Checkpoint 156-915.71 Exam Questions
Check Point Certified Security Expert R71 Update (Page 6 )

Updated On: 19-Feb-2026

A customer is calling saying one member's status is Down. What will you check?

  1. cphaprob list (verify what critical device is down)
  2. Fw ctl debug –m cluster + forward (forwarding layer debug)
  3. tcpdump/snoop (CCP traffic)
  4. fw ctl pstat (check sync)

Answer(s): A



You have a High Availability ClusterXL configuration. Machines are not synchronizer. What happens to connections on failover?

  1. It is not possible to configure High Availability that is not synchronized.
  2. Old connections are lost but can be reestablished.
  3. Connection cannot be established until cluster members are fully synchronized.
  4. Old connections are lost but are automatically recovered whenever the failed machine recovers.

Answer(s): B



When using ClusterXl in load sharing, what method is used be default?

  1. IPs, SPIs
  2. IPs, Ports, SPIs
  3. IPs
  4. IPs, Ports

Answer(s): C



John is configuring a new R17 Gateway cluster but he cannot configure the cluster as Third Party IP Clustering in Gateway Cluster Properties:

What’s happening?

  1. John is not using third party hardware as IP Clustering is part of Check Point’s IP Appliance.
  2. Third Party Clustering is not available for R71 Security Gateways.
  3. ClusterXL needs to be unsetected to permit 3nd party clustering configuration.
  4. John has an invalid ClusterXL license

Answer(s): C



A customer calls saying that a load-sharing cluster shows drops with the error First packet is not SYN. Complete the following sentence. I will recommend:

  1. Change the load on each member.
  2. configuring flush and ack
  3. turning off SDF (Sticky Decision Function)
  4. turning on SDF (Sticky Decision Function)

Answer(s): D






Post your Comments and Discuss Checkpoint 156-915.71 exam dumps with other Community members:

Join the 156-915.71 Discussion