CheckPoint 156-315.13 Actual Free Exam Questions & Community Discussion

Exam Code/Number: 156-315.13
Exam Name/Title: Check Point Certified Security Expert
Certification Provider: CheckPoint
Corresponding Certification: CCSE

Exam Questions: 639
Updated On: Aug 08, 2026

Question #34

Which of the following is a supported deployment for Connectra?

A. Solaris 10

B. IPSO 4.9 build 88

C. VMWare ESX

D. Windows server 2007

Discussion 0

Correct Answer: C Vote an answer

Question #35

A customer calls saying that a Load Sharing cluster shows drops with the error First packet is not SYN. Complete the following sentence. I will recommend:

A. configuring flush and ack

B. turning off SDF (Sticky Decision Function)

C. changing the load on each member

D. turning on SDF (Sticky Decision Function)

Discussion 0

Correct Answer: D Vote an answer

Question #36

True or false? After creating a snapshot of a Windows 2003 SP2 Security Management Server, you can restore it on a SecurePlatform R76 Security Management Server, except you must load interface information manually.

A. False, you cannot run the Check Point snapshot utility on a Windows gateway.

B. True, but only when the snapshot file is restored to a SecurePlatform system runningR76.10.

C. False, all configuration information conveys to the new system, including the interface configuration settings.

D. True, but only when the snapshot file is restored to a SecurePlatform system runningR76.20.

Discussion 0

Correct Answer: A Vote an answer

Question #37

You are running a VPN-1 NG with Application Intelligence R54 SecurePlatform VPN-1 Pro Gateway. The Gateway also serves as a Policy Server. When you run patch add cd from the NGX CD, what does this command allow you to upgrade?

A. Only VPN-1 Pro Security Gateway

B. All products, except the Policy Server

C. Only the OS

D. Both the operating system (OS) and all Check Point products

E. Only the patch utility is upgraded using this command

Discussion 0

Correct Answer: D Vote an answer

Question #38

A VPN Tunnel Interface (VTI) is defined on SecurePlatform Pro as:
vpn shell interface add numbered 10.10.0.1 10.10.0.2 madrid.cp
What do you know about this VTI?

A. 10.10.0.1 is the local Gateway's internal interface, and 10.10.0.2 is the internal interface of the remote Gateway.

B. The VTI name is madrid.cp.

C. The local Gateway's object name is madrid.cp.

D. The peer Security Gateway's name is madrid.cp.

Discussion 0

Correct Answer: D Vote an answer

Question #39

What is the reason for the following error?

A. Objects.C does not contain a cluster object.

B. Device Name contains non-ASCII characters.

C. A third-party cluster solution is implemented.

D. Cluster membership is not enabled on the gateway.

Discussion 0

Correct Answer: D Vote an answer

Question #40

In a R76 ClusterXL Load Sharing configuration, which type of ARP related problem can force the use of Unicast Mode (Pivot) configuration due to incompatibility on some adjacent routers and switches?

A. Unicast MAC address response to a Multicast IP request

B. Multicast MAC address response to a RARP request

C. MGCP MAC address response to a Multicast IP request

D. Multicast MAC address response to a Unicast IP request

Discussion 0

Correct Answer: D Vote an answer

Question #41

To help organize events, SmartReporter uses filtered queries. Which of the following is NOT an SmartEvent event property you can query?

A. Event: Critical, Suspect, False Alarm

B. Time:Last Hour, Last Day, Last Week

C. Type:Scans, Denial of Service, Unauthorized Entry

D. State:Open, Closed, False Alarm

Discussion 0

Correct Answer: A Vote an answer

Question #42

Your current stands alone VPN-1 NG with Application Intelligence (Al) R55 installation is running on SecurePlatform. You plan to implement VPN-1 NGX in a distributed environment, where the existing machine will be the VPN-1 Pro Gateway. An additional machine will serve as the SmartCenter Server. The new machine runs on a Windows Server 2003. You need to upgrade the NG with Al R55 SmartCenter Server configuration to VPN-1 NGX.
How do you upgrade to VPN-1 NGX?

A. Run the backup command in the existing SecurePlatform machine, to create a backup file. Copy the file to the Windows Server 2003. Uninstall all Check Point products on SecurePlatform by running rpm CPsuitE. R55 command. Reboot. Install new VPN-1 NGX on the existing SecurePlatform machine. Run sysconfig, select VPN-1 Pro Gateway, and reboot. Use VPN-1 NGX CD to install primary SmartCenter Server on the Windows Server 2003. Import the backup file.

B. Run backup command on the existing SecurePlatform machine to create a backup file. Copy the file to the Windows Server 2003. Uninstall the primary SmartCenter Server package from NG with Al R55 SecurePlatform using sysconfig. Reboot. Install the NGX primary SmartCenterServer and import the backup file. Open the NGX SmartUpdate, and select "upgrade all packages" on the NG with Al R55 Security Gateway.

C. Copy the $FWDIR\conf and $FWDIR\lib files from the existing SecurePlatform machine. Create a tar.gzfile, and copy it to the Windows Server 2003. Use VPN-1 NGX CD on the existing SecurePlatform machine to do a new installation. Reboot. Run sysconfig and select VPN-1 Pro Gateway. Reboot. Use the NGX CD to install the primary SmartCenter Server on the Windows Server 2003. On the Windows Server 2003, run upgradeimport command to import $FWDIR\conf and $FWDIR\lib from the SecurePlatform machine.

D. Insert the NGX CD in the existing NGwithAI R55 SecurePlatform machine, and answer yes to backup the configuration. Copy the backup file to the Windows Server 2003. Continue the upgrade process. Reboot after upgrade is finished. After SecurePlatform NGX reboots, run sysconfig, select VPN-1 Pro Gateway, and finish the sysconfig process. Reboot again. Use the NGX CD to install the primary SmartCenter on the Windows Server 2003. Import the backup file.

Discussion 0

Correct Answer: D Vote an answer

Question #43

In ClusterXL, which of the following processes are defined by default as critical devices?

A. fwd.proc

B. fwd

C. cphad

D. fwm

Discussion 0

Correct Answer: C Vote an answer

Question #44

Match the Best Management High Availability synchronization-status descriptions for your Security Management Server (SMS):

A. A - 3, B - 1, C - 4, D - 2

B. A - 3, B - 2, C - 1, D - 4

C. A - 3, B - 1, C - 2, D - 4

D. A - 4, B - 3, C - 1, D - 2

Discussion 0

Correct Answer: C Vote an answer

Download Free CheckPoint 156-315.13 Demo

Simply submit your e-mail address below to get started with our free demo of your CheckPoint 156-315.13 exam.