CheckPoint 156-915 Exam Overview:
| Certification Vendor: | Check Point |
|---|---|
| Exam Name: | Accelerated CCSE NGX |
| Exam Number: | 156-915.1 / 156-915 |
| Exam Format: | Scenario-based, Multiple Choice |
| Exam Duration: | 90 minutes |
| Certificate Validity Period: | 2 years |
| Passing Score: | 70% |
| Related Certifications: | Check Point Certified Security Administrator (CCSA) Check Point Certified Security Expert (CCSE) NGX |
| Real Exam Qty: | 70-90 |
| Exam Price: | $200-$250 USD |
| Available Languages: | English |
| Recommended Training: | Check Point CCSE NGX Official Training |
| Exam Registration: | Check Point Official Certification Pearson VUE Registration |
| Sample Questions: | CheckPoint 156-915 Sample Questions |
| Exam Way: | Onsite at Pearson VUE test centers / Online proctored |
| Pre Condition: | Valid Check Point CCSA certification or prior CCSE NG/AI certification |
| Official Syllabus URL: | https://www.checkpoint.com/training-and-certification/certification-exams/ |
CheckPoint 156-915 Exam Syllabus Topics:
| Section | Weight | Objectives |
|---|---|---|
| Topic 1: Security Policy Management | 25% | - NAT configuration - Rule base configuration - Object management - Policy installation & verification |
| Topic 2: High Availability & Performance | 15% | - Backup & restore procedures - SecureXL acceleration - ClusterXL configuration - SmartUpdate & upgrades |
| Topic 3: VPN & Remote Access | 20% | - Remote Access VPN - Site-to-site VPN tunnels - LDAP integration & authentication - Certificate-based authentication |
| Topic 4: Monitoring & Troubleshooting | 20% | - Traffic monitoring & analysis - Common issues resolution - Command-line administration - SmartView Tracker logging |
| Topic 5: NGX Architecture & Deployment | 20% | - Upgrade from NG with AI R55 - VPN-1 NGX components - SecurePlatform & Windows installation - Distributed deployment |
CheckPoint Accelerated CCSE NGX (156-915.1) Sample Questions:
Question 1
You users defined in a Windows 2000 Active Directory server. You must add LDAP users to a Client Authentication rule. Which kind of user group do you need in the Client Authentication rule in NGX?
A. A group with generic* user
B. External-user group
C. All Users
D. LDAP group
E. LDAP account-unit group
Question 2
Jack's project is to define the backup and restore section of his organization's disaster recovery plan for his organization's distributed NGX installation. Jack must meet the following required and desired objectives:
Required Objective: The security policy repository must be backed up no less frequently than every 24 hours.
Desired Objective: The NGX components that enforce the Security Policies should be backed up no less frequently than once a week.
Desired Objective: Back up NGX logs no less frequently than once a week.
Administrators should be able to view backed up logs in SmartView Tracker.
Jack's disaster recovery plan is as follows:
1.*Use the cron utility to run the upgrade_export command each night on the SmartCenter Servers. Configure the organization's routine backup software to back up the files created by the upgrade_export command.
2.*Configure the SecurePoatform backup utility to back up the Security Gateway every Saturday night.
3.*Use the cron utility to run the upgrade_export command each Saturday night on the Log Servers. Configure an automatic, nightly logexport, Configure the organization's routine backup software to backup the exported logs every night.
Jack's plan:
A. Meets the required objective and both desired objectives.
B. Meets the required objective and only one desired objective
C. Meets the required objective but does not meet either desired objective.
D. Does not meet the required objective.
Question 3
Frank wants to know why users on the corporate network cannot receive multicast transmission from the Internet. An NGX Security Gateway protects the corporate network from the Internet. Which of the following is a possible cause for the connection problem?
A. Anti-spoofing is enabled. NGX cannot pass multicast traffic, if anti-spoofing is enabled.
B. The Multicast Rule is below the Stealth Rule. NGX can only pass multicast traffic, if the Multicast Rule is above the Stealth Rule.
C. NGX does not support multicast routing protocols and streaming media through the Security Gateway.
D. Frank did not install the necessary multicast license with SmartUpdate, when he upgraded to NGX.
E. Multicast restrictions are not configured properly on the corporate internal network interface properties of the Security Gateway object.
Question 4
From the following output of cphaprob state, which ClusterXL mode is this?
A. Legacy mode
B. Load Balancing Mode
C. Unicast mode
D. New mode
E. Multicast mode
Question 5
What is the behavior of ClusterXL in a High Availability environment?
A. Both members respond to the virtual IP address, and both members pass traffic when using their physical addresses.
B. The passive member responds to the virtual IP address, and both members route traffic when using their physical addresses.
C. Both members respond to the virtual IP address, but only the active member is able to pass traffic.
D. The active member responds to the virtual IP address, and is the only member that passes traffic
E. The active member responds to the virtual IP address, and both memers pass traffic when using their physical addresses.
Solutions:
| Question 1 Answer: D | Question 2 Answer: B | Question 3 Answer: E | Question 4 Answer: C | Question 5 Answer: D |


PDF Version Demo






We are confident about the products and aim to help you pass with ease. In case of failure, we will provide a no hassle full money back guarantee for the purchasing fee.
1114 Customer Reviews
Quality and ValueITbraindumps Practice Exams are written to the highest standards of technical accuracy, using only certified subject matter experts and published authors for development - no all study materials.
Tested and ApprovedWe are committed to the process of vendor and third party approvals. We believe professionals and executives alike deserve the confidence of quality coverage these authorizations provide.
Easy to PassIf you prepare for the exams using our ITbraindumps testing engine, It is easy to succeed for all certifications in the first attempt. You don't have to deal with all dumps or any free torrent / rapidshare all stuff.
Try Before BuyITbraindumps offers free demo of each product. You can check out the interface, question quality and usability of our practice exams before you decide to buy.