Skip to main content

156-215.75 Online Practice Questions

Check Point Certified Security Administrator

543 questions available · Page 1 of 55

Updated Exam DumpsVerified AnswersPass Guarantee

Get Complete Exam Dumps
Question 1 Single choice

Secure Internal Communications (SIC) is completely NAT-tolerant because it is based on:

  1. A

    MAC addresses.

  2. B

    SIC names.

  3. C

    SIC is not NAT-tolerant.

  4. D

    IP addresses.

Show answer and explanation

Correct answer: B

Question 2 Single choice

Identity Awareness is implemented to manage access to protected resources based on a user's
_____________.

  1. A

    Time of connection

  2. B

    Application requirement

  3. C

    Identity

  4. D

    Computer MAC address

Show answer and explanation

Correct answer: C

Question 3 Single choice

John Adams is an HR partner in the ACME organization. ACME IT wants to limit access to HR servers to a set of designated IP addresses to minimize malware infection and unauthorized access risks. Thus, the gateway policy permits access only from John's desktop which is assigned a static IP address 10.0.0.19.

He has received a new laptop and wants to access the HR Web Server from anywhere in the organization.
The IT department gave the laptop a static IP address, but that limits him to operating it only from his desk.
The current Rule Base contains a rule that lets John Adams access the HR Web Server from his laptop with a static IP (10.0.0.19).

He wants to move around the organization and continue to have access to the HR Web Server.
To make this scenario work, the IT administrator:
1. Enables Identity Awareness on a gateway, selects AD Query as one of the Identity Sources, and installs
the policy.
2. Adds an access role object to the Firewall Rule Base that lets John Adams access the HR Web Server
from any machine and from any location and installs policy.

John plugged in his laptop to the network on a different network segment and was not able to connect to the HR Web server.

What is the next troubleshooting step?

  1. A

    John should install the Identity Awareness Agent

  2. B

    Investigate this as a network connectivity issue

  3. C

    After enabling Identity Awareness, reboot the gateway

  4. D

    He should lock and unlock the computer

Show answer and explanation

Correct answer: D

Question 4 Single choice

Which of the following R75 SmartView Tracker views will display a popup warning about performance implications on the Security Gateway?

  1. A

    Active Tab

  2. B

    Audit Tab

  3. C

    Account Query

  4. D

    All Records Query

Show answer and explanation

Correct answer: A

Question 5 Single choice

Identity Awareness is implemented to manage access to protected resources based on a user's
_____________.

  1. A

    Location

  2. B

    Application requirement

  3. C

    Computer MAC address

  4. D

    Time of connection

Show answer and explanation

Correct answer: B

Question 6 Single choice

To reduce the information given to you in SmartView Tracker, what can you do to find information about data being sent between pcosaka and pctokyo?

  1. A

    Double-click an entry representing a connection between both endpoints.

  2. B

    Press CTRL+F in order to open the find dialog, and then search the corresponding IP addresses.

  3. C

    Apply a source filter by adding both endpoint IP addresses with the equal option set.

  4. D

    Use a regular expression to filter out relevant logging entries.

Show answer and explanation

Correct answer: C

Question 7 Single choice

What are you required to do before running the command upgrade_export?

  1. A

    Run a cpatop on the Security Management Server

  2. B

    Run a cpstop on the Security Gateway

  3. C

    Close all GUI clients

  4. D

    Run cpconfig and set yourself up as a GUI client

Show answer and explanation

Correct answer: C

Question 8 Single choice

In which IKE phase are IKE SA's negotiated?

  1. A

    Phase 4

  2. B

    Phase 1

  3. C

    Phase 3

  4. D

    Phase 2

Show answer and explanation

Correct answer: B

Question 9 Single choice

How do you use SmartView Monitor to compile traffic statistics for your company's Internet activity during production hours?

  1. A

    View total packets passed through the security gateway

  2. B

    Use the Traffic Counters settings and SmartView Monitor to generate a graph showing the total HTTP traffic for the day.

  3. C

    Select the Tunnels view, and generate a report on the statistics

  4. D

    Configure a suspicious activity rule which triggers an alert when HTTP traffic pass through gateway

Show answer and explanation

Correct answer: B

Question 10 Single choice

Which antivirus scanning method does not work if the Gateway is connected as a node in proxy mode?

  1. A

    Scan by Direction

  2. B

    Scan by File Type

  3. C

    Scan by Server

  4. D

    Scan by IP Address

Show answer and explanation

Correct answer: A