Tag: 156-510
FLYDUMPS ensures the quality and value of the CheckPoint 156-510 exam sample questions, and one hundred percent pass the exam, let you can pass the CheckPoint 156-510 exam successfully in your first studying. In addition, Killtest provide you with high-quality CheckPoint 156-510exam sample questions to help you learn more about the CheckPoint 156-510 examination of information, learning more knowledge of the entire examination, complete your dream of entering the IT Dream. FLYDUMPS CheckPoint 156-510 exam sample questions are based on the actual template of CheckPoint 156-510 Exam. You will learn all the tactics and techniques in FLYDUMPS CheckPoint 156-510 exam sample questions.
QUESTION 127
What is the name of the traffic capture tool that is available on Unix platforms?
A. Network monitor
B. Snoop
C. Sniffer
D. Tcpdump
Correct Answer: B
QUESTION 128
When initially setting up high availability, where would you enable the high availability services?
A. The cpconfig utility
B. The fwstart script
C. The management server global properties screen
D. The gateway cluster properties screen
Correct Answer: A
QUESTION 129
What is true about hardening the operating system of a firewall gateway?
A. It is only necessary on a Solaris platform
B. It is necessary on both Solaris and NT platforms
C. It is not necessary
D. It is only necessary on an NT platform
Correct Answer: B QUESTION 130
What command would you use to initiate a packet capture on a Unix machine?
A. snoop -o filename
B. tcpdump -i filename
C. snoop -i filename
D. tcpdump -o filename
Correct Answer: A QUESTION 131
If you use the -a option in the “fw dbexport” command to export a subset of the possible user attributes. What happens if you import the exported file back into the FW-1 user database using the “fw import” command?
A. The database is merged with the subset database
B. You will get a warning, stating that you may delete part of your database
C. The process will error with no change to the original database
D. The database is overwritten with the subset database
Correct Answer: D QUESTION 132
How do you remake a connection between a management server and a firewall module, if not using backward compatibility?
A. Reboot
B. Bounce the management server
C. Remake the SIC connection
D. Remake the putkey association
Correct Answer: C QUESTION 133
What is true about the following command? snoop -i filename | more
A. The file named “filename” contains raw captured traffic
B. It analyses captured traffic
C. It will continue the display until it ends
D. It captures traffic
Correct Answer: AB QUESTION 134
When configuring automatic synchronization for HA management modules, which is NOT a valid trigger for the synchronization to take place?
A. When the policy is installed
B. When the policy is saved
C. Regularly after a specified period
D. When you log off the GUI client
Correct Answer: D
QUESTION 135
To create synchronization between gateways in NG, which file do you need to edit?
A. conf.sync
B. sync.conf
C. None
D. rulebases.fws
Correct Answer: C
QUESTION 136
When a primary gateway cluster member fails another will take over. When the primary recovers what is true?
A. The action depends on the configuration of the ClusterXL screen of the cluster properties
B. The primary always resumes primary function
C. The action depends on the configuration of the Cluster member gateway general properties
D. The primary will become a lower priority and not resume its primary function
Correct Answer: A
QUESTION 137
When exporting a checkpoint user database for importation to an LDAP server, what format should the output file take?
A. LDAP
B. Binary
C. LDIF
D. HTTP
Correct Answer: C
QUESTION 138
Which of the following are termed CPMAD global parameters?
A. MAD_Memory
B. MAD_syn_attack_action
C. MAD_number_of_connection_attempts
D. MAD_anti_spoofing_mode AC
Correct Answer: AC
QUESTION 139
What is true about the effects of configuring a high MAD_clean_interval in CPMAD?
A. It reduces CPU utilization
B. It increases CPU utilization
C. It decreases memory usage
D. It increases memory usage
Correct Answer: AD QUESTION 140
What is the meaning of the “collision” status when seen against a secondary management module?
A. Synchronization was attempted from both primary and secondary at the same time
B. The primary management module database lags behind the secondary
C. Both the primary and secondary management module have independently updated databases since the last synchronization
D. Synchronization has failed due to network problems
Correct Answer: C QUESTION 141
If you want to use information from a cpinfo file produced by a Windows platform, you first need to perform a series of operations to extract the file concerned. True or false?
A. False
B. True
Correct Answer: A QUESTION 142
What command would you use on a Solaris machine to increase the amount of memory allocated to the kernel to approximately 16Mbytes?
A. set fw:fwhmem=0x16
B. set fw:fwhmem=0x10
C. set fw:fwhmem=0x1000000
D. set fw:fwhmem=0x16000000
Correct Answer: C QUESTION 143
How would you specify the primary member of a gateway cluster?
A. On the gateway cluster properties screen select “cluster members”, then arrange priority sequence using the increase and decrease priority buttons
B. On the gateway cluster properties screen select “cluster members”, then select priority number (1 is the highest)
C. On the member gateway properties general screen arrange priority sequence using the increase and decrease priority buttons
D. On the member gateway properties general screen select priority number (1 is the highest)
Correct Answer: A QUESTION 144
Which debug option will gather information regarding the accept or drop action performed on traffic?
A. ioctl
B. packet
C. driver
D. kbuf
Correct Answer: B QUESTION 145
Which of the following files is held on a management module and cotains the whole rulebase?
A. rulebases_5_0.C
B. objects.C
C. objects_5_0.C
D. rulebases_5_0.fws
Correct Answer: D
QUESTION 146
In the peer status area of the high availability management module screen of the active server, there are defined status levels that can apply to a peer module. Which status implies that a secondary module has a later version of the database than the primary?
A. Advanced
B. Lagging
C. Collision
D. Never Synchronized
Correct Answer: A
QUESTION 147
On a Windows platform, you can enable VPN and IKE logging by setting an environment variable. What is the command to do that?
A. Setenv VPN_DEBUG 1
B. Setenv VPN_DEBUG 0
C. Set VPN_DEBUG=0
D. Set VPN_DEBUG=1
Correct Answer: D
QUESTION 148
To configure a fully overlapping encryption domain, what type of group(s) do you need to configure?
A. A group containing both gateways and all the networks they protect
B. A group containing both gateways only
C. A group containing all the networks that both gateways protect
D. Two groups, one containing both gateways and the networks that one protects. The other containing both gateways and the networks the other protects.
Correct Answer: A
QUESTION 149
What is the approximate memory requirement of a simple (I.e. not authenticated or encrypted) connection in VPN-1/FW-1?
A. 3 Kbytes
B. 70 bytes
C. 10 bytes
D. 1 Kbytes
Correct Answer: B
QUESTION 150
If you want to run the cpinfo utility to gather diagnostic information for a problematic enforcement module in a distributed system, what is true?
A. You should run cpinfo on the enforcement module only
B. You should run cpinfo on all the modules in the distributed system
C. You should run cpinfo on both the management and enforcement modules
D. You should run cpinfo on the management module only
Correct Answer: C QUESTION 151
Which two types of overlapping encryption domains are supported by FW-1?
A. Partial overlap
B. Full overlap
C. Proper subset
D. Partial subset
Correct Answer: BC QUESTION 152
Which is NOT a valid log file maintained on the SecuRemote client?
A. sr_watchdog_tde.log
B. sr_service_<serial number>.log
C. sr_background_tde.log
D. sr_gui_tde.log
Correct Answer: C QUESTION 153
Which debug option will gather information about input/output control messages, such as loading of FW-1 or kernel to daemon communications?
A. kbuf
B. ioctl
C. misc
D. driver
Correct Answer: B QUESTION 154
It is not possible to use two gateways running a standalone installation in an MEP environment. True or false?
A. False
B. True
Correct Answer: B QUESTION 155
How would you use a policy editor gui in local mode when using FW-1 NG FP-2?
A. Enter *local in the “management server” box of the GUI login screen
B. Check the “demo mode” box of the GUI login screen
C. Enter demo_mode in the “management server” box of the GUI login screen
D. Enter *local in the “user name” box of the GUI login screen
Correct Answer: AB QUESTION 156
How would you restart CPMAD on a firewall?
A. $FWDIR/conf/fwstart
B. $FWDIR/bin/cpmad
C. $FWDIR/cpmad/fwstart
D. $FWDIR/bin/fwstart
Correct Answer: D QUESTION 157
What is used by FW-1 to create a SIC certificate?
A. External CA
B. Putkey
C. LDAP
D. Internal CA
Correct Answer: D QUESTION 158
How would you find more information about the “fw tab” options?
A. fw tab help
B. fw tab -h
C. fw tab -?
D. fw tab options -h
Correct Answer: B QUESTION 159
What is contained in the rulebases.fws file?
A. Auditing information
B. All rulebases
C. All rulebases plus auditing information
D. Only the rulebase from the last load
Correct Answer: B QUESTION 160
When using management high availability, you can synchronize from the primary or secondary management server. True or false?
A. False
B. True
Correct Answer: A QUESTION 161
On a SecuRemote client, in which directory are the log files located?
A. $CPDIR/log
B. $SCDIR/log
C. $SRDIR/log
D. $FWDIR/log
Correct Answer: C QUESTION 162
If you were having problems with a CVP server, you may want to capture traffic to and from the server. What could you do to get this information?
A. Run “fw monitor” for port 18182 on the interface connected to the management server
B. Run “fw monitor” for port 18182 on the interface connected to the CVP server
C. Run “fw monitor” for port 18181 on the interface connected to the management server
D. Run “fw monitor” for port 18181 on the interface connected to the CVP server
Correct Answer: D
QUESTION 163
When using backward compatibility, what is true?
A. It restricts inter-module communications to the putkey method
B. It allows the management of 4.1 gateways
C. It restricts inter-module communication to the SIC method
D. It allows the use of the old putkey function
Correct Answer: BD
QUESTION 164
Why would you disable NetBEUI on a FW-1 Windows Platform?
A. It can cause FW-1 to crash
B. It clashes with internal FW-1 protocols
C. It is an inefficient protocol
D. It is a security risk
Correct Answer: D
QUESTION 165
What does “resolver_ttl” do in relation to SecuRemote configuration?
A. Specifies the interval in seconds between RDP status queries
B. Specifies that RDP status queries are sent automatically
C. Specifies the number of seconds that a Securemote client waits for a reply to a RDP status query
D. Controls the time to live when accessing a DNS server
Correct Answer: C
By the use of CheckPoint 156-510 exam sample questions along with most relevant CheckPoint 156-510 questions and answers as they are an ideal study tool to pass CheckPoint 156-510 test in very first try. FLYDUMPS CheckPoint 156-510 exam sample questions are developed by our team of IT experts. Send us a scanned copy of your failed exam and we will promptly proceed to refund. The last package which is certainly not the least but a royal pack, which can give you full preparation on the subject and provide you 100 per cent guarantee of clearing the CheckPoint 156-510 exam sample questions. We are all well aware that a major problem in the IT industry is that there is a lack of quality questions answers.
Welcome to download the newest Pass4itsure eada10 VCE dumps: http://www.pass4itsure.com/eada10.html
Are you struggling for the CheckPoint 156-510 exam? Good news,Flydumps IT technical experts have collected and certified 445 questions and answers which are updated to cover the knowledge points and enhance candidates’abilities.With CheckPoint 156-510 preparation tests you can pass the exam easily and go further on Microsoft career path.
QUESTION 101
When using the cphaprob command to list the interfaces on the local machine and their status, which form would you use?
A. cphaprob -I
B. cphaprob if
C. cphaprob ports
D. cphaprob list if
Correct Answer: B
QUESTION 102
If you have previously started debugging on the firewall, how would you cancel debugging?
A. fw ctl debug 0
B. fw ctl debug can
C. fw ctl debug stop
D. fw ctl dbstop
Correct Answer: A
QUESTION 103
In a fully overlapping encryption domain, a SecuRemote client will encrypt with the first gateway to reply. All subsequent connections will remain with that gateway for a set period. How long is that period?
A. 60 secs
B. 5 mins
C. 10 mins
D. 30 secs
Correct Answer: A
QUESTION 104
Which is NOT a valid entity in the LDAP tree structure?
A. OU
B. C
C. CN
D. CU
Correct Answer: D
QUESTION 105
Checkpoint provides several command line utilities to assist with the integration of LDAP servers. Which of the following is NOT one of them?
A. ldapsearch
B. ldapcompare
C. ldapmodify
D. ldapfind
Correct Answer: D
QUESTION 106
If you have a Unix core dump, in which directory will the dump be created?
A. In the directory from which the executable that caused the dump is running
B. In the directory given by the command “# find / -name core”
C. In a directory named /dump
D. in the root directory
Correct Answer: AB QUESTION 107
What command would you use to check the current status of high availability gateways within a cluster?
A. cphaprob list
B. cphaprob report
C. cphaprob state
D. cphaprob register
Correct Answer: C QUESTION 108
If you run the “fw debug fwd on” command, where is the output directed to?
A. The kernel buffer
B. The screen
C. To a file called $FWDIR/log/fwd.elg
D. To a file called $FWDIR/conf/fwd_output.log
Correct Answer: C QUESTION 109
On a Unix system, what is the output from the command “# file core”
A. The size of the file named core
B. A textual listing of the contents of the file named core
C. The name of the executable that generated the core dump
D. The location of the file named core
Correct Answer: C QUESTION 110
What is true about high availability management modules?
A. Primary and secondary modules can be on different platforms, but must run the same build of FW1
B. Primary and Secondary modules must be on the same platform
C. The active primary module cannot be manually switched to secondary
D. They are only supported on distributed installations
Correct Answer: BD QUESTION 111
Which command would you use to enable debugging of IKE only?
A. fw debug ikeon
B. fwm debug ikeon
C. vpn debug ikeon
D. vpn debug on ikeon
Correct Answer: C QUESTION 112
In a proper subset encryption domain, to which gateway will SecuRemote attempt to create an encrypted connection?
A. SecuRemote will chose the gateway with the lowest cost
B. SecuRemote will prefer its primary gateway if both respond
C. SecuRemote will choose the gateway closest to the server
D. SecuRemote will use the first gateway to respond
Correct Answer: C QUESTION 113
Which type of overlapping encryption domain can be described as one domain being entirely contained within another domain?
A. Full overlap
B. Partial overlap
C. Proper subset
D. Partial subset
Correct Answer: C QUESTION 114
Where can a User Authority Server be installed?
A. A Windows machine with just a FW-1 enforcement module installed
B. A Solaris machine with just a FW-1 management module installed
C. A Solaris or Windows machine with any FW-1 module installed
D. A Windows Domain Controller
Correct Answer: CD QUESTION 115
If VPN-1/FW-1 has a blue screen crash on a Windows NT platform, there is an extra file you should include in those sent to Checkpoint for analysis. Which is that extra file?
A. WINNT\system.dmp
B. WINNT\user.dmp
C. WINNT\memory.dmp
D. WINNT\core.dmp
Correct Answer: C QUESTION 116
In the following DN, which part is the root?
CN= John Doe, ou= Sales, o= Acme Corp, C= US
A. Acme Corp
B. John Doe
C. Sales
D. US
Correct Answer: D QUESTION 117
Which files are useful in the case of a Windows NT Dr. Watson error?
A. WINNT\memory.dmp
B. WINNT\drwtsn32.log
C. WINNT\system.dmp
D. WINNT\user.dmp Correct Answer: ABD
QUESTION 118
Why is a sniffer a security risk?
A. It can create a DOS attack
B. It can cause a firewall to crash
C. It can emulate an authorized workstation
D. It can record traffic, which may include clear text passwords
Correct Answer: D
QUESTION 119
When exporting a user database using the “fw dbexport” command. What is the default file used?
A. $FWDIR/user/def_file
B. $FWDIR/conf/user_def_file
C. $FWDIR/bin/user_def_file
D. $FWDIR/conf/user_export_file
Correct Answer: B
QUESTION 120
How can you analyze a file captured by the fw monitor utility?
A. Snoop
B. Snort
C. Spock
D. Sniff
Correct Answer: A
QUESTION 121
What is the name of the protocol analyzer that ships with WindowsNT/SMS?
A. Tcpdump
B. Network monitor
C. Snoop
D. Sniffer
Correct Answer: B
QUESTION 122
From where would you enable load sharing in an MEP configuration?
A. Global properties > VPN-1 Net > Advanced then select “enable load sharing in MEP configuration”
B. Global properties > Remote Access > Advanced then select “enable load sharing in MEP configuration”
C. Cluster properties > general tab >, select “enable load sharing in MEP configuration”
D. Global properties > VPN-1 Pro > Advanced then select “enable load sharing in MEP configuration”
Correct Answer: D
QUESTION 123
How would FW-1 communicate securely with an LDAP server?
A. SIC
B. Certificates
C. RDP
D. SSL
Correct Answer: D
QUESTION 124
What is meant by a promiscuous mode network capture tool?
A. It can run on any platform
B. It can monitor all traffic on the network not just that intended
C. for the adapter in the device
D. It can put traffic onto the network
E. It can emulate any other device on the network
Correct Answer: B
QUESTION 125
Which parameter would you use on the “fw dbexport” command in order to specify that exported users are to be added under the “o=Acme Corp, c=US” branch?
A. -s “o=Acme Corp, c=US”
B. -a “o=Acme Corp, c=US”
C. -k “o=Acme Corp, c=US”
D. -b “o=Acme Corp, c=US”
Correct Answer: A
QUESTION 126
What is not included in the output of the “fw ctl pstat” command?
A. System memory statistics
B. Policy name
C. Encryption statistics
D. Hash memory statistics
E. Translation statistics
Correct Answer: B
The importance of certification in the field of IT cannot be denied, so FLYDUMPS CheckPoint 156-510 practice test would be the best guide for you. We are so surprised to see countless opportunities after passing the HDI exam. FLYDUMPS proved to be the best source of help for me and the products offered by FLYDUMPS enabled me to achieve the desired results. If you want to pass the HDI Certified Specialist exam, the most reliable source is FLYDUMPS CheckPoint 156-510 practice test. CheckPoint 156-510 practice test supplied by IBM which can be very helpful support materials and can provide great amount of help, while preparing for CheckPoint 156-510 test.
Pass4itsure eada10 dumps with PDF + Premium VCE + VCE Simulator: http://www.pass4itsure.com/eada10.html
CheckPoint 156-510 Dumps PDF, Prepare for the CheckPoint 156-510 Exam
Flydumps CheckPoint 156-510 exam questions which contain almost 100% correct answers are tested and approved by senior Microsoft lecturers and experts.They have been devoting themselves to providing candidates with the best study materials to make sure what they get are valuable.Get a complete hold on CheckPoint 156-510 exam dumps on Flydumps, you will pass the exam absolutely.
QUESTION 63
Which three files can be generated by a Unix core dump?
A. vmunix.
B. vmcore.
C. unixdump
D. core
Correct Answer: ABD QUESTION 64
What is NOT true when using MEP encryption topologies?
A. Gateways must use the same FW-1 build level
B. Gateways must use the same management module
C. You must use a distributed installation of VPN-1/FW-1
D. Gateways must run identical policies
Correct Answer: D QUESTION 65
What is another name for an LDAP server?
A. Account server
B. DN Unit
C. User server
D. Account unit
Correct Answer: D QUESTION 66
Exhibit missing.
Please look at the exhibit, which is a sample output from a “fw ctl pstat” command. How many NAT
operations have there been in an outgoing direction?
A. 20760405
B. 340
C. 312
D. 523
Correct Answer: C QUESTION 67
Which file would you modify in order to enable and configure CPMAD?
A. $FWDIR/bin/cpmad_config.conf
B. $FWDIR/conf/cpmad.conf
C. $FWDIR/conf/cpmad_config.conf
D. $FWDIR//cpmad/config.conf
Correct Answer: C QUESTION 68
For most efficient rulebase operation, which of the following objects would it be preferable to use if you have many contiguous addresses to translate using static NAT? Assume you could validly use any of them.
A. Network
B. Workstation
C. Range
Correct Answer: A QUESTION 69
Where would it be best to locate a CVP server?
A. On an internal user lan network
B. On a firewalled gateway
C. On a separate isolated segment or DMZ
D. On a remote network
Correct Answer: C QUESTION 70
What is the result of not configuring CPMAD with enough memory?
A. Some attacks will not be detected
B. It will automatically grab more memory
C. It will automatically flush out old events to create more memory
D. It will exit
Correct Answer: D QUESTION 71
In a SEP HA environment not using load sharing, the external interfaces of each cluster member must have the same IP address. True or false?
A. False
B. True
Correct Answer: B QUESTION 72
Which command would you use to copy a user database file into VPN-1/FW-1?
A. dbimport <filename>
B. fwm dbimport -s “o=city,c=country”
C. fwm dbexport <filename>
D. fwm dbimport -f <filename>
Correct Answer: D QUESTION 73
When would you need to import the Checkpoint schema into an LDAP server?
A. If you use the severs management interface to update the LDAP database
B. Never, the LDAP standard caters for it
C. If you use Policy Editor to update the LDAP database
D. Always, when you use an LDAP server
Correct Answer: C QUESTION 74
Which is designated the primary management module?
A. It is selected by priority numbers (1 is the highest priority)
B. The last management module installed
C. The first management module installed
D. It is chosen at random
Correct Answer: C QUESTION 75
You do not need LDAP schema checking enabled if you want to use policy editor user manager to add a new LDAP user. True or false?
A. False
B. True
Correct Answer: A QUESTION 76
On a Windows NT FW-1 system, how would you increase the amount of memory allocated to the kernel to 5MBytes?
A. Set the value of HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Service\FW1\Parameters\Memory to 5000000
B. Type “# zap -s _fwhmem $FWDIR/modules/fwmod.o 5000000”
C. Type “set fw:fwhmem=5000000”
D. Type”# echo “fwhmem?W500000″ | adb -w /stand/vmnt”
Correct Answer: A QUESTION 77
A collection of gateways that are synchronized in a VPN topology are called a ___________?
A. MEP
B. Gateway group
C. Gateway cluster
D. Gateway pool
Correct Answer: C QUESTION 78
When using LDAP what may be a reason for a users password to be rejected?
A. The password does not contain a numeric character
B. The user is defined differently in the VPN-1/FW-1 user database
C. than in the LDAP server
D. The user is defined in both VPN-1/FW-1 and the LDAP server
E. The password is also used by someone else
Correct Answer: B QUESTION 79
Which API is used by applications to write to the VPN-1/FW-1 log database?
A. ELA
B. EAL
C. LEA
D. LAA
Correct Answer: A QUESTION 80
When are the statistics provided by the fw ctl pstat command reset?
A. After restarting FW-1
B. Whenever you purge the log file
C. On a reboot
D. On entering the command “fw ctl clear”
Correct Answer: AC QUESTION 81
You need to set the environment variable $FWDIR before running cpifno. True or false?
A. True
B. False
Correct Answer: A QUESTION 82
FW-1 does not support multi level proper subset encryption domains. True or false?
A. False
B. True
Correct Answer: A QUESTION 83
What is true about conflicting configuration parameters between a gateway cluster and a gateway defined as a member of that cluster?
A. Some gateway parameters override cluster parameters
B. Some cluster parameters override gateway parameters
C. The cluster configuration is overridden by the primary gateway parameters
D. All the gateway parameters remain intact
Correct Answer: B QUESTION 84
If you are troubleshooting a SMTP security server problem, which file could be useful?
A. smtp.dmp
B. smtpd.log
C. asmtpd.log
D. cvp.conf
Correct Answer: C QUESTION 85
Please look at the exhibit, which is a sample output from a “fw ctl pstat” command. There is a memory utilization problem here. True or false?
A. False
B. True
Correct Answer: A QUESTION 86
Which is NOT a group of files that can be synchronized in a HA management environment?
A. Configuration database files
B. Install files
C. Fetch files
D. log files
Correct Answer: D QUESTION 87
When SEP gateways are said to be synchronized, what exactly is synchronized between them?
A. Rulebase
B. User database
C. Objects database
D. State tables
Correct Answer: D QUESTION 88
On which module(s) does CPMAD run?
A. An external server
B. The management module
C. The Checkpoint GUI
D. The enforcement module
Correct Answer: B QUESTION 89
How many LDAP servers are supported by VPN-1/FW-1?
A. 1
B. 2, one primary and one backup
C. Unlimited
D. Up to 4
Correct Answer: C QUESTION 90
When debugging a Unix based management server you could use the fwd -d command. True or false?
A. False
B. True
Correct Answer: A
QUESTION 91
Asymmetric routing can be a problem in which type of encryption domain topology?
A. Partial overlapping
B. Fully overlapping domains in gateways using hide mode NAT for all connections
C. none overlapped backup domains with internal links between the two
D. Proper subset
Correct Answer: C
QUESTION 92
What is the function of the “fw hastat <target>” command?
A. It forces failover of high availability gateways
B. It starts HA on high availability capable gateways
C. It provides operational status of high availability gateways
D. It is an invalid command, you should use cphaprob instead
Correct Answer: C
QUESTION 93
When you are logged into the active management server and viewing the high availability management screen, what icon is displayed if there is a recommendation or error that FW-1 wishes to bring to your attention?
A. A lightbulb
B. A red question mark
C. A red hash
D. A green tick
Correct Answer: A
QUESTION 94
Which of the following platforms cannot support CPMAD?
A. Win2000
B. None of these
C. Nokia IP530
D. Solaris
E. Win NT
F. Linux
Correct Answer: B
QUESTION 95
How would you perform a manual synchronization in a HA management module environment?
A. On the primary login and click on the “synchronize me” button of the HA management manager window
B. Perform the “fw hamansync” command
C. On the secondary login and click on the “synchronize me” button of the HA management manager window
D. On the primary use Policy editor > Policy > Management high availability > click on the “synchronize”
button Correct Answer: CD QUESTION 96 When starting FW-1 debugging, you may want to send all the output to a buffer, what command(s) would you use to do this?
A. fw ctl buffer -debug
B. fw ctl buf fw ctl debug
C. fw ctl -b debug
D. fw ctl debug -buf
Correct Answer: D QUESTION 97
On a Windows NT platform, the specified state of the OS memory strategy can impact the performance of FW-1. What is the default state for this?
A. Maximize throughput for network applications
B. Maximize throughput for file sharing
C. Maximize throughput for video applications
D. Maximize throughput for disk access
Correct Answer: B QUESTION 98
In an LDAP database two entries cannot have the same common name (CN). True or false?
A. False
B. True
Correct Answer: A QUESTION 99
If you want to receive debug information for HTTP or FTP security servers when debugging the firewall daemon, you must use the “fw debug fwd on” command. True or false?
A. True
B. False
Correct Answer: B QUESTION 100
What are the three types of overlapping encryption domains?
A. Partial overlap
B. Proper subset
C. Partial subset
D. Full overlap
Correct Answer: ABD
This volume is part of the Exam Certification Guide Series from CheckPoint 156-510 exam. CheckPoint 156-510 exam in this series provide officially developed exam preparation materials that offer assessment, review, and practice to help CheckPoint 156-510 Certification candidates identify weaknesses,concentrate their study efforts,and enhance their confidence as CheckPoint 156-510 exam day nears.
The 100% valid latest CheckPoint 156-510 question answers ensure you 100% pass! And now we are offering the free CheckPoint 156-510 new version along with the VCE format Checkpoint 156-815 practice test. Free download more new CheckPoint 156-510 PDF and VCE on Flydumps.com.
QUESTION 51
The -u option on fwd designates that this enforcement module allows SecuRemote connections. This option is on by default, true or false?
A. False
B. True
Correct Answer: B QUESTION 52
IP pools can be used in MEP configurations for what purpose?
A. To allow multiple connections from one client
B. To ensure that valid addresses are assigned to clients
C. To reserve connections for clients
D. To prevent asymmetric routing issues
Correct Answer: D QUESTION 53
In a high availability management module situation, in normal circumstances what is true?
A. The primary module is limited to read only access, a secondary can grant read/write access
B. The primary and secondary modules can both grant read/write access
C. The primary and secondary modules are both limited to read only access once initialized
D. The primary module can grant read/write access, a secondary is limited tot read only access
Correct Answer: D QUESTION 54
When displaying FW-1 statistics using the “fw ctl pstat” command, you may see negative values for kernel memory. What is true about this?
A. There is a memory fault
B. FW-1 is currently not active
C. This does not indicate a problem
D. Memory is being over utilized
Correct Answer: C QUESTION 55
To get the most efficient operation, you should place the rules most often matched at the bottom of the rulebase, and the rules least often matched at the top. True or false?
A. False
B. True
Correct Answer: A QUESTION 56
Which default ports are used by LDAP?
A. Port 636 for a standard connection
B. Port 389 for a standard connection
C. Port 389 for a SSL connection
D. Port 636 for a SSL connection
Correct Answer: BD
QUESTION 57
What is the default value for the timeout on cached users, applied when using an LDAP server as a user database?
A. 300 secs
B. 0 secs (ie no caching)
C. 600 secs
D. 900 secs
Correct Answer: D
QUESTION 58
Which two CPMAD parameters are directly used to determine if an attack is taking place?
A. Resolution
B. Action
C. Time_interval
D. Repetitions
E. Mode
Correct Answer: CD
QUESTION 59
In a load sharing SEP configuration, what mechanism is used to ensure that each gateway sees all the traffic it needs to?
A. The gateway cluster IP address is used
B. The receiving gateway forwards the packets to the others
C. All packets are broadcast
D. Each gateways is sent the packets separately
Correct Answer: A
QUESTION 60
Which is the correct format on a Windows platform to enable debug mode in fwd on an enforcement module only server?
A. fwd -d -n
B. fwd -d
C. fw d -d -n
D. fw d -d
Correct Answer: D
QUESTION 61
When configuring an MEP VPN facility, you would specify a backup gateway in the VPN screen of the gateway properties window. What could be the reason for the backup gateway not being available in the drop down list?
A. The backup gateway is already a backup to another gateway
B. The backup gateway is not running VPN-1
C. The backup gateway is not defined as an internal object on this gateway
D. The backup gateway is not defined as an external object on this gateway
Correct Answer: C
We provide CheckPoint 156-510 help and information on a wide range of issues. CheckPoint 156-510 is professional and confidential and your issues will be replied within 12 hous. CheckPoint 156-510 free to send us any questions and we always try our best to keeping our Customers Satisfied.