Check Point Certified Expert NGX R65: 156-315.65 Exam
156-315.65 Questions & Answers
Exam Code: 156-315.65
Exam Name: Check Point Certified Expert NGX R65
Q & A: 205 Q&As
Part:
1: What action can be run from SmartUpdate NGX R65?
A.remote_uninstall_verifier
B.upgrade_export
C.mds_backup
D.cpinfo
Correct Answers: D
2: What tools CANNOT be launched from SmartUpdate NGX R65?
A.cpinfo
B.SecurePlatform Web UI
C.Nokia Voyager
D.snapshot
Correct Answers: D
3: Choose all correct statements. SmartUpdate, located on a VPN-1 NGX SmartCenter Server,
allows you to:
(1) Remotely perform a first time installation of VPN-1 NGX on a new machine
(2) Determine OS patch levels on remote machines
(3) Update installed Check Point and any OPSEC certified software remotely
(4) Update installed Check Point software remotely
(5) Track installed versions of Check Point and OPSEC products
(6) Centrally manage licenses
A.4, 5, and 6
B.2, 4, 5, and 6
C.1 and 4
D.1, 3, 4, and 6
Correct Answers: B
4: You are a Security Administrator preparing to deploy a new HFA (Hotfix Accumulator) to ten
Security Gateways at five geographically separated locations. What is the BEST method to
implement this HFA?
A.Send a Certified Security Engineer to each site to perform the update
B.Use SmartUpdate to install the packages to each of the Security Gateways remotely
C.Use a SSH connection to SCP the HFA to each Security Gateway. Once copied locally, initiate a
remote installation command and monitor the installation progress with SmartView Monitor.
D.Send a CDROM with the HFA to each location and have local personnel install it
Correct Answers: B
5: You are using SmartUpdate to fetch data and perform a remote upgrade of an NGX Security
Gateway.Which of the following statements is FALSE?
A.If SmartDashboard is open during package upload and upgrade, the upgrade will fail.
B.A remote installation can be performed without the SVN Foundation package installed on a remote NG with Application Intelligence Security Gateway
C.SmartUpdate can query the SmartCenter Server and VPN-1 Gateway for product information
D.SmartUpdate can query license information running locally on the VPN-1 Gateway
Correct Answers: B
6: What port is used for communication to the UserCenter with SmartUpdate?
A.HTTP
B.HTTPS
C.TCP 8080
D.CPMI
Correct Answers: B
7: What physical machine must have access to the UserCenter public IP when checking for new
packages with SmartUpdate?
A.VPN-1 Security Gateway getting the new upgrade package
B.SmartUpdate installed SmartCenter Server PC
C.SmartUpdate Repository SQL database Server
D.SmartUpdate GUI PC
Correct Answers: D
8: What action CANNOT be run from SmartUpdate NGX R65?
A.Get all Gateway Data
B.Reboot gateway
C.Preinstall verifier
D.Fetch sync status
Correct Answers: D
9: You plan to migrate an NG with Application Intelligence (AI) R55 SmartCenter Server on
Windows to VPN-1 NGX R65. You also plan to upgrade four VPN-1 Pro Gateways at remote
offices, and one local VPN-1 Pro Gateway at your company’s headquarters. The SmartCenter
Server configuration must be migrated. What is the correct procedure to migrate the
configuration?
A.1. From the VPN-1 NGX R65 CD on the SmartCenter Server, select “Upgrade”.
2. Reboot after installation and upgrade all licenses via SmartUpdate.
3. Reinstall all gateways using NGX R65 and install a policy.
B.1. From the VPN-1 NGX R65 CD in the SmartCenter Server, select “Export”.
2. Install VPN-1 NGX R65 on a new PC using the option “Installation using imported
configuration”
3. Reboot after installation and upgrade all licenses via SmartUpdate.
4. Upgrade software on all five remote Gateways via SmartUpdate.
C.1. Copy the $FWDIR\conf directory from the SmartCenter Server.
2. Save directory contents to another file server.
3. Uninstall the SmartCenter Server, and install a new SmartCenter Server.
4. Move the saved directory contents to $FWDIR\conf replacing the default installation files. 5. Reinstall all gateways using VPN-1 NGX R65 and install a Security Policy.
D.1. Upgrade the five remote Gateways via SmartUpdate.
2. Upgrade the SmartCenter Server, using the NGX R65 CD.
Correct Answers: B
10: You want to upgrade an NG with Application Intelligence R55 Security Gateway running on
SecurePlatform to VPN-1 NGX R65 via SmartUpdate. Which package(s) is(are) needed in the
Repository prior to upgrade?
A.SecurePlatform NGX R65 package
B.VPN-1 Power/UTM NGX R65 package
C.SecurePlatform and VPN-1 Power/UTM NGX R65 packages
D.SVN Foundation and VPN-1 Power/UTM packages
Correct Answers: A
11: Why should the upgrade_export configuration file (.tgz) be deleted after you complete the
import process?
A.It will prevent a future successful upgrade_export since the .tgz file cannot be overwritten.
B.It will conflict with any future upgrades run from SmartUpdate.
C.SmartUpdate will start a new installation process if the machine is rebooted.
D.It contains your security configuration, which could be exploited.
Correct Answers: D
12: Concerning these products: SecurePlatform, VPN-1 Pro Gateway, UserAuthority Server,
Nokia OS, UTM-1, Eventia Reporter, and Performance Pack, which statement is TRUE?
A.All but the Nokia OS can be upgraded to VPN-1 NGX R65 with SmartUpdate.
B.All but Performance Pack can be upgraded to VPN-1 NGX R65 with SmartUpdate.
C.All can be upgraded to VPN-1 NGX R65 with SmartUpdate.
D.All but the UTM-1 can be upgraded to VPN-1 NGX R65 with SmartUpdate.
Correct Answers: C
13: If a SmartUpdate upgrade or distribution operation fails on SecurePlatfom, how is the system
recovered?
A.SecurePlatform will reboot and automatically revert to the last snapshot version prior to
upgrade.
B.The Administrator must remove the rpm packages manually, and reattempt the upgrade.
C.The Administrator can only revert to a previously created snapshot (if there is one) with the
command cprinstall snapshot object name filename.
D.The Administrator must reinstall the last version via the command cprinstall revert object
name file name.
Correct Answers: A
14: Identify the correct step performed by SmartUpdate to upgrade a remote Security Gateway.
A.After selecting “Packages: Add from CD”, the entire contents of the CD are copied to the
packages directory on the selected remote Security Gateway.
B.After selecting “Packages: Add from CD”, the entire contents of the CD are copied to the
Package Repository on the Smart Center Server.
C.After selecting “Packages: Add from CD”, t he selected package is copied to the packages
directory on the selected remote Security Gateway.
D.After selecting “Packages: Add from CD”, the selected package is copied to the Package
Repository on the Smart Center Server.
Correct Answers: D
15: Identify the correct step performed by SmartUpdate to upgrade a remote Security Gateway.
A.After selecting “Packages > Distribute ” and choosing the target gateway, the selected package
is copied from the Package Repository on the Smart Center to the Security Gateway but the
installation IS NOT performed.
B.After selecting “Packages > Distribute ” and choosing the target gateway, the Smart Update
wizard walks the Administrator through a Distributed Installation.
C.After selecting “Packages > Distribute ” and choosing the target gateway, the selected packages
is copied from the Package Repository on the Smart Center to the Security Gateway and the
installation IS performed.
D.After selecting “Packages > Distribute ” and choosing the target gateway, the selected package
is copied from the CDROM of the Smart Update PC directly to the Security Gateway and the
installation IS performed.
Correct Answers: A
16: When upgrading to NGX R65, which Check Point products do not require a license upgrade to
be current?
A.VPN-1 NGX (R64) and later
B.VPN-1 NGX (R60) and later
C.VPN-1 NG with Application Intelligence (R54) and later
D.None, all versions require a license upgrade
Correct Answers: B
17: Which of these components does NOT require a VPN-1 NGX R65 license?
A.SmartConsole
B.Check Point Gateway
C.SmartCenter Server
D.SmartUpdate upgrading/patching
Correct Answers: A
18: Which of the following is a TRUE statement concerning contract verification?
A.Your contract file is stored on the User Center and fetched by the Gateway as needed.
B.Your contract file is stored on the SmartConsole and downloaded to the SmartCenter Server.
C.Your contract file is stored on the SmartConsole and downloaded to the Gateway.
D.Your contract file is stored on the SmartCenter Server and downloaded to the Security Gateway.
Correct Answers: D
19: Your current VPN-1 NG with Application Intelligence (AI) R55 stand-alone VPN-1 Pro
Gateway and SmartCenter Server runs on SecurePlatform. You plan to implement VPN-1 NGX
R65 in a distributed environment, where the new machine will be the SmartCenter Server, and the
existing machine will be the VPN-1 Pro Gateway only. You need to migrate the NG with AI R55
SmartCenter Server configuration, including licensing. How do you handle licensing for this NGX
R65 upgrade?
A.Request an NGX R65 SmartCenter Server license, using the new server’s IP address. Request a
new central NGX R65 VPN-1 Gateway license also licensed to the new SmartCenter Server’s IP
address.
B.Leave the current license on the gateway to be upgraded during the software upgrade. Purchase
a new license for the VPN-1 NGX R65 SmartCenter Server.
C.Request an NGX R65 SmartCenter Server license, using the existing gateway machine’s IP
address. Request a new local license for the NGX R65 VPN-1 Gateway using the new server’s IP
address.
D.Request an NGX R65 SmartCenter Server license, using the new server’s IP address. Request a
new central NGX R65 VPN-1 Gateway license for the existing gateway server’s IP address.
Correct Answers: A
20: You are running the license_upgrade tool on your SecurePlatform Gateway. Which of the
following can you NOT do with the upgrade tool?
A.Simulate the license-upgrade process.
B.View the licenses in the SmartUpdate License Repository.
C.Perform the actual license-upgrade process.
D.View the status of currently installed licenses.
Correct Answers: B
…go to http://www.lead2pass.com/156-315-65.html to download the lastest full version.
