156-215.75 Online Practice Questions and Answers

How can you view cpinfo on a SecurePlatform machine?

A. tcpdump

B. snoop i

C. infotab

D. Text editor, such as vi

Select the correct statement about Secure Internal Communications (SIC) Certificates. SIC Certificates:

A. Are used for securing internal network communications between the SmartDashboard and the Security Management Server.

B. For R75 Security Gateways are created during the Security Management Server installation.

C. Decrease network security by securing administrative communication among the Security Management Servers and the Security Gateway.

D. Uniquely identify Check Point enabled machines; they have the same function as VPN Certificates.

You are responsible for the configuration of MegaCorp's Check Point Firewall. You need to allow two NAT rules to match a connection. Is it possible? Give the BEST answer.

A. Yes, it is possible to have two NAT rules which match a connection, but only when using Automatic NAT (bidirectional NAT).

B. No, it is not possible to have more one NAT rule matching a connection. When the firewall receives a packet belonging to a concentration, it compares it against the first rule in the Rule Base, then the second rule, and so on When it finds a rule that matches, it stops checking and applies that rule.

C. Yes, it is possible to have two NAT rules which match a connection, but only in using Manual NAT (bidirectional NAT)

D. Yes, there are always as many active NAT rules as there are connections.

What do you use to view a R75 Security Gateway's status, including CPU use, amount of virtual memory, percent of free hard-disk space, and version?

A. Only possible via command line tools

B. SmartView Tracker

C. SmartView Monitor

D. SmartUpdate

As a Security Administrator, you must refresh the Client Authentication authorization time-out every time a new user connection is authorized. How do you do this? Enable the Refreshable Timeout setting:

A. in the user object's Authentication screen

B. in the Gateway object's Authentication screen

C. in the Limit tab of the Client Authentication Action Properties screen

D. in the Global Properties Authentication screen

You cannot use SmartDashboard's SmartDirectory features to connect to the LDAP server. What should you investigate?

A. 1 and 3

B. 1 and 2

C. 2 and 3

D. 1, 2, and 3

What statement is true regarding Visitor Mode?

A. VPN authentication and encrypted traffic are tunneled through port TCP 443.

B. All VPN traffic is tunneled through UDP port 4500.

C. Only Main mode and Quick mode traffic are tunneled on TCP port 443.

D. Only ESP traffic is tunneled through port TCP 443.

Access Role objects define users, machines, and network locations as:

A. One object

B. Credentialed objects

C. Separate objects

D. Linked objects

Identity Awareness is implemented to manage access to protected resources based on a user's _____________.

A. Location

B. Application requirement

C. Computer MAC address

D. Time of connection

What action CANNOT be run from SmartUpdate R75?

A. Reboot Gateway

B. Fetch sync status

C. Get all Gateway Data

D. Preinstall verifier