156-215.75 by CheckPoint Actual Free Exam Q&As

Question 1

Which of the following are available SmartConsole clients which can be installed from the R75 Windows CD? Read all answer and select the most complete and valid list.

A. SmartView Tracker, SmartDashboard, SmartLSM, SmartView Monitor B. SmartView Tracker, SmartDashboard, CPINFO, SmartUpdate, SmartView Status C. Security Policy Editor, Log viewer, Real Time Monitor GUI D. SmartView Tracker, CPINFO, SmartUpdate

Discussion 0

Correct Answer: A Vote an answer

Question 2

You are evaluating the configuration of a mesh VPN Community used to create a site-tosite VPN. This graphic displays the VPN properties in this mesh Community.

Which of the following would be the most valid conclusion?

A. The VPN Community will perform IKE Phase 1 key-exchange encryption using the longest key Security Gateway R75 supports. B. Changing the setting Perform key exchange encryption with 3DES to DES will enhance the VPN Community's security, and reduce encryption overhead. C. Changing the setting Perform IPsec data encryption with from AES-128 to 3DES will increase the encryption overhead. D. Change the data-integrity settings for this VPN CommunitybecauseMD5 is incompatible with AES.

Discussion 0

Correct Answer: C Vote an answer

Question 3

In SmartDashboard, you configure 45 MB as the required free hard-disk space to accommodate logs. What can you do to keep old log files, when free space falls below 45 MB?

A. Configure a script to run fw logswitch and SCP the output file to a separate file server. B. Do nothing. Old logs are deleted, until free space is restored. C. Use the fwm logexport command to export the old log files to another location. D. Do nothing. The Security Management Server automatically copies old logs to a backup server before purging.

Discussion 0

Correct Answer: A Vote an answer

Question 4

You just installed a new Web server in the DMZ that must be reachable from the Internet. You create a manual Static NAT rule as follows:
"web_public_IP" is the node object that represents the public IP address of the new Web server. "web_private_IP" is the node object that represents the new Web site's private IP address. You enable all settings from Global Properties > NAT.
When you try to browse the Web server from the Internet you see the error "page cannot be displayed". Which of the following is NOT a possible reason?

A. There is no route defined on the Security Gateway for the public IP address to the private IP address of the Web server. B. There is no Security Policy defined that allows HTTP traffic to the protected Web server. C. There is no NAT rule translating the source IP address of packets coming from the protected Web server. D. There is no ARP table entry for the public IP address of the protected Web server.

Discussion 0

Correct Answer: C Vote an answer

Question 5

Your network is experiencing connectivity problems and you want to verify if routing problems are present. You need to disable the firewall process but still allow routing to pass through the Gateway running on an IP Appliance running IPSO. What command do you need to run after stopping the firewall service?

A. fw load routed B. ipsofwd slowpath C. fw fwd routing D. ipsofwd on admin

Discussion 0

Correct Answer: D Vote an answer

Question 6

Another administrator accidentally installed a Security Policy on the wrong firewall. Having done this, you are both locked out of the firewall that is called myfw1. What command would you execute on your system console on myfw1 in order for you to push out a new Security Policy?

A. fw dbloadlocal B. cpstop C. fw ctl filter D. fw unloadlocal

Discussion 0

Correct Answer: D Vote an answer

Question 7

Identify the ports to which the Client Authentication daemon listens by default.

A. 259,900 B. 80, 256 C. 256,600 D. 8080, 529

Discussion 0

Correct Answer: A Vote an answer

Question 8

Captive Portal may be used with HTTPS:

A. No, it only works with FTP and HTTP B. No, it only works with HTTP C. Yes D. No, it only works with FTP

Discussion 0

Correct Answer: C Vote an answer

Question 9

With Access Roles, is it possible to deny a single user access to a certain file?

A. Yes, if you add the user to a blocked group B. Yes, if you deny access based on the user's location C. Yes, if you deny access based on the user's machine D. No, Access Roles are based on user groups, not individual users

Discussion 0

Correct Answer: A Vote an answer

Question 10

You want to establish a VPN, using certificates. Your VPN will exchange certificates with an external partner. Which of the following activities should you do first?

A. Create a new logical-server object to represent your partner's CA B. Manually import your partner's Control List. C. Manually import your partner's Certificate Revocation List. D. Exchange exported CA keys and use them to create a new server object to represent your partner's Certificate Authority (CA).

Discussion 0

Correct Answer: D Vote an answer

CheckPoint Check Point Certified Security Administrator R75 - 156-215.75 Exam Practice Test