Check Point Security Administration NGX II (156-315.1)

By admin, on August 21st, 2009

Prepares you for Certifications: CCSE NGX

Passing exams #156-215.1 and #156-315.1 earns you Check Point Certified Security Expert NGX (CCSE NGX) certification.

CheckPoint 156-315 Objectives

Use NGX tools to upgrade to NGX, from VPN-1/FireWall-1 NG or VPN-1 NG with Application Intelligence

Use NGX tools to install NGX on Windows Server 2003 and SecurePlatform

Distribute content security to Security Gateways, screen URL’s and block suspicious Web data, and provide auditing capabilities and detailed reports

Configure VPNs, using IKE encryption and Check Point’s simplified VPN setup

Use VPN-1 SecuRemote/SecureClient to configure remote access

Configure NGX to allow VoIP traffic to pass through a corporate Security Gateway

Given a variety of Check Point QoS configurations, determine how to allocate bandwidth

Identify features and limitations of Check Point High Availability solutions

Killtest CheckPoint 156-315 questions for example:

You work a network administrator for Certkiller .com. You configure a Check Point

QoS Rule Base with two rules: an H.323 rule with a weight of 10, and the Default

Rule with a weight of 10. The H.323 rule includes a per-connection guarantee of 384

Kbps, and a per-connection limit of 512 Kbps. The per-connection guarantee is for

four connections, and no additional connections are allowed in the Action

properties. If traffic passing through the QoS Module matches both rules, which of

the following is true?

A. Neither rule will be allocated more than 10% of available bandwidth.

B. The H.323 rule will consume no more than 2048 Kbps of available bandwidth.

C. 50% of available bandwidth will be allocated to the H.323 rule.

D. 50% of available bandwidth will be allocated to the Default Rule

E. Each H.323 connection will receive at least 512 Kbps of bandwidth.

Answer: B