CheckPoint 156-915 Value Pack (Frequently Bought Together)

Eric wants to see all URLs? full destination paths in the SmartView Tracker logs, not just the fully qualified domain name of the Web servers. For example, the information field of a log entry displays the URL http://hp.msn.com/css/home/hpc11012.css. How can Eric best customize SmartView Tracker to see the logs he wants? Configure the URI resource, and select

• A. "tunneling" as the connection method
• B. "transparent" as the connection method
• C. "optimize URL logging"; use the URI resource in the rule, with action "accept"
• D. "Enforce URI capability"; use the UPI resource in the rule, with action "accept"

In a Management High Availablility (HA) configuration, you can configure synchronization to occur automatically, when:
1. The Security Policy is installed.
2. The Security Policy is saved.
3. The Security Administrator logs in to the secondary SmartCenter Server, and changes its status to active.
4. A scheduled event occurs.
5. The user database is installed.
Select the BEST response for the synchronization sequence. Choose one.

• A. 1,2,3,4
• B. 1,2,5
• C. 1,2,4
• D. 1,3,4
• E. 1,2,3

You create two Policy Packages for two NGX Security Gateways. For the first Policy Package, you selected security and Address Translation and QoS Policy. For the second Policy Package, you selected Security and Address Translation and Desktop Security Policy. In the first Policy Package, you enabled host-based port scan from the SmartDefense tab. You save and install the policy to the relevant Gateway object. How is the port scan configured on the second Policy Package's SmartDefense tab?

• A. Host-based port scan is enabled but it is not highlighted
• B. Host-based port scan is enabled, because SmartDefense settings are global.
• C. There is no SmartDefense tab in the second Policy Package.
• D. Host-based port scan is disabled by defauylt.

Jacob is using a mesh VPN Community to create a site-to-site VPN. The VPN properties in this mesh Community display in this graphic:

Which of the following statements is TRUE?

• A. If Jacob changes the setting, "Perform key exchange encryption with" from "3DES" to
  "DES", he will enhance the VPN Community's security and reduce encryption overhead.
• B. Jacob's VPN Community will perform IKE Phase 1 key-exchange encryption, using the longest key VPN-1 NGX supports.
• C. Jacob must change the data-integrity settings for this VPN Community. MD5 is incompatible with AES.
• D. If Jacob changes the setting "Perform IPsec data encryption with" from "AES-128" to
  "3DES", he will increase the encryption overhead.

Steve tries to configure Directional VPN Rule Match in the Rule Base. But the Match column does not have the option to see the Directional Match. Steve sees the following screen. What is the problem?

• A. Steve must enable a dynamic-routing protocol, such as OSPF, on the Gateways.
• B. Steve must enable VPN Directional Match on the gateway object's VPN tab.
• C. Steve must enable VPN Directional Match on the VPN Advanced screen, in Global properties.
• D. Steve must enable directional_match (true) in the objects_5_0.c file on SmartCenter Server.
• E. Steve must enable Advanced Routing on each Security Gateway.