CheckPoint CCSA 156-215.75 Questions & Answers

• Question 201:

  Security Gateway R75 supports User Authentication for which of the following services? Select the response below that contains the MOST complete list of supported services.

  A. FTP, HTTP, TELNET

  B. FTP, TELNET

  C. SMTP, FTP, HTTP, TELNET

  D. SMTP, FTP, TELNET

  Correct Answer: A

• Question 202:

  Review the following rules. Assume domain UDP is enabled in the implied rules.

  What happens when a user from the internal network tries to browse to the Internet using HTTP? The user:

  

  A. is prompted three times before connecting to the Internet successfully.

  B. can go to the Internet after Telnetting to the client auth daemon port 259.

  C. can connect to the Internet successfully after being authenticated.

  D. can go to the Internet, without being prompted for authentication.

  Correct Answer: D

• Question 203:

  Which authentication type requires specifying a contact agent in the Rule Base?

  A. Client Authentication with Partially Automatic Sign On

  B. User Authentication

  C. Session Authentication

  D. Client Authentication with Manual Sign On

  Correct Answer: C

• Question 204:

  What is the difference between Standard and Specific Sign On methods?

  A. Standard Sign On allows the user to be automatically authorized for all services that the rule allows, but re-authenticate for each host to which he is trying to connect. Specific Sign On requires that the user re-authenticate for each service.

  B. Standard Sign On requires the user to re-authenticate for each service and each host to which he is trying to connect. Specific Sign On allows the user to sign on only to a specific IP address.

  C. Standard Sign On allows the user to be automatically authorized for all services that the rule allows. Specific Sign On requires that the user re-authenticate for each service and each host to which he is trying to connect.

  D. Standard Sign On allows the user to be automatically authorized for all services that the rule allows. Specific Sign On requires that the user re-authenticate for each service specifically defined in the window Specific Action Properties.

  Correct Answer: C

• Question 205:

  Which set of objects have an Authentication tab?

  A. Networks. Hosts

  B. Users, Networks

  C. Users, User Groups

  D. Templates, Users

  Correct Answer: D

• Question 206:

  As a Security Administrator, you are required to create users for authentication. When you create a user for user authentication, the data is stored in the ___________.

  A. SmartUpdate repository

  B. User Database

  C. Rules Database

  D. Objects Database

  Correct Answer: B

• Question 207:

  The technical-support department has a requirement to access an intranet server. When configuring a User Authentication rule to achieve this, which of the following should you remember?

  A. The Security Gateway first checks if there is any rule that does not require authentication for this type of connection before invoking the Authentication Security Server.

  B. Once a user is first authenticated, the user will not be prompted for authentication again until logging out.

  C. You can only use the rule for Telnet, FTP, SMTP, and rlogin services.

  D. You can limit the authentication attempts in the Authentication tab of the User Properties screen.

  Correct Answer: A

• Question 208:

  Which column in the Rule Base is used to define authentication parameters?

  A. Source

  B. Action

  C. Track

  D. Service

  Correct Answer: B

• Question 209:

  Choose the BEST sequence for configuring user management in SmartDashboard, Using an LDAP server.

  A. Configure a server object for the LDAP Account Unit, enable LDAP in Global Properties

  B. Configure a workstation object for the LDAP server; configure a server object for the LDAP in global properties.

  C. Enable LDAP in Global Properties, configure a host-node object for the LDAP server, and configure a server object for the LDAP Account Unit.

  D. Configure a server object for the LDAP Account Unit, and create an LDAP resource object.

  Correct Answer: C

• Question 210:

  You cannot use SmartDashboard's SmartDirectory features to connect to the LDAP server. What should you investigate?

  

  A. 1 and 3

  B. 1 and 2

  C. 2 and 3

  D. 1, 2, and 3

  Correct Answer: C