Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk
ServiceNow
All Vendors
  2. Home
  3. Exams
  4. Checkpoint
  5. 156-515.65

Checkpoint 156-515.65 Exam Questions
156-515.65 Check Point Certified Security Expert Plus NGX R65 (Page 4 )

Updated On: 10-Mar-2026
Page 3 of 15
PDF with 140 Questions

Assume you have a rule allowing HTTP traffic, on port 80, to a specific Web server in a
Demilitarized Zone (DMZ). If an external host port scans the Web server's IP address, what information will be revealed?

  1. Nothing; the NGX Security Server automatically block all port scans.
  2. All ports are open on the Security Server.
  3. All ports are open on the Web server.
  4. The Web server's file structure is revealed.
  5. Port 80 is open on the Web server.

Answer(s): E



Which of the following types of information should an Administrator use tcpdump to view?

  1. DECnet traffic analysis
  2. VLAN trunking analysis
  3. NAT traffic analysis
  4. Packet-header analysis
  5. AppleTalk traffic analysis

Answer(s): D



Which statement is true for route based VPNs?

  1. IP Pool NAT must be configured on each gateway
  2. Route-based VPNs replace domain-based VPNs
  3. Route-based VPNs are a form of partial overlap VPN Domain
  4. Packets are encrypted or decrypted automatically
  5. Dynamic-routing protocols are not required

Answer(s): E



The list below provides all the actions Check Point recommends to troubleshoot a problem with an NGX product.
A). List Possible Causes
B). Identify the Problem
C). Collect Related Information
D). Consult Various Reference Sources
E). Test Causes Individually and Logically

Select the answer that shows the order of the recommended actions that make up Check Point's troubleshooting guidelines?

  1. B, C, A, E, D
  2. A, E, B, D, C
  3. A, B, C, D, E
  4. B, A, D, E, C
  5. D, B, A, C, E

Answer(s): A



NGX Wire Mode allows:

  1. Peer gateways to establish a VPN connection automatically from predefined preshared secrets.
  2. Administrators to verify that each VPN-1 SecureClient is properly configured, before allowing it access to the protected domain.
  3. Peer gateways to fail over existing VPN traffic, by avoiding Stateful Inspection.
  4. Administrators to monitor VPN traffic for troubleshooting purposes.
  5. Administrators to limit the number of simultaneous VPN connections, to reduce the traffic load passing through a Security Gateway.

Answer(s): C



Viewing page 4 of 15
Viewing questions 16 - 20 out of 140 questions



Post your Comments and Discuss Checkpoint 156-515.65 exam dumps with other Community members:

156-515.65 Exam Discussions & Posts

AI Tutor