CheckPoint 156-215.13 Online Practice Questions and Exam Preparation

CheckPoint 156-215.13 Online Questions & Answers

• Question 281:

  Your main internal network 10.10.10.0/24 allows all traffic to the Internet using Hide NAT. You also have a small network 10.10.20.0/24 behind the internal router. You want to configure the kernel to translate the source address only when network 10.10.20.0 tries to access the Internet for HTTP, SMTP, and FTP services. Which of the following configurations will allow this network to access the Internet?

  A. Configure Automatic Static NAT on network 10.10.20.0/24.
  B. Configure Automatic Hide NAT on network 10.10.20.0/24 and then edit the Service column in the NAT Rule Base on the automatic rule.
  C. Configure one Manual Hide NAT rule for HTTP, FTP, and SMTP services for network 10.10.20.0/24.
  D. Configure three Manual Static NAT rules for network 10.10.20.0/24, one for each service.
  C. Configure one Manual Hide NAT rule for HTTP, FTP, and SMTP services for network 10.10.20.0/24.

• Question 282:

  Several Security Policies can be used for different installation targets. The Firewall protecting Human Resources' servers should have its own Policy Package. These rules must be installed on this machine and not on the Internet Firewall. How can this be accomplished?

  A. A Rule Base is always installed on all possible targets. The rules to be installed on a Firewall are defined by the selection in the Rule Base row Install On.
  B. A Rule Base can always be installed on any Check Point Firewall object. It is necessary to select the appropriate target directly after selecting Policy > Install on Target.
  C. When selecting the correct Firewall in each line of the Rule Base row Install On, only this Firewall is shown in the list of possible installation targets after selecting Policy > Install on Target.
  D. In the menu of SmartDashboard, go to Policy > Policy Installation Targets and select the correct firewall via Specific Targets.
  D. In the menu of SmartDashboard, go to Policy > Policy Installation Targets and select the correct firewall via Specific Targets.

• Question 283:

  Which component functions as the Internal Certificate Authority for R76?

  A. Security Gateway
  B. Management Server
  C. Policy Server
  D. SmartLSM
  C. Policy Server

• Question 284:

  Which of the following objects is a valid source in an authentication rule?

  A. User@Network
  B. Host@Any
  C. User@Any
  D. User_group@Network
  D. User_group@Network

• Question 285:

  ALL of the following options are provided by the SecurePlatform sysconfig utility, EXCEPT:

  A. Export setup
  B. Time and Date
  C. DHCP Server configuration
  D. GUI Clients
  D. GUI Clients

• Question 286:

  SmartView Tracker logs the following Security Administrator activities, EXCEPT:

  A. Object creation, deletion, and editing
  B. Rule Base changes
  C. Administrator login and logout
  D. Tracking SLA compliance
  D. Tracking SLA compliance

• Question 287:

  Which command gives an overview of your installed licenses?

  A. cplic print
  B. cplicense
  C. fw lic print
  D. showlic
  B. cplicense

• Question 288:

  Which of the below is the MOST correct process to reset SIC from SmartDashboard?

  A. Run cpconfig, and click Reset.
  B. Click the Communication button for the firewall object, then click Reset. Run cpconfig and type a new activation key.
  C. Click Communication > Reset on the Gateway object, and type a new activation key.
  D. Run cpconfig, and select Secure Internal Communication > Change One Time Password.
  B. Click the Communication button for the firewall object, then click Reset. Run cpconfig and type a new activation key.

• Question 289:

  You need to back up the routing, interface, and DNS configuration information from your R76 GAiA Security Gateway. Which backup-and-restore solution do you use?

  A. GAiA back up utilities
  B. upgrade_export and upgrade_import commands
  C. Database Revision Control
  D. Manual copies of the directory $FWDIR/conf
  A. GAiA back up utilities

• Question 290:

  Which SmartView Tracker mode allows you to read the SMTP e-mail body sent from the Chief Executive Officer (CEO) of a company?

  A. Display Capture Action
  B. This is not a SmartView Tracker feature.
  C. Display Payload View
  D. Network and Endpoint Tab
  B. This is not a SmartView Tracker feature.