CheckPoint CCSA 156-215.75 Questions & Answers

• Question 211:

  Identify the ports to which the Client Authentication daemon listens by default.

  A. 8080, 529

  B. 259,900

  C. 80, 256

  D. 256,600

  Correct Answer: B

• Question 212:

  What is the Manual Client Authentication TELNET Port?

  A. 23

  B. 259 C. 264

  D. 900

  Correct Answer: B

• Question 213:

  Your company's Security Policy forces users to authenticate to the Gateway explicitly, before they can use any services. The Gateway does not allow the Telnet service to itself from any location. How would you configure authentication on the Gateway? With a:

  A. Client Authentication for fully automatic sign on

  B. Client Authentication rule using the manual sign-on method, using HTTP on port 900

  C. Client Authentication rule, using partially automatic sign on

  D. Session Authentication rule

  Correct Answer: B

• Question 214:

  Which authentication type permits five different sign-on methods in the authentication properties window?

  A. Manual Authentication

  B. Client Authentication

  C. Session Authentication

  D. User Authentication

  Correct Answer: B

• Question 215:

  Which of the following objects is a valid source in an authentication rule?

  A. User@Network

  B. User@Any

  C. Host@Any

  D. User_group@Network

  Correct Answer: D

• Question 216:

  Users are not prompted for authentication when they access their Web servers, even though you have created an HTTP rule via User Authentication. Why?

  A. Users must use the SecuRemote Client, to use the User Authentication Rule.

  B. Another rule that accepts HTTP without authentication exists in the Rule Base.

  C. You checked the cache password on desktop option in Global Properties.

  D. You have forgotten to place the User Authentication Rule before the Stealth Rule.

  Correct Answer: B

• Question 217:

  R75 is compatible with UTM-1 Edge gateways X.X and above. X.X is:

  A. 6.5

  B. 7.5

  C. 7.0

  D. 8.5

  Correct Answer: B

• Question 218:

  Can you upgrade a clustered deployment with zero downtime?

  A. No, this is not possible.

  B. Yes, if you select the option zero downtime, it will keep one member active

  C. No, you must bring all gateways down.

  D. Yes, this is the default setting.

  Correct Answer: B

• Question 219:

  As a Security Administrator, you must refresh the Client Authentication authorization time-out every time a new user connection is authorized. How do you do this? Enable the Refreshable Timeout setting:

  A. in the user object's Authentication screen

  B. in the Gateway object's Authentication screen

  C. in the Limit tab of the Client Authentication Action Properties screen

  D. in the Global Properties Authentication screen

  Correct Answer: C

• Question 220:

  Your Rule Base includes a Client Authentication rule, using partial authentication and standard sign-on for HTTP, Telnet, and FTP services. The rule was working, until this morning. Now users are not prompted for authentication, and they see error page cannot be displayed in the browser. In SmartView Tracker, you discover the HTTP connection is dropped when the Gateway is the destination. What did you do to cause Client Authentication to fail?

  A. disabled R75 Control Connections in Global Properties

  B. enabled Static NAT on the problematic machines

  C. added a rule below the Client Authentication rule, blocking HTTP from the internal network

  D. added the Stealth Rule before the Client Authentication rule

  Correct Answer: D