156-590 Practice Questions

A.  

The best practice for all Check Point delivered profiles and object is to first clone them and work on the clones.

B.  

The impact is minimum if you first delete all of them and then build them from scratch.

C.  

The impact can be minimized if you use the performance check tool. You can enable it in IPS protections - > actions - > Run Protection performance check tool.

D.  

There is no performance or security impact in changing the Preconfigured Profiles.

A.  

update time

B.  

protection

C.  

threat year

D.  

release date

A.  

Pre-infection

B.  

Post-infection

C.  

Pre-inspection

D.  

Post-inspection

A.  

Invasion Prevention Software

B.  

Intrusion Prevention System

C.  

Intrusion Prevention Software

D.  

Invasion Prevention System

A.  

fw dos rate

B.  

fwaccel rate

C.  

fw ctl dos

D.  

fwaccel dos rate

A.  

Best performance

B.  

Minimal resource utilization

C.  

Minimal buffering

D.  

Thorough protection

A.  

This defines the handling of traffic if no IPS rule applied to the appropriate packets.

B.  

This defines the handling of traffic if you do not have an IPS Policy as part of an ordered layer.

C.  

This feature is to prevent IPS Enforcement to interfere with important Security Gateway operations, such as Control Connections.

D.  

This defines the handling of traffic if you do not have an IPS Policy as part of an Inline layer.

A.  

This command is to enable acceleration on QoS packets.

B.  

You can check the percentage of F2F connections along with the reason why those connections could not be accelerated.

C.  

The command is used to examine traffic utilization statistics.

D.  

You can check the SecureXL status of your Security Gateway.

A.  

Multiple Threat Prevention Policies can be assigned to one Security Gateway.

B.  

The Threat Prevention Policy can override an Access Control Policy Drop or Reject.

C.  

In a case of a conflict, the Threat Prevention Policy takes precedence over an Access Control Policy.

D.  

The Threat Prevention Policy is only applied after traffic is accepted by Access Control Policy.

A.  

IPS Protections

B.  

UserCheck

C.  

Indicators

D.  

Malicious Activity Detection