CheckPoint CCSA 156-215.75 Questions & Answers

• Question 111:

  URL filtering policy can make exceptions for specific sites by being enforced:

  A. Only for specific sources and destinations.

  B. For all traffic, except on specific sources and destinations.

  C. For alt traffic, except blocked sites.

  D. For all traffic. There are no exceptions.

  Correct Answer: B

• Question 112:

  The URL Filtering Policy can be configured to monitor URLs in order to: A. Log sites from blocked categories.

  B. Redirect users to a new URL.

  C. Block sites only once.

  D. Alert the Administrator to block a suspicious site.

  Correct Answer: A

• Question 113:

  Which type of resource could a Security Administrator use to control access to specific file shares on target machines?

  A. URI

  B. CIFS

  C. Telnet

  D. FTP

  Correct Answer: B

• Question 114:

  What rules send log information to Dshield.org when Storm Center is configured?

  A. Determined in IPS, Dshield Storm Center configuration: Security Management Server sends logs from rules with tracking set to either Alert or one of the specific User Defined Alerts

  B. Determined by the Global Properties configuration: Log defined in the Log and Alerts section, rules with tracking sent to Account or SNMP trap.

  C. Determined in Web Intelligence, configuration: Information Disclosure is configured; rules with tracking set to User Defined Alerts or SNMP trap.

  D. Determined by the Dshield Storm Center Logging setting in Logs and Master of the Security Management Server object rules with tracking set to Log or None.

  Correct Answer: A

• Question 115:

  When using an encryption algorithm, which is generally considered the best encryption method?

  A. DES

  B. AES

  C. Triple DES

  D. CAST cipher

  Correct Answer: B

• Question 116:

  Fill in the blank: When you want to create a VPN community where all participating gateways are able to connect to each other, you need to set up a ___________ community.

  A. Remote Access

  B. Meshed

  C. SSL VPN

  D. Star

  Correct Answer: B

• Question 117:

  Which do you configure to give remote access VPN users a local IP address?

  A. Office mode IP pool

  B. NAT pool

  C. Encryption domain pool

  D. Authentication pool

  Correct Answer: A

• Question 118:

  When using vpn tu, which option must you choose if you only want to clear phase 2 for a specific IP (gateway)?

  A. (6) Delete all IPsec SAs for a given User (Client)

  B. (7) Delete all IPsec+IKE SAs for a given peer (GW)

  C. (8) Delete all IPsec+IKE SAs for a given User (Client)

  D. (5) Delete all IPsec SAs for a given peer (GW)

  Correct Answer: D

• Question 119:

  In the SmartView Tracker you receive the error, ...peer send invalid ID information... while trying to establish an IKE VPN tunnel. Where does this error normally result from and how can you solve it? This error normally results from:

  A. a mismatch in the authentication algorithms used in IKE phase one and can be corrected by changing them to match.

  B. an invalid IP address configured on one tunnel endpoint; normally the internal one in the General tab. This can be solved with link selection or by changing this IP to the one facing the other tunnel endpoint.

  C. an invalid IP address configured on one tunnel endpoint, normally the internal one in the General tab. This can be resolved by adding the correct IPs to the Topology tab of both Gateways on both sites.

  D. a mismatch in the IPs of the VPN tunnel endpoints and can not be resolved.

  Correct Answer: B

• Question 120:

  How many packets are required for IKE Phase 2?

  A. 2

  B. 12

  C. 6

  D. 3

  Correct Answer: D