CheckPoint 156-215.13 Online Practice Questions and Exam Preparation

CheckPoint 156-215.13 Online Questions & Answers

• Question 231:

  Which utility allows you to configure the DHCP service on SecurePlatform from the command line?

  A. cpconfig
  B. ifconfig
  C. dhcp_cfg
  D. sysconfig
  D. sysconfig

• Question 232:

  The User Directory Software Blade is used to integrate which of the following with Security Gateway R76?

  A. Account Management Client server
  B. RADIUS server
  C. LDAP server
  D. UserAuthority server
  C. LDAP server

• Question 233:

  Where is the fingerprint generated, based on the output display?

  

  A. SmartUpdate
  B. Security Management Server
  C. SmartConsole
  D. SmartDashboard
  B. Security Management Server

• Question 234:

  What are you required to do before running the command upgrade_export?

  A. Run a cpstop on the Security Management Server.
  B. Run a cpstop on the Security Gateway.
  C. Close all GUI clients.
  D. Run cpconfig and set yourself up as a GUI client.
  C. Close all GUI clients.

• Question 235:

  What command syntax would you use to turn on PDP logging in a distributed environment?

  A. pdp tracker on
  B. pdp log=1
  C. pdp track=1
  D. pdp logging on
  A. pdp tracker on

• Question 236:

  Which of the following methods is NOT used by Identity Awareness to catalog identities?

  A. AD Query
  B. GPO
  C. Captive Portal
  D. Identity Agent
  B. GPO

• Question 237:

  Because of pre-existing design constraints, you set up manual NAT rules for your HTTP server. However, your FTP server and SMTP server are both using automatic NAT rules. All traffic from your FTP and SMTP servers are passing through the Security Gateway without a problem, but traffic from the Web server is dropped on rule 0 because of anti-spoofing settings. What is causing this?

  A. Allow bi-directional NAT is not checked in Global Properties.
  B. Translate destination on client side is not checked in Global Properties under Manual NAT Rules.
  C. Manual NAT rules are not configured correctly.
  D. Routing is not configured correctly.
  B. Translate destination on client side is not checked in Global Properties under Manual NAT Rules.

• Question 238:

  Charles requests a Website while using a computer not in the net_singapore network.

  

  What is TRUE about his location restriction?

  A. As location restrictions add up, he would be allowed from net_singapore and net_sydney.
  B. It depends on how the User Auth object is configured; whether User Properties or Source Restriction takes precedence.
  C. Source setting in User Properties always takes precedence.
  D. Source setting in Source column always takes precedence.
  B. It depends on how the User Auth object is configured; whether User Properties or Source Restriction takes precedence.

• Question 239:

  Suppose the Security Gateway hard drive fails and you are forced to rebuild it. You have a snapshot file stored to a TFTP server and backups of your Security Management Server. What is the correct procedure for rebuilding the Gateway quickly?

  A. Run the command revert to restore the snapshot. Reinstall any necessary Check Point products. Establish SIC and install the Policy.
  B. Reinstall the base operating system (i.e., SecurePlatform). Configure the Gateway interface so that the Gateway can communicate with the TFTP server. Revert to the stored snapshot image, and install the Security Policy.
  C. Run the command revert to restore the snapshot, establish SIC, and install the Policy.
  D. Reinstall the base operating system (i.e., SecurePlatform). Configure the Gateway interface so that the Gateway can communicate with the TFTP server. Reinstall any necessary Check Point products and previously applied hotfixes. Revert to the stored snapshot image, and install the Policy.
  B. Reinstall the base operating system (i.e., SecurePlatform). Configure the Gateway interface so that the Gateway can communicate with the TFTP server. Revert to the stored snapshot image, and install the Security Policy.

• Question 240:

  Which of the following is a viable consideration when determining Rule Base order?

  A. Adding SAM rules at the top of the Rule Base
  B. Placing frequently accessed rules before less frequently accessed rules
  C. Grouping rules by date of creation
  D. Grouping IPS rules with dynamic drop rules
  B. Placing frequently accessed rules before less frequently accessed rules