CheckPoint 156-215.75 Online Practice Questions and Exam Preparation

CheckPoint 156-215.75 Online Questions & Answers

• Question 191:

  The User Directory Software Blade is used to integrate which of the following with a R75 Security Gateway?

  A. LDAP server
  B. RADIUS server
  C. Account Management Client server
  D. UserAuthority server
  A. LDAP server

• Question 192:

  Which service type does NOT invoke a Security Server?

  A. HTTP
  B. FTP
  C. Telnet
  D. CIFS
  E. SMTP
  D. CIFS

• Question 193:

  When migrating the SmartEvent data base from one server to another, the last step is to save the files on the new server. Which of the following commands should you run to save the SmartEvent data base files on the new server?

  A. cp
  B. migrate import
  C. eva_db_restore
  D. restore
  C. eva_db_restore

• Question 194:

  While authorization for users managed by SmartDirectory is performed by the gateway, the authentication is mostly performed by the infrastructure in which of the following?

  A. ldapd
  B. cpauth
  C. cpShared
  D. ldapauth
  B. cpauth

• Question 195:

  Your R7x-series Enterprise Security Management Server is running abnormally on Windows Server 2003 R2. You decide to try reinstalling the Security Management Server, but you want to try keeping the critical Security Management Server configuration settings intact (i.e., all Security Policies, databases, SIC, licensing etc.) What is the BEST method to reinstall the Server and keep its critical configuration?

  A. 1. Insert the R77 CD-ROM and select the option to export the configuration using the latest upgrade utilities. 2. Follow steps suggested by upgrade_verification and re-export the configuration if needed. 3. Save the exported file *.tgz to a local directory c:/temp. 4. Uninstall all packages using Add/Remove Programs and reboot. 5. Install again using the R77 CD-ROM as a primary Security Management Server and reboot. 6. Run upgrade_import to import the configuration.
  B. 1. Create a data base revision control back up using SmartDashboard. 2. Create a compressed archive of the directories %FWDIR%/conf and %FWDIR%/lib and copy them to another networked machine. 3. Uninstall all packages using Add/Remove Programs and reboot. 4. Install again as a primary Security Management Server using the R77 CD-ROM. 5. Reboot and restore the two archived directories over the top of the new installation, choosing to overwrite existing files.
  C. 1. Download the latest utility upgrade_export and run from a local directory c:/temp to export the configuration into a *.tgz file. 2. Skip any upgrade_verification warnings since you are not upgrading. 3. Transfer the file *.tgz to another networked machine. 4. Download and run the utility cpclean and reboot. 5. Use the R77 CD-ROM to select option upgrade_import to import the configuration.
  D. 1. Download the latest utility upgrade_export and run from directory c:/temp to export the configuration into a *.tgz file. 2. Follow steps suggested by upgrade_verification. 3. Uninstall all packages using Add/Remove Programs and reboot. 4. Use SmartUpdate to reinstall the Security Management Server and reboot. 5. Transfer file *.tgz back to local directory /temp. 6. Run upgrade_import to import the configuration.
  A. 1. Insert the R77 CD-ROM and select the option to export the configuration using the latest upgrade utilities. 2. Follow steps suggested by upgrade_verification and re-export the configuration if needed. 3. Save the exported file *.tgz to a local directory c:/temp. 4. Uninstall all packages using Add/Remove Programs and reboot. 5. Install again using the R77 CD-ROM as a primary Security Management Server and reboot. 6. Run upgrade_import to import the configuration.

• Question 196:

  The SmartEvent Correlation Unit:

  A. adds events to the events database.
  B. assigns a severity level to an event.
  C. analyzes each IPS log entry as it enters the Log server.
  D. displays the received events.
  C. analyzes each IPS log entry as it enters the Log server.

• Question 197:

  SmartProvisioning is an integral part of the Security Management or Provider-1 CMA. To enable SmartProvisioning on the Security Management server:

  A. Obtain a SmartProvisioning license, add the License to the Security Management server or CMA, turn on SmartProvisioning on each Gateway to be controlled.
  B. Obtain a SmartProvisioning license, add the License to the Security Management server or CMA, disable SecureXL.
  C. Obtain a SmartProvisioning license, add the License to the Security Management server or CMA.
  D. Obtain a SmartProvisioning license, add the License to the Security Management server or CMA, select the box under Policy for SmartProvisioning.
  C. Obtain a SmartProvisioning license, add the License to the Security Management server or CMA.

• Question 198:

  What is the SmartEvent Client's function?

  A. Display received threats and tune the Events Policy.
  B. Generate a threat analysis report from the Reporter database.
  C. Invoke and define automatic reactions and add events to the database.
  D. Assign severity levels to events.
  A. Display received threats and tune the Events Policy.

• Question 199:

  What is the advantage for deploying SSL VPN in a DMZ, versus a LAN?

  A. SSL VPN adds another layer of access security to internal resources, when it resides in a DMZ.
  B. SSL Network Extender is ineffective in a LAN deployment.
  C. Traffic is in clear text when forwarded to internal servers, but the back connection is encrypted for remote users
  D. Traffic is authenticated without hiding behind Connectra's IP address
  A. SSL VPN adds another layer of access security to internal resources, when it resides in a DMZ.

• Question 200:

  Which of the following is NOT a restriction for connection template generation?

  A. SYN Defender
  B. ISN Spoofing
  C. UDP services with no protocol type or source port mentioned in advanced properties
  D. VPN Connections
  C. UDP services with no protocol type or source port mentioned in advanced properties