CheckPoint CCSA 156-215.75 Questions & Answers

• Question 271:

  Where do you enable popup alerts for IPS settings that have detected suspicious activity?

  A. In SmartView Monitor, select Tools / Alerts

  B. In SmartView Tracker, select Tools / Custom Commands

  C. In SmartDashboard, edit the Gateway object, and select IPS / Alerts

  D. In SmartDashboard, select Global Properties / Log and Alert / Alert Commands

  Correct Answer: A

• Question 272:

  Which R75 GUI would you use to see the number of packets accepted since the last policy install?

  A. SmartView Monitor

  B. SmartView Status

  C. SmartView Tracker

  D. SmartDashboard

  Correct Answer: A

• Question 273:

  While in Smart View Tracker, Brady has noticed some very odd network traffic that he thinks could be an intrusion. He decides to block the traffic for 60 but cannot remember all the steps. What is the correct order of steps needed to perform this? 1) Select the Active Mode tab In Smart view Tracker 2) Select Tools > Block Intruder 3) Select the Log Viewing tab in SmartView Tracker 4) Set the Blocking Time out value to 60 minutes 5) Highlight the connection he wishes to block

  A. 3, 2, 5, 4

  B. 3, 5, 2, 4

  C. 1, 5, 2, 4

  D. 1, 2, 5, 4

  Correct Answer: C

• Question 274:

  What information is found in the SmartView Tracker Management log?

  A. Rule author

  B. TCP handshake average duration

  C. TCP source port

  D. Top used QOS rule

  Correct Answer: A

• Question 275:

  Which of the following R75 SmartView Tracker views will display a popup warning about performance implications on the Security Gateway?

  A. Active Tab

  B. Audit Tab

  C. Account Query

  D. All Records Query

  Correct Answer: A

• Question 276:

  Which SmartView Tracker selection would most effectively show who installed a Security Policy blocking all traffic from the corporate network?

  A. Custom filter

  B. Network and Endpoint tab

  C. Management Tab

  D. Active tab

  Correct Answer: C

• Question 277:

  You are reviewing the Security Administrator activity for a bank and comparing it to the change log. How do you view Security Administrator activity?

  A. SmartView Tracker cannot display Security Administrator activity: instead, view the system logs on the Security Management Server's Operating System

  B. SmartView Tracker in Management Mode

  C. SmartView Tracker in Active Mode

  D. SmartView Tracker in Network and Endpoint Mode

  Correct Answer: B

• Question 278:

  Where are custom queries stored in R75 SmartView Tracker?

  A. On the Security Management Server tied to the Administrator User Database login name.

  B. On the SmartView Tracker PC local file system under the user's profile.

  C. On the Security Management Server tied to the GUI client IP.

  D. On the SmartView Tracker PC local file system shared by all users of that local PC.

  Correct Answer: A

• Question 279:

  How do you view a Security Administrator's activities with SmartConsole?

  A. SmartView Tracker in the Management tab

  B. SmartView Tracker in the Network and Endpoint tabs

  C. SmartView Monitor using the Administrator Activity filter

  D. Eventia Suite

  Correct Answer: A

• Question 280:

  Where can an administrator configure the notification action in the event of a policy install time change?

  A. SmartView Tracker / Audit Log

  B. SmartView Monitor / Gateways / Thresholds Settings

  C. SmartDashboard / Security Gateway Object / Advanced Properties Tab

  D. SmartDashboard / Policy Package Manager

  Correct Answer: B