Free 156-915 Questions for CheckPoint Accelerated CCSE NGX (156-915.1) 156-915 Exam as PDF & Practice Test Engine

Exam Code/Number: 156-915
Exam Name/Title: Accelerated CCSE NGX (156-915.1)
Certification Provider: CheckPoint
Corresponding Certification: CheckPoint Certification

Exam Questions: 160
Updated On: Aug 05, 2026

Question #1

What do you use to view an NGX Security Gateway's status, including CPU use, amount of virtual memory, percent of free hard-disk space, and version?

A. SmartUpdate

B. SmartLSM

C. SmartView Status.

D. SmartView Monitor

E. SmartView Tracker

Discussion 0

Correct Answer: D Vote an answer

Question #2

Your company has two headquarters, one in London, one in New York. Each headquarters includes several branch offices. The branch offices only need to communicate with the headquarters in their country, not with each other, and only the headquarters need to communicate directly. What is the BEST configuration for VPN Communities among the branch offices and their headquarters, and between the two headquarters? VPN Communities comprised of:

A. three mesh Communities:one for London headquarters and its branches, one for New York headquarters and its branches, and one for London and New York headquarters.

B. two mesh Communities, one for each headquarters and their branch offices; and one star Community, in which London is the center of the Community and New York is the satellite.

C. two mesh Communities, one for each headquarters and their branch offices; and one star Community, where New York is the center of the Community and London is the satellite.

D. Two star and one mesh Community, each star Community is set up for each site, with headquarters as the center of the Community, and branches as satellites. The mesh Communities are between the New York and London headquarters.

Discussion 0

Correct Answer: D Vote an answer

Question #3

Review the following rules and note the Client Authentication Action properties screen, as shown in the exhibit:

After being authenticated by the Security Gateway, when a user starts an HTTP connection to a Web site, the user tries to FTP to another site using the command line. What happens to the user? The:

A. FTP connection is dropped by rule 2.

B. User is prompted for authentication by the Security Gateway again.

C. FTP data connection is dropped, after the user is authenticated successfully.

D. FTP session is dropped by the implicit Cleanup Rule.

E. user is prompted from that FTP site only, and does not need to enter username and password for Client Authentication.

Discussion 0

Correct Answer: E Vote an answer

Question #4

The following is cphaprob state command output from a New Mode High Availability cluster member:
Which machine has the highest priority?

A. 192.168.1.2, because its state is active.

B. 192.168.1.1, because its number is 1

C. This output does not indicate which machine has the highest priority.

D. 192.168.1.2, since its number is 2

Discussion 0

Correct Answer: B Vote an answer

Question #5

IIse manages a distributed NGX installation for a large bank. IIse needs to know which Security Gateways have licenses that will expire within the next 30 days. Which SmartConsole application should IIse use to gather this information?

A. SmartUpdate

B. SmartDashboard

C. SmartView Status

D. SmartView Monitor

E. SmartView Tracker

Discussion 0

Correct Answer: A Vote an answer

Question #6

How do you configure an NGX Security Gateway's kernel memory settins, without manually modifying the configuration files in $FWDIR\lib? By configuring:

A. the settings on the SmartCenter Server object's Advanced screen.

B. the settings on the gateway object's Capacity Optimization screen.

C. the settings on the Gateway object's Advanced screen.

D. the settings on the Global Properties Capacity Optimization screen.

E. SmartDefense Kernel Defender options

Discussion 0

Correct Answer: B Vote an answer

Question #7

A cluster contains two members, with external interfaces 172.28.108.1 and 172.28.108.2.
The internal interfaces are 10.4.8.1 and 10.4.8.2. The external cluster's IP address is
172.28.108.3, and the internal cluster's IP address is 10.4.8.3. The synchronization interfaces are 192.168.1.1 and 192.168.1.2. The Security Administrator discovers State Sychronization is not working properly.cphaprob -a if command output displays as follows:

What is causing the State Synchronization problem?

A. The synchronization network has a cluster, with IP address 192.168.1.3 defined in the gateway-cluster object. Remove the 192.168.1.3 VIP interface from the cluster topology.

B. Another cluster is using 192.168.1.3 as one of the unprotected interfaces.

C. The synchronization interface on the cluster member object's Topology tab is enabled with "Cluster Interface". Disable this interface.

D. Interfaces 192.168.1.1 and 192.168.1.2 have defined 192.168.1.3 as a sub-interface.

Discussion 0

Correct Answer: A Vote an answer

Question #8

In a Management High Availablility (HA) configuration, you can configure synchronization to occur automatically, when:
1. The Security Policy is installed.
2. The Security Policy is saved.
3. The Security Administrator logs in to the secondary SmartCenter Server, and changes its status to active.
4. A scheduled event occurs.
5. The user database is installed.
Select the BEST response for the synchronization sequence. Choose one.

A. 1,2,5

B. 1,2,4

C. 1,2,3,4

D. 1,2,3

E. 1,3,4

Discussion 0

Correct Answer: B Vote an answer

Question #9

Which of the following commands shows full synchronization status?

A. cphaprob -a if

B. cphastop

C. fw ctl pstat

D. cphaprob -i list

E. fw hastat

Discussion 0

Correct Answer: D Vote an answer

Question #10

In SmartView Tracker, which rule shows when a packet is dropped due to anti-spoofing?

A. Cleanup Rule

B. Rule 1

C. Stealth Rule

D. Rule 999

E. Rule 0

Discussion 0

Correct Answer: E Vote an answer

Free 156-915 Questions for CheckPoint Accelerated CCSE NGX (156-915.1) 156-915 Exam as PDF & Practice Test Engine

Download Free CheckPoint 156-915 Demo