Free CheckPoint 156-315.13 Practice Test & Real Exam Questions

Exam Code/Number: 156-315.13
Exam Name/Title: Check Point Certified Security Expert
Certification Provider: CheckPoint
Corresponding Certification: CCSE

Exam Questions: 639
Updated On: Jun 08, 2026

Question #1

VPN-1 NGX supports VoIP traffic in all of the following environments, EXCEPT which environment?

A. SCCP

B. MGCP

C. MEGACO

D. SIP

E. H.323

Discussion 0

Correct Answer: C Vote an answer

Question #2

Which internal user authentication protocols are supported in SSL VPN?

A. Point Password, SecurID, OS Password, RADIUS, TACACS

B. Check Point Password, SecurID, Active Directory, RADIUS, TACACS

C. Check Point Password, SecurID, LDAP, RADIUS, TACACS

D. Check Point Password, SecurID, L2TP, RADIUS, TACACS

Discussion 0

Correct Answer: A Vote an answer

Question #3

What is a task of the SmartEvent Correlation Unit?

A. Look for patterns according to the installed Event Policy.

B. Assign a severity level to an event

C. Add events to the events database.

D. Display the received events.

Discussion 0

Correct Answer: A Vote an answer

Question #4

The process_________ executes the authentication for Remote Access clients.

A. fwm

B. cvpnd

C. cpd

D. vpnd

Discussion 0

Correct Answer: D Vote an answer

Question #5

Where is the ideal place to deploy your SSL VPN?

A. In front of the external interface on the gateway

B. Deployed in DMZ

C. SSL VPN enabled on the gateway

D. Anywhere

Discussion 0

Correct Answer: B Vote an answer

Question #6

You are responsible for the IPS configuration of your Check Point firewall. Inside the Denial of service section you need to set the protection parameters against the Teardrop attack tool with high severity. How would you characterize this attack tool? Give the BEST answer.

A. Some implementations of the TCP/IP IP fragmentation re-assembly code do not properly handle overlapping IP fragments. Sending two IP fragments, the latter entirely contained inside the former, causes the server to allocate too much memory and crash. Teardrop is a widely available attack tool that exploits this vulnerability.

B. A remote attacker may attack a system by sending a specially crafted RPC request to execute arbitrary code on a vulnerable system. Teardrop is a widely available attack tool that exploits this vulnerability.

C. Some implementations of TCP/IP are vulnerable to packets that are crafted in a particular way (a SYN packet in which the source address and port are the same as the destination, i.e., spoofed). Teardrop is a widely available attack tool that exploits this vulnerability

D. Hackers can send high volumes of non-TCP traffic in an effort to fill up a firewall State Table. This results in a Denial of Service by preventing the firewall from accepting new connections. Teardrop is a widely available attack tool that exploits this vulnerability.

Discussion 0

Correct Answer: A Vote an answer

Question #7

Which of the following is TRUE concerning unnumbered VPN Tunnel Interfaces (VTIs)?

A. Local IP addresses are not configured, remote IP addresses are configured.

B. VTIs can only be physical, not loopback.

C. VTIs cannot be assigned a proxy interface.

D. They are only supported on the IPSO Operating System.

Discussion 0

Correct Answer: D Vote an answer

Question #8

An organization may be distributed across several SmartDirectory (LDAP) servers. What provision do you make to enable a Gateway to use all available resources? Each SmartDirectory (LDAP) server must be:

A. represented by a separate Account Unit that is a member in the LDAP group.

B. a member in the LDAP group.

C. represented by a separate Account Unit.

D. a member in a group that is associated with one Account Unit.

Discussion 0

Correct Answer: C Vote an answer

Question #9

You have a production implementation of Management High Availability, at version VPN-1 NG with Application Intelligence R55. You must upgrade your two SmartCenter Servers to VPN-1 NGX. What is the correct procedure?

A. 1. Synchronize the two SmartCenter Servers.
2.Upgrade the secondary SmartCenter Server.
3.Upgrade the primary SmartCenter Server.
4.Configure both SmartCenter Server host objects version to VPN-1 NGX.
5.Synchronize the Servers again.

B. 1. Synchronize the two SmartCenter Servers.
2.Perform an advanced upgrade on the primary SmartCenter Server.
3.Upgrade the secondary SmartCenter Server.
4.Configure both SmartCenter Server host objects to version VPN-1 NGX.
5.Synchronize the Servers again.

C. 1. Synchronize the two SmartCenter Servers.
2.Perform an advanced upgrade on the primary SmartCenter Server.
3.Configure the primary SmartCenter Server host object to version VPN-1 NGX.
4.Synchronize the two Servers again.
5.Upgrade the secondary SmartCenter Server.
6.Configure the secondary SmartCenter Server host object to version VPN-1 NGX.
7.Synchronize the Servers again.

D. 1. Perform an advanced upgrade on the primary SmartCenter Server.
2.Configure the primary SmartCenter Server host object to version VPN-1 NGX.
3.Synchronize the primary with the secondary SmartCenter Server.
4.Upgrade the secondary SmartCenter Server.
5.Configure the secondary SmartCenter Server host object to version VPN-1 NGX.
6.Synchronize the Servers again.

Discussion 0

Correct Answer: B Vote an answer

Question #10

Using the Backup Target functionality in SmartProvisioning, what targets are available?
i) FTP
ii) TFTP
iii) SFTP
iv) SCP
v) Locally

A. i, ii, iii, iv

B. i

C. ii, iv, v

D. i, ii, iv

Discussion 0

Correct Answer: C Vote an answer

Question #11

Which of the following access options would you NOT use when configuring Captive Portal?

A. From the Internet

B. Through internal interfaces

C. Through all interfaces

D. Through the Firewall policy

Discussion 0

Correct Answer: A Vote an answer

Download Free CheckPoint 156-315.13 Demo

Simply submit your e-mail address below to get started with our free demo of your CheckPoint 156-315.13 exam.