Exam1pass
Easiest way to pass IT exams
Exam1pass Help You Pass Any IT Exam
http://www.exam1pass.com
Exam : CheckPoint 156-515.65
Title : Check Point Certified
Security Expert Plus NGX R65
Version : Demo
Exam1pass
Easiest way to pass IT exams
Exam1pass Help You Pass Any IT Exam
http://www.exam1pass.com
1．Which files should be acquired from a Windows 2003 Server system crash with a Dr.
Watson error?
A. drwtsn32.log
B. vmcore.log
C. core.log
D. memory.log
E. info.log
Answer: A
2．VPN debugging information is written to which of the following files?
A. FWDIR/log/ahttpd.elg
B. FWDIR/log/fw.elg
C. $FWDIR/log/ike.elg
D. FWDIR/log/authd.elg
E. FWDIR/log/vpn.elg
Answer: C
3．fw monitor packets are collected from the kernel in a buffer. What happens if the buffer
becomes full?
A. The information in the buffer is saved and packet capture continues, with new data
stored in the buffer.
B. Older packet information is dropped as new packet information is added.
C. Packet capture stops.
D. All packets in it are deleted, and the buffer begins filling from the beginning.
Answer: D
4．Which file provides the data for the host_table output, and is responsible for keeping a
record of all internal IPs passing through the internal interfaces of a restricted hosts
licensed Security Gateway?
A. hosts.h
B. external.if
C. hosts
D. fwd.h
E. fwconn.h
Answer: D
5．You modified the *def file on your Security Gateway, but the changes were not applied.
Why?
A. There is more than one *.def file on the Gateway.
B. You did not have the proper authority.
C. *.def files must be modified on the SmartCenter Server.
D. The *.def file on the Gateway is read-only.
Answer: C
Exam1pass
Easiest way to pass IT exams
Exam1pass Help You Pass Any IT Exam
http://www.exam1pass.com
6．Assume you have a rule allowing HTTP traffic, on port 80, to a specific Web server in a
Demilitarized Zone (DMZ). If an external host port scans the Web server's IP address,
what information will be revealed?
A. Nothing; the NGX Security Server automatically block all port scans.
B. All po