CheckPoint Check Point CCSE NG - 156-310 Exam Questions [2026]

QUESTION NO: 1
To enable session tracking, you must do which of the following? (Choose two)

A. Define which parameters of a log are established. B. Create the path a packet takes after it leaves an Enforcement Module. C. Define which parameters of an alert are established. D. Create the path a packet has taken before reaching an Enforcement Module. E. Create the path a packet takes between an enterprise Enforcement Module and the perimeter router.

Correct Answer: A,C

QUESTION NO: 2
With Secure Client, if you have more than one network adapter: (Choose all that apply)

A. VPN-1/Firewall-1 adapters can be bound to all of them. B. On Windows NT, the binding is dynamic and takes place upon reboot. C. In Windows 3x, the binding is static and takes place when Secure Client is installed. D. On Windows 2000, the binding is static and takes place when Secure Client is installed. E. A, B and C.

Correct Answer: A,B

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 3
What parameter in userc.C allows you to set the port for topology download?

A. top_port B. topology_port C. port_gettop D. gettop_port

Correct Answer: D

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 4
How does load balancing allow several servers to share and distribute the network load in the VPN-1/FireWall-1 software?

A. All traffic bound for a specific physical server is directed to a resource that proxies each connection based on a defined server object. B. Network subnets are created to represent a group of physical servers. C. A logical server is deployed on the SmartCenter Server. D. Priority routing pools are created to distribute traffic among a group of physical servers. E. A logical server is created on the Enforcement Module.

Correct Answer: E

QUESTION NO: 5
CRL lookups from VPN-1/Firewall-1 modules, or the SecuRemote Server, to the LDAP Server. When problems occur with CRL verification, how would you verify that the IP addresses and port numbers are correctly referencing the CA and LDAP Servers?

A. Check theca.inifile. B. Runcpconfig. C. Runfw checkcaintegrity -f -n from a command-line prompt. D. Check the CRL timeout. E. Check the CA object configuration.

Correct Answer: E

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 6
Dr Billwants to protect internal users from malicious Java code. However, he does not want to strip Java scripts. Which is the BEST configuration option?

A. Configure a URI resource to block Java code. B. Configure a CVP resource to strip block java code. C. Configure a URI resource to strip script tags. D. Configure a CVP resource to strip script tags. E. Configure a URI resource to strip applet tags.

Correct Answer: A

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 7
In a fully overlapping encryption domain with two gateways serving the domain which one will a SecuRemote client connect to?

A. The nearest B. It is preconfigured C. The first to reply D. They are chosen alternately

Correct Answer: C

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 8
Which load balancing algorithm uses a load measuring agent?

A. Random B. Domain C. Server load D. Round trip E. Round robin

Correct Answer: C

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 9
Which programming language cannot be used for writing user defined applications?

A. Bourne Shell B. C-Shell C. C/C++ D. Perl E. Cobol

Correct Answer: E

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 10
You are using Hybrid IKE. The certificate is not created in the Certificates tab of the VPN-1/Firewall-1 network object; even after "Internal CA created successfully" is displayed "fw internalca create" is displayed as having been issued. Which if the following lists the most likely cause of the problem, and the appropriate remedy?

A. Perform fwstop and move the objects.sav objects.bak and other files with objects.* from
$FWDIR/conf directory except the objects.c file. Perform the "fw interalca create" and "fw interalca certify" again with the - forceoption. B. The distinguished name used in the "fw internalca create" and "fw interalca certify" commands is too long. In this case, use a shorter name. C. Certificate created by internal CA is somehow corrupt. Recreate the certificate with the
-force option. D. Options A and B. E. Under the Firewall object> VPN> IKE> Support Authentication Methods,Hybridis unchecked. SelectHybridand stop and start the firewall.

Correct Answer: A,B,C,D,E

QUESTION NO: 11
A Diffie-Hellman key engine is used in which of the following encryption methods?

A. Shared key encryption B. Asymmetric encryption C. Symmetric encryption

Correct Answer: B

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 12
Which load-balancing method chooses the physical server closest to the client, based on DNS?

A. Round Robin. B. Random C. Domain D. Round Trip. E. Server Load.

Correct Answer: C

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).