: C

7. Gus is troubleshooting a problem with SMTP. He has enabled debugging on his Security Gateway and needs to copy the *.elg files into an archive to send to Check Point Support. Which of the
following files does Gus NOT need to send?
A. fwd.elg
B. mdq.elg
C. diffserv.elg
D. asmtpd.elg
Answer: C

8. Which files should be acquired from a Windows 2003 Server system crash with a Dr. Watson error?
A. drwtsn32.log
B. vmcore.log
C. core.log
D. memory.log
E. info.log
Answer: A

9. Which of the following commands would you run to debug a VPN connection?
A. debug vpn ike
B. debug vpn ikeon
C. vpn debug ike
D. debug vpn ike on
E. vpn debug ikeon
Answer: E

10. When collecting information relating to the perceived problem, what is the most important question to ask?
A. Is this problem repeatable?
B. Is this problem software or hardware related?
C. Under what circumstances does this problem occur?
D. What action or state am I trying to achieve?
E. Does the problem appear random or can you establish a pattern?
Answer: C

11. NGX Wire Mode allows:
A. Peer gateways to establish a VPN connection automatically from predefined preshared secrets.
B. Administrators to verify that each VPN-1 SecureClient is properly configured, before allowing it access to the protected domain.
C. Peer gateways to fail over existing VPN traffic, by avoiding Stateful Inspection.
D. Administrators to monitor VPN traffic for troubleshooting purposes.
E. Administrators to limit the number of simultaneous VPN connections, to reduce the traffic load passing through a Security Gateway.
Answer: C

12. VPN debugging information is written to which of the following files?
A. FWDIR/log/ahttpd.elg
B. FWDIR/log/fw.elg
C. $FWDIR/log/ike.elg
D. FWDIR/log/authd.elg
E. FWDIR/log/vpn.elg
Answer: C

13. Which of the following vpn debug options purges ike.elg and vpnd.elg, and creates a time stamp before starting ike debug and vpn debug at the same time?
A. ike on
B. timeon
C. trunc
D. ikefail
E. mon
Answer: C

14. When VPN-1 NGX starts after reboot, with no installed Security Policy, which of these occurs?
A. All traffic except HTTP connections is blocked.
B. All traffic except SmartDefense Console connections is blocked.
C. All traffic is blocked.
D. All traffic except SmartConsole/SmartCenter Server connections is blocked.
E. All traffic is allowed.
Answer: D