CheckPoint 156-215.13 Online Practice Questions and Exam Preparation

CheckPoint 156-215.13 Online Questions & Answers

• Question 291:

  Secure Internal Communications (SIC) is completely NAT-tolerant because it is based on:

  A. SIC names.
  B. MAC addresses.
  C. IP addresses.
  D. SIC is not NAT-tolerant.
  A. SIC names.

• Question 292:

  The Tokyo Security Management Server Administrator cannot connect from his workstation in Osaka.

  

  Which of the following lists the BEST sequence of steps to troubleshoot this issue?

  A. Call Tokyo to check if they can ping the Security Management Server locally. If so, login to sgtokyo, verify management connectivity and Rule Base. If this looks okay, ask your provider if they have some firewall rules that filters out your management traffic.
  B. Verify basic network connectivity to the local Gateway, service provider, remote Gateway, remote network and target machine. Then, test for firewall rules that deny management access to the target. If successful, verify that pcosaka is a valid client IP address.
  C. Check for matching OS and product versions of the Security Management Server and the client. Then, ping the Gateways to verify connectivity. If successful, scan the log files for any denied management packets.
  D. Check the allowed clients and users on the Security Management Server. If pcosaka and your user account are valid, check for network problems. If there are no network related issues, this is likely to be a problem with the server itself. Check for any patches and upgrades. If still unsuccessful, open a case with Technical Support.
  B. Verify basic network connectivity to the local Gateway, service provider, remote Gateway, remote network and target machine. Then, test for firewall rules that deny management access to the target. If successful, verify that pcosaka is a valid client IP address.

• Question 293:

  When you change an implicit rule's order from Last to First in Global Properties, how do you make the change take effect?

  A. Run fw fetch from the Security Gateway.
  B. Select Install Database from the Policy menu.
  C. Reinstall the Security Policy.
  D. Select Save from the File menu.
  C. Reinstall the Security Policy.

• Question 294:

  When translation occurs using automatic Hide NAT, what also happens?

  A. The destination port is modified.
  B. Nothing happens.
  C. The destination is modified.
  D. The source port is modified.
  D. The source port is modified.

• Question 295:

  Which statement below describes the most correct strategy for implementing a Rule Base?

  A. Place a network-traffic rule above the administrator access rule.
  B. Limit grouping to rules regarding specific access.
  C. Place the most frequently used rules at the top of the Policy and the ones that are not frequently used further down.
  D. Add the Stealth Rule before the last rule.
  C. Place the most frequently used rules at the top of the Policy and the ones that are not frequently used further down.

• Question 296:

  You are working with three other Security Administrators. Which SmartConsole component can be used to monitor changes to rules or object properties made by the other administrators?

  A. Eventia Tracker
  B. SmartView Monitor
  C. Eventia Monitor
  D. SmartView Tracker
  D. SmartView Tracker

• Question 297:

  The and Rules are the two basic rules which should be used by all Security Administrators?

  A. Cleanup; Stealth
  B. Administrator Access; Stealth
  C. Cleanup; Administrator Access
  D. Network Traffic; Stealth
  A. Cleanup; Stealth

• Question 298:

  When you hide a rule in a Rule Base, how can you then disable the rule?

  A. Right-click on the hidden rule place-holder bar and uncheck Hide, then right-click and select Disable Rule(s); re-hide the rule.
  B. Right-click on the hidden rule place-holder bar and select Disable Rule(s).
  C. Use the search utility in SmartDashboard to view all hidden rules. Select the relevant rule and click Disable Rule(s).
  D. Hidden rules are already effectively disabled from Security Gateway enforcement.
  A. Right-click on the hidden rule place-holder bar and uncheck Hide, then right-click and select Disable Rule(s); re-hide the rule.

• Question 299:

  Which of the following can be found in cpinfo from an enforcement point? Where can an administrator specify the notification action to be taken by the firewall in the event that available disk space drops below 15%?

  A. SmartView Tracker > Audit Tab > Gateway Counters
  B. SmartView Monitor > Gateway Status > Threshold Settings
  C. This can only be monitored by a user-defined script.
  D. SmartView Monitor > Gateway Status > System Information > Thresholds
  D. SmartView Monitor > Gateway Status > System Information > Thresholds

• Question 300:

  Which R76 feature or command allows Security Administrators to revert to earlier Security Policy versions without changing object configurations?

  A. Policy Package management
  B. Database Revision Control
  C. upgrade_export/upgrade_import
  D. fwm dbexport/fwm dbimport
  A. Policy Package management