CheckPoint CCSA 156-215.75 Questions & Answers

• Question 191:

  With the User Directory Software Blade, you can create R75 user definitions on a(n) _______Server.

  A. Radius

  B. NT Domain

  C. LDAP

  D. SecureID

  Correct Answer: C

• Question 192:

  The User Directory Software Blade is used to integrate which of the following with Security Gateway R75?

  A. RADIUS server

  B. Account management client server

  C. User authority server

  D. LDAP server

  Correct Answer: D

• Question 193:

  If you are experiencing LDAP issues, which of the following should you check?

  A. Domain name resolution

  B. Overlapping VPN Domains

  C. Secure Internal Communications (SIC)

  D. Connectivity between the R75 Gateway and LDAP server

  Correct Answer: D

• Question 194:

  How are cached usernames and passwords cleared from the memory of a R75 Security Gateway?

  A. By retrieving LDAP user information using the command fw fetchldap

  B. By using the Clear User Cache button in Smart Dashboard

  C. Usernames and password only clear from memory after they time out

  D. By installing a Security Policy

  Correct Answer: D

• Question 195:

  Your users are defined in a Windows 2003 R2 Active Directory server. You must add LDAP users to a Client Authentication rule. Which kind of user group do you need in the Client Authentication rule in R75?

  A. All Users

  B. External-user group

  C. A group with a generic user

  D. LDAP group

  Correct Answer: D

• Question 196:

  Which type of R75 Security Server does not provide User Authentication?

  A. FTP Security Server

  B. SMTP Security Server

  C. HTTP Security Server

  D. HTTPS Security Server

  Correct Answer: B

• Question 197:

  Reviews the following rules and note the Client Authentication Action properties screen, as shown below:

  

  After being authenticated by the Security Gateway, when a user starts an HTTP connection to a Web site, the user tries to FTP to another site using the command line. What happens to the user? The:

  A. user is prompted from that FTP site only, and does not need to enter his username and password for Client Authentication.

  B. User is prompted for Authentication by the Security Gateway again.

  C. FTP data connection is dropped after the user is authenticated successfully.

  D. FTP connection is dropped by rules 2.

  Correct Answer: A

• Question 198:

  Which Security Gateway R75 configuration setting forces the Client Authentication authorization time-out to refresh, each time a new user is authenticated? The:

  A. Global Properties > Authentication parameters, adjusted to allow for Regular Client Refreshment

  B. Time properties, adjusted on the user objects for each user, in the source of the Client Authentication rule

  C. IPS > Application Intelligence > Client Authentication > Refresh User Timeout option enabled

  D. Refreshable Timeout setting, in the Limits tab of the Client Authentication Action Properties screen

  Correct Answer: D

• Question 199:

  All R75 Security Servers can perform authentication with the exception of one. Which of the Security Servers cannot perform authentication?

  A. RLOGIN

  B. HTTP

  C. SMTP

  D. FTP

  Correct Answer: C

• Question 200:

  Which of the following are authentication methods that Security Gateway R75 uses to validate connection attempts? Select the response below that includes the MOST complete list of valid authentication methods.

  A. Proxied, User, Dynamic, Session

  B. Connection, User, Client

  C. User, Client, Session

  D. Connection, Proxied, Session

  Correct Answer: C