CheckPoint 156-215.13 Online Practice Questions and Exam Preparation

CheckPoint 156-215.13 Online Questions & Answers

• Question 91:

  Which authentication type permits five different sign-on methods in the authentication properties window?

  A. Manual Authentication
  B. Client Authentication
  C. Session Authentication
  D. User Authentication
  B. Client Authentication

• Question 92:

  Jennifer McHanry is CEO of ACME. She recently bought her own personal iPad. She wants use her iPad to access the internal Finance Web server. Because the iPad is not a member of the Active Directory domain, she cannot identify

  seamlessly with AD Query. However, she can enter her AD credentials in the Captive Portal and then get the same access as on her office computer. Her access to resources is based on rules in the R76 Firewall Rule Base.

  To make this scenario work, the IT administrator must:

  1) Enable Identity Awareness on a gateway and select Captive Portal as one of the Identity Sources.

  2) In the Portal Settings window in the User Access section, make sure that Name and password login is selected.

  3) Create a new rule in the Firewall Rule Base to let Jennifer McHanry access network destinations. Select accept as the Action.

  Ms. McHanry tries to access the resource but is unable. What should she do?

  A. Have the security administrator select the Action field of the Firewall Rule "Redirect HTTP connections to an authentication (captive) portal"
  B. Install the Identity Awareness agent on her iPad
  C. Have the security administrator reboot the firewall
  D. Have the security administrator select Any for the Machines tab in the appropriate Access Role
  A. Have the security administrator select the Action field of the Firewall Rule "Redirect HTTP connections to an authentication (captive) portal"

• Question 93:

  You are a Security Administrator preparing to deploy a new HFA (Hotfix Accumulator) to ten Security Gateways at five geographically separate locations. What is the BEST method to implement this HFA?

  A. Send a CD-ROM with the HFA to each location and have local personnel install it.
  B. Use SmartUpdate to install the packages to each of the Security Gateways remotely.
  C. Send a Certified Security Engineer to each site to perform the update.
  D. Use a SSH connection to SCP the HFA to each Security Gateway. Once copied locally, initiate a remote installation command and monitor the installation progress with SmartView Monitor.
  B. Use SmartUpdate to install the packages to each of the Security Gateways remotely.

• Question 94:

  What information is found in the SmartView Tracker Management log?

  A. Destination IP address
  B. SIC revoke certificate event
  C. Number of concurrent IKE negotiations
  D. Most accessed Rule Base rule
  B. SIC revoke certificate event

• Question 95:

  Which R76 SmartConsole tool would you use to verify the installed Security Policy name on a Security Gateway?

  A. SmartView Server
  B. SmartView Tracker
  C. None, SmartConsole applications only communicate with the Security Management Server.
  D. SmartUpdate
  B. SmartView Tracker

• Question 96:

  You are responsible for the configuration of MegaCorp's Check Point Firewall. You need to allow two NAT rules to match a connection. Is it possible? Give the BEST answer.

  A. Yes, it is possible to have two NAT rules which match a connection, but only when using Automatic NAT (bidirectional NAT).
  B. Yes, it is possible to have two NAT rules which match a connection, but only in using Manual NAT (bidirectional NAT).
  C. Yes, there are always as many active NAT rules as there are connections.
  D. No, it is not possible to have more than one NAT rule matching a connection. When the firewall receives a packet belonging to a connection, it compares it against the first rule in the Rule Base, then the second rule, and so on. When it finds a rule that matches, it stops checking and applies that rule.
  A. Yes, it is possible to have two NAT rules which match a connection, but only when using Automatic NAT (bidirectional NAT).

• Question 97:

  Your Security Gateways are running near performance capacity and will get upgraded hardware next week. Which of the following would be MOST effective for quickly dropping all connections from a specific attacker's IP at a peak time of day?

  A. Change the Rule Base and install the Policy to all Security Gateways
  B. SAM - Suspicious Activity Rules feature of SmartView Monitor
  C. SAM - Block Intruder feature of SmartView Tracker
  D. Intrusion Detection System (IDS) Policy install
  B. SAM - Suspicious Activity Rules feature of SmartView Monitor

• Question 98:

  You have configured Automatic Static NAT on an internal host-node object. You clear the box Translate destination on client site from Global Properties > NAT. Assuming all other NAT settings in Global Properties are selected, what else must be configured so that a host on the Internet can initiate an inbound connection to this host?

  A. A proxy ARP entry, to ensure packets destined for the public IP address will reach the Security Gateway's external interface.
  B. No extra configuration is needed.
  C. The NAT IP address must be added to the external Gateway interface anti-spoofing group.
  D. A static route, to ensure packets destined for the public NAT IP address will reach the Gateway's internal interface.
  D. A static route, to ensure packets destined for the public NAT IP address will reach the Gateway's internal interface.

• Question 99:

  Which of the following methods will provide the most complete backup of an R75 configuration?

  A. Execute command upgrade_export
  B. Database Revision Control
  C. Policy Package Management
  D. Copying the directories $FWDIR\conf and $CPDIR\conf to another server
  A. Execute command upgrade_export

• Question 100:

  Which SmartView Tracker selection would most effectively show who installed a Security Policy blocking all traffic from the corporate network?

  A. Network and Endpoint tab
  B. Custom filter
  C. Management tab
  D. Active tab
  C. Management tab