CheckPoint 156-215.13 Online Practice Questions and Exam Preparation

CheckPoint 156-215.13 Online Questions & Answers

• Question 181:

  Which of the following items should be configured for the Security Management Server to authenticate using LDAP?

  A. Domain Admin password
  B. Check Point Password
  C. Windows logon password
  D. WMI object
  A. Domain Admin password

• Question 182:

  Which command line interface utility allows the administrator to verify the Security Policy name and timestamp currently installed on a firewall module?

  A. fw stat
  B. fw ctl pstat
  C. fw ver
  D. cpstat fwd
  A. fw stat

• Question 183:

  How many packets are required for IKE Phase 2?

  A. 12
  B. 2
  C. 6
  D. 3
  D. 3

• Question 184:

  Your organization's disaster recovery plan needs an update to the backup and restore section to reap the new distributed R76 installation benefits. Your plan must meet the following required and desired objectives:

  Required ObjectivE. The Security Policy repository must be backed up no less frequently than every 24 hours.

  Desired ObjectivE. The R76 components that enforce the Security Policies should be backed up at least once a week.

  Desired ObjectivE. Back up R76 logs at least once a week.

  Your disaster recovery plan is as follows:

  -

  Use the cron utility to run the command upgrade_export each night on the Security Management Servers.

  -

  Configure the organization's routine back up software to back up the files created by the command upgrade_export.

  -

  Configure the GAiA back up utility to back up the Security Gateways every Saturday night.

  -

  Use the cron utility to run the command upgrade_export each Saturday night on the log servers.

  -Configure an automatic, nightly logswitch.

  -

  Configure the organization's routine back up software to back up the switched logs every night. Upon evaluation, your plan:

  A. Meets the required objective and only one desired objective.
  B. Meets the required objective but does not meet either desired objective.
  C. Meets the required objective and both desired objectives.
  D. Does not meet the required objective.
  C. Meets the required objective and both desired objectives.

• Question 185:

  Which of these components does NOT require a Security Gateway R76 license?

  A. SmartConsole
  B. SmartUpdate upgrading/patching
  C. Check Point Gateway
  D. Security Management Server
  A. SmartConsole

• Question 186:

  When restoring R76 using the command upgrade_import, which of the following items are NOT restored?

  A. Licenses
  B. SIC Certificates
  C. Global properties
  D. Route tables
  D. Route tables

• Question 187:

  The customer has a small Check Point installation which includes one Windows 2008 server as the SmartConsole and a second server running SecurePlatform as both Security Management Server and the Security Gateway. This is an example of a(n):

  A. Stand-Alone Installation
  B. Distributed Installation
  C. Unsupported configuration
  D. Hybrid Installation
  A. Stand-Alone Installation

• Question 188:

  To qualify as an Identity Awareness enabled rule, which column MAY include an Access Role?

  A. Track
  B. User
  C. Destination
  D. Action
  C. Destination

• Question 189:

  What action CANNOT be run from SmartUpdate R76?

  A. Reboot Gateway
  B. Fetch sync status
  C. Get all Gateway Data
  D. Preinstall verifier
  B. Fetch sync status

• Question 190:

  You have detected a possible intruder listed in SmartView Tracker's active pane. What is the fastest method to block this intruder from accessing your network indefinitely?

  A. In SmartView Monitor, select Tools > Suspicious Activity Rules.
  B. Modify the Rule Base to drop these connections from the network.
  C. In SmartView Tracker, select Tools > Block Intruder.
  D. In SmartDashboard, select IPS > Network Security > Denial of Service.
  C. In SmartView Tracker, select Tools > Block Intruder.