CheckPoint 156-215.13 Online Practice Questions and Exam Preparation

CheckPoint 156-215.13 Online Questions & Answers

• Question 191:

  Your primary Security Gateway runs on SecurePlatform. What is the easiest way to back up your Security Gateway R76 configuration, including routing and network configuration files?

  A. Using the native SecurePlatform backup utility from command line or in the Web based user interface.
  B. Copying the directories $FWDIR/conf and $FWDIR/lib to another location.
  C. Using the command upgrade_export.
  D. Run the pre_upgrade_verifier and save the .tgz file to the directory /temp.
  A. Using the native SecurePlatform backup utility from command line or in the Web based user interface.

• Question 192:

  After filtering a fw monitor trace by port and IP, a packet is displayed three times; in the i, I, and o inspection points, but not in the O inspection point. Which is the likely source of the issue?

  A. A SmartDefense module has blocked the packet.
  B. It is due to NAT.
  C. An IPSO ACL has blocked the packet's outbound passage.
  D. The packet has been sent out through a VPN tunnel unencrypted.
  B. It is due to NAT.

• Question 193:

  You are the Security Administrator for MegaCorp. A Check Point firewall is installed and in use on a platform using GAiA. You have trouble configuring the speed and duplex settings of your Ethernet interfaces. Which of the following commands can be used in Expert Mode to configure the speed and duplex settings of an Ethernet interface and will survive a reboot? Give the BEST answer.

  A. eth_set
  B. mii_tool
  C. ifconfig -a
  D. ethtool
  D. ethtool

• Question 194:

  What information is found in the SmartView Tracker Management log?

  A. Destination IP address
  B. Most accessed Rule Base rule
  C. Policy rule modification date/time stamp
  D. Historical reports log
  C. Policy rule modification date/time stamp

• Question 195:

  You have just installed your Gateway and want to analyze the packet size distribution of your traffic with SmartView Monitor. Unfortunately, you get the message.

  

  "There are no machines that contain Firewall Blade and SmartView Monitor." What should you do to analyze the packet size distribution of your traffic?

  

  Give the BEST answer.

  A. Enable Monitoring on your Security Management Server.
  B. Purchase the SmartView Monitor license for your Security Gateway.
  C. Purchase the SmartView Monitor license for your Security Management Server.
  D. Enable Monitoring on your Security Gateway.
  D. Enable Monitoring on your Security Gateway.

• Question 196:

  An internal host initiates a session to and is set for Hide NAT behind the Security Gateway. The initiating traffic is an example of .

  A. None of these
  B. source NAT
  C. destination NAT
  D. client side NAT
  B. source NAT

• Question 197:

  How many packets does the IKE exchange use for Phase 1 Aggressive Mode?

  A. 1
  B. 12
  C. 6
  D. 3
  D. 3

• Question 198:

  How do you view a Security Administrator's activities with SmartConsole? Which of the following R76 SmartView Tracker views will display a popup warning about performance implications on the Security Gateway?

  A. Audit Tab
  B. All Records Query
  C. Active Tab
  D. Account Query
  C. Active Tab

• Question 199:

  What CANNOT be configured for existing connections during a policy install?

  A. Reset all connections
  B. Re-match connections
  C. Keep all connections
  D. Keep data connections
  A. Reset all connections

• Question 200:

  What information is found in the SmartView Tracker Management log?

  A. Administrator SmartDashboard logout event
  B. SecurePlatform expert login event
  C. Creation of an administrator using cpconfig
  D. FTP username authentication failure
  A. Administrator SmartDashboard logout event