CheckPoint 156-215.13 Online Practice Questions and Exam Preparation

CheckPoint 156-215.13 Online Questions & Answers

• Question 1:

  Your company has two headquarters, one in London, one in New York. Each of the headquarters includes several branch offices. The branch offices only need to communicate with the headquarters in their country, not with each other, and the headquarters need to communicate directly. What is the BEST configuration for establishing VPN Communities among the branch offices and their headquarters, and between the two headquarters? VPN Communities comprised of:

  A. Three star Communities: The first one is between New York headquarters and its branches. The second star Community is between London headquarters and its branches. The third star Community is between New York and London headquarters but it is irrelevant which site is "center" and which "satellite".
  B. One star Community with the option to mesh the center of the star: New York and London Gateways added to the center of the star with the "mesh center Gateways" option checked; all London branch offices defined in one satellite window; but, all New York branch offices defined in another satellite window.
  C. Two mesh and one star Community: Each mesh Community is set up for each site between headquarters their branches. The star Community has New York as the center and London as its satellite.
  D. Three mesh Communities: one for London headquarters and its branches; one for New York headquarters and its branches; and one for London and New York headquarters.
  A. Three star Communities: The first one is between New York headquarters and its branches. The second star Community is between London headquarters and its branches. The third star Community is between New York and London headquarters but it is irrelevant which site is "center" and which "satellite".

• Question 2:

  A rule is used to prevent all traffic going to the R75 Security Gateway.

  A. Cleanup
  B. Stealth
  C. Reject
  D. IPS
  B. Stealth

• Question 3:

  Which utility allows you to configure the DHCP service on SecurePlatform from the command line?

  A. cpconfig
  B. ifconfig
  C. dhcp_cfg
  D. sysconfig
  D. sysconfig

• Question 4:

  Select the TRUE statements about the Rule Base shown?

  

  1) HTTP traffic from webrome to websingapore will be encrypted. 2) HTTP traffic from websingapore to webrome will be encrypted. 3) HTTP traffic from webrome to websingapore will be authenticated. 4) HTTP traffic from websingapore to webrome will be blocked.

  A. 1, 2, and 3
  B. 2 and 3
  C. 3 and 4
  D. 3 only
  C. 3 and 4

• Question 5:

  Why are certificates preferred over pre-shared keys in an IPsec VPN?

  A. Weak security: PSKs can only have 112 bit length.
  B. Weak Security: PSK are static and can be brute-forced.
  C. Weak scalability: PSKs need to be set on each and every Gateway.
  D. Weak performancE.PSK takes more time to encrypt than Diffie-Hellman.
  B. Weak Security: PSK are static and can be brute-forced.

• Question 6:

  How can you check whether IP forwarding is enabled on an IP Security Appliance?

  A. clish -c show routing active enable
  B. ipsofwd list
  C. cat /proc/sys/net/ipv4/ip_forward
  D. echo 1 > /proc/sys/net/ipv4/ip_forward
  B. ipsofwd list

• Question 7:

  Which SmartConsole component can Administrators use to track changes to the Rule Base?

  A. SmartView Monitor
  B. SmartReporter
  C. WebUI
  D. SmartView Tracker
  D. SmartView Tracker

• Question 8:

  When restoring R76 using the command upgrade_import, which of the following items are NOT restored?

  A. Licenses
  B. SIC Certificates
  C. Global properties
  D. Route tables
  D. Route tables

• Question 9:

  The third-shift Administrator was updating Security Management Server access settings in Global Properties and testing. He managed to lock himself out of his account. How can you unlock this account?

  A. Delete the file admin.lock in the Security Management Server directory $FWDIR/tmp/.
  B. Type fwm lock_admin -u from the Security Management Server command line.
  C. Type fwm unlock_admin -u from the Security Gateway command line.
  D. Type fwm unlock_admin from the Security Management Server command line.
  B. Type fwm lock_admin -u from the Security Management Server command line.

• Question 10:

  You are conducting a security audit. While reviewing configuration files and logs, you notice logs accepting POP3 traffic, but you do not see a rule allowing POP3 traffic in the Rule Base. Which of the following is the most likely cause?

  A. The POP3 rule is disabled.
  B. The POP3 rule is hidden.
  C. POP3 is one of 3 services (POP3, IMAP, and SMTP) accepted by the default mail object in R75.
  D. POP3 is accepted in Global Properties.
  B. The POP3 rule is hidden.