156-215.71 questions and answers

What is the command used to view which policy is installed?

Which Client Authentication sign-on method requires the user to first authenticate via the User Authentication mechanism when logging in to a remote server with Telnet?

How does the Get Address button, found on the Host Node Object / General Properties page retrieve the address?

Which of the following statements about service contracts, i.e.
, Certificate, software subscription, or support contract, is FALSE?

When Jon first installed the system, he forgot to configure DNS servers on his Security Gateway.

How could Jon configure DNS servers now that his Security Gateway is in production?

Reviews the following rules and note the Client Authentication Action properties screen, as shown below:

After being authenticated by the Security Gateway, when a user starts an HTTP connection to a Web site, the user tries to FTP to another site using the command line. What happens to the user? The:

Which of the following statements BEST describes Check Point's Hide Network Address Translation method?

Your network is experiencing connectivity problems and you want to verify if routing problems are present.
You need to disable the firewall process but still allow routing to pass through the Gateway running on an IP Appliance running IPSO.

What command do you need to run after stopping the firewall service?

Your boss wants you to closely monitor an employee suspected of transferring company secrets to the competition. The IT department discovered the suspect installed a WinSCP client in order to use encrypted communication.

Which of the following methods is best to accomplish this task?

Your Security Management Server fails and does not reboot. One of your remote Security Gateways managed by the Security Management Server reboots.

What occurs with the remote Gateway after reboot?

Which SmartView Tracker mode allows you to read the SMTP e-mail body sent from the Chief Executive Officer (CEO) of a company?

The Administrator of the Tokyo Security Management Server cannot connect from his workstation in Osaka.

Which of the following lists the BEST sequence of steps to troubleshoot this issue?

Assume an intruder has compromised your current IKE Phase 1 and Phase 2 keys.

Which of the following options will end the intruder's access after the next Phase 2 exchange occurs?

A third-shift Security Administrator configured and installed a new Security Policy early this morning. When you arrive, he tells you that he has been receiving complaints that Internet access is very slow. You suspect the Security Gateway virtual memory might be the problem.

Which SmartConsole component would you use to verify this?

You are working with three other Security Administrators.

Which SmartConsole component can be used to monitor changes to rules or object properties made by the other administrators?

Spoofing is a method of:

Which command gives an overview of your installed licenses?

You have created a Rule Base for firewall, websydney. Now you are going to create a new policy package with security and address translation rules for a second Gateway.

What is TRUE about the new package's NAT rules?

Which of the following describes the default behavior of an R71 Security Gateway?

The customer has a small Check Point installation which includes one Windows 2003 server as the SmartConsole and a second server running SecurePlatform as both Security Management Server and the Security Gateway. This is an example of a(n):

Which of the following statements accurately describes the snapshot command?

Which of the following are authentication methods that Security Gateway R71 uses to validate connection attempts? Select the response below that includes the MOST complete list of valid authentication methods.

Match each of the following command to there correct function. Each command has one function only listed.

You believe Phase 2 negotiations are failing while you are attempting to configure a site-to-site VPN with one of your firm's business partners.

Which SmartConsole application should you use to confirm your suspicions?

If a SmartUpdate upgrade or distribution operation fails on SecurePlatfom, how is the system recovered?

You are the Security Administrator for MegaCorp and are enjoying your holiday. One day, you receive a call that some connectivity problems have occurred. Before the holiday, you configured the access from the holiday hotel to your Management Portal. You can see and analyze various objects.

Which objects can you create?

Your main internal network 10.10.10.0/24 allows all traffic to the Internet using Hide NAT. You also have a small network 10.10.20.0/24 behind the internal router. You want to configure the kernel to translate the source address only when network 10.10.20.0 tries to access the Internet for HTTP, SMTP, and FTP services.

Which of the following configurations will allow this network to access the Internet?

Which of the following R71 SmartView Tracker views will display a popup warning about performance implications on the Security Gateway?

For VPN routing to succeed, what must be configured?

External commands can be included in SmartView Tracker via the menu Tools / Custom Commands. The Security Management Server is running under SecurePlatform, and the GUI is on a system running Microsoft Windows.

How do you run the command, traceroute on an IP address?

You are working with multiple Security Gateways that enforce an extensive number of rules.
To simplify Security administration, which one of the following would you choose to do?

For which protocol is anti-virus not available?

Although SIC was already established and running, Joe reset SIC between the Security Management Server and a remote Gateway. He set a new activation key on the Gateway's side with the cpconfig command and put in the same activation key in the Gateway's object on the Security Management Server Unfortunately SIC cannot be established.

What is a possible reason for the problem?

MegaCorp's security infrastructure separates Security Gateways geographically. You must request a central license for one remote Security Gateway.

How do you apply the license?

Which VPN Community object is used to configure Hub Mode VPN routing in SmartDashboard?

Your bank's distributed R71 installation has Security Gateways up for renewal.

Which SmartConsole application will tell you which Security Gateways have licenses that will expire within the next 30 days?

When you use the Global Properties' default settings on R71, which type of traffic will be dropped if no explicit rule allows the traffic?

Phase 2 uses ___________, if not using Perfect Forward Secrecy.

How do you configure an alert in SmartView Monitor?

Which Security Servers can perform authentication tasks, but CANNOT perform content security tasks?

You administer a large, geographically distributed network. The Internet connection at a remote site failed during the weekend, and the Security Gateway logged locally for over 48 hours. It is possible that the logs may have consumed most of the free space on the Gateway's hard disk.

Which SmartConsole application displays the percent of free hard-disk space on the remote Security Gateway?

Your current Check Point enterprise consists of one Management Server and four Gateways in four different locations with the following versions:

All devices are running SecurePlatform. You are upgrading your enterprise to R71. Place the required tasks from the following list in the correct order for upgrading your enterprise to R71.

1. Upgrade all gateways to R71
2. Upgrade all gateways 3 and 4 to R 65
3. Upgrade all gateways 2, 3, and 4 to R 65
4. Upgrade all gateway 4 to R 65
5. Perform pre-upgrade verifier on Security management server
6. Perform pre-upgrade verifier on all Gateways
7. Perform License upgrade checker on Gateway 2
8. Perform License upgrade checker on Gateway 3
9. Perform License upgrade checker on Gateway 4
10. Perform License upgrade checker on Security Management Server
11. Perform License upgrade checker on all devices
12. Upgrade security management server to R 70

What are the two basic rules which should be used by all Security Administrators?

How are cached usernames and passwords cleared from the memory of a R71 Security Gateway?

Secure Internal Communications (SIC) is completely NAT-tolerant because it is based on:

Which of the following can be found in cpinfo from an enforcement point?

You enable Automatic Static NAT on an internal host node object with a private IP address of 10.10.10.5, which is NATed into 216.216.216.5. (You use the default settings in Global Properties / NAT.

) When you run fw monitor on the R71 Security Gateway and then start a new HTTP connection from host 10.10.10.5 to browse the Internet, at what point in the monitor output will you observe the HTTP SYN-ACK packet translated from 216.216.216.5 back into 10.10.10.5?

How can you access the Certificate Revocation List (CRL) on the firewall, if you have configured a Stealth Rule as the first explicit rule?

Where can an administrator configure the notification action in the event of a policy install time change?

You are about to test some rule and object changes suggested in an R71 news group.

Which backup solution should you use to ensure the easiest restoration of your Security Policy to its previous configuration after testing the changes?

The third-shift Administrator was updating Security Management Server access settings in Global Properties and testing. He managed to lock himself out of his account.

How can you unlock this account?

When using vpn tu, which option must you choose if you only want to clear phase 2 for a specific IP (gateway)?

You are the Security Administrator for MegaCorp. A Check Point firewall is installed and in use on a SecurePlatform. You have trouble configuring the speed and duplex settings of your Ethernet interfaces.

Which of the following commands can be used to configure the speed and duplex settings of an Ethernet interface and will survive a reboot? Give the BEST answer.

You want to configure a mail alert for every time the policy is installed to a specific Gateway.

Where would you configure this alert?

Which command allows verification of the Security Policy name and install date on a Security Gateway?

In a distributed management environment, the administrator has removed all default check boxes from the Policy / Global Properties / Firewall tab. In order for the Security Gateway to send logs to the Security Management Server, an explicit rule must be created to allow the Security Gateway to communicate to the Security Management Server on port ______.

You installed Security Management Server on a computer using SecurePlatform in the MegaCorp home office. You use IP address 10.1.1.1. You also installed the Security Gateway on a second SecurePlatform computer, which you plan to ship to another Administrator at a MegaCorp hub office. What is the correct order for pushing SIC certificates to the Gateway before shipping it?
1. Run cpconfig on the gateway, set secure internal communication, enter the activation key and reconfirm.
2. Initialize internal certificate authority (ICA) on the security Management server.
3. Confirm the gateway object with the host name and IP address for the remote site.
4. Click the communication button in the gateway object's general screen, enter the activation key, and
click initialize and ok.
5. Install the security policy.

Another administrator accidentally installed a Security Policy on the wrong firewall. Having done this, you are both locked out of the firewall that is called myfw1.

What command would you execute on your system console on myfw1 in order for you to push out a new Security Policy?

Your Rule Base includes a Client Authentication rule, using partial authentication and standard sign-on for HTTP, Telnet, and FTP services. The rule was working, until this morning. Now users are not prompted for authentication, and they see error page cannot be displayed in the browser. In SmartView Tracker, you discover the HTTP connection is dropped when the Gateway is the destination.

What caused Client Authentication to fail?

What information is provided from the options in this screenshot?

(i)Whether a SIC certificate was generated for the Gateway (ii)Whether the operating system is SecurePlatform or SecurePlatform Pro (iii)Whether this is a standalone or distributed installation

Which of the following actions take place in IKE Phase 2 with Perfect Forward Secrecy disabled?

You want to establish a VPN, using certificates. Your VPN will exchange certificates with an external partner.

Which of the following activities should you do first?

You run cpconfig to reset SIC on the Security Gateway. After the SIC reset operation is complete, the policy that will be installed is the:

Which authentication type permits five different sign-on methods in the authentication properties window?

When using vpn tu, which option must you choose if you want to rebuild your VPN for a specific IP (gateway)?

Your shipping company uses a custom application to update the shipping distribution database. The custom application includes a service used only to notify remote sites that the distribution database is malfunctioning. The perimeter Security Gateway's Rule Base includes a rule to accept this traffic. Since you are responsible for multiple sites, you want notification by a text message to your cellular phone, whenever traffic is accepted on this rule.

Which of the following would work BEST for your purpose?

Marc is a Security Administrator configuring a VPN tunnel between his site and a partner site. He just created the partner city's firewall object and a community. While trying to add the firewalls to the community only his firewall could be chosen. The partner city's firewall does not appear.

What is a possible reason for the problem?

How can you check whether IP forwarding is enabled on an IP Security Appliance?

What CANNOT be configured for existing connections during a policy install?

SmartView Tracker R71 consists of three different modes. They are: