CheckPoint Accelerated CCSE NGX (156-915.1) Sample Questions:

1. When you hide a rule in a Rule Base, how can you then disable the rule?

A) Open the Rule Menu, and select Hide and view hidden rules. Select the rule, right-click, and select Disable.
B) Uninstall the Security Policy, and then disable the rule.
C) Clear Hide from Rules drop-down menu, then right-click and select "Disable Rule (s)".
D) Run cpstop and cpstart on the SmartCenter Server, then disable the rule.
E) When a rule is hidden, it is automatically disabled. You do not need to disable the rule again.

2. You are preparing to configure your VoIP Domain Gatekeeper object. Which two other objects should you have created first?

A) An object to represent the call manager. AND an object to represent the host on which the transmission router is installed.
B) An object to represent the PSTN phone network, AND an object to represent the IP phone network
C) An object to represent the IP phone network, AND an object to represent the host on which the gatekeeper is installed.
D) An object to represent the IP phone network, AND an object to represent the host on which the proxy is installed.
E) An object to represent the Q.931 service origination host. AND an object to represent the H.245 termination host.

3. Jordan's company is streaming training videos provided by a third party on the Internet.
Jordan configures NGX so that each department ONLY views Webcasts specific to its department. Jordan created and configured the multicast groups for all interfaces, and configures them to "Drop all multicast except those whose destination is in the list".
However, no multicast transmissions are coming from the Internet. What is a possible cause for the connection problem?

A) Anti-spoofing is enabled. NGX cannot pass multicast traffic, if anti-spoofing is enabled.
B) Multicast groups are configured improperly on the external interface properties of the Security Gateway object.
C) The Multicast Rule is below the Stealth Rule. NGX can only pass multicast traffic, if the Multicast Rule is above the Stealth Rule.
D) Jordan did not create the necessary "to and through" Rules, defining how NGX will handle the multicast traffic.
E) NGX does not support multicast routing protocols and streaming media through the Security Gateway.

4. Which of these changes to a Security Policy optimizes Security Gateway performance?

A) Using domain objects in rules when possible
B) Putting the least-used rule at the top of the Rule Base.
C) Removing old or unused Security Policies from Policy Packaes.
D) Logging rules as much as possible.
E) Using groups within groups in the manual NAT Rule Base

5. Where can a Security Administrator adjust the unit of measurement (bps, Kbps or Bps), for Check Point QoS bandwidth?

A) QoS Class objects
B) Global Properties
C) $CPDIR/conf/qos_props.pf
D) Advanced Action options in each QoS rule
E) Check Point gateway object properties

Solutions: