CheckPoint CCSA 156-215.75 Questions & Answers

• Question 21:

  With Access Roles, is it possible to deny a single user access to a certain file?

  A. Yes, if you add the user to a blocked group

  B. Yes, if you deny access based on the user's machine

  C. No, Access Roles are based on user groups, not individual users

  D. Yes, if you deny access based on the user's location

  Correct Answer: A

• Question 22:

  Where do you verify that SmartDirectory is enabled?

  A. Verify that Global Properties > SmartDirectory (LDAP) > Use SmartDirectory (LDAP) for Security Gateways is checked

  B. Verify that Global Properties > Authentication > Use SmartDirectory (LDAP) for Security Gateways is checked

  C. Verify that Security Gateway > General Properties > Authentication > Use SmartDirectory (LDAP) for Security Gateways is checked

  D. Verify that Security Gateway > General Properties > SmartDirectory (LDAP) > Use SmartDirectory (LDAP) for Security Gateways is checked

  Correct Answer: A

• Question 23:

  Where does the security administrator activate Identity Awareness within SmartDashboard?

  A. LDAP Server Object > General Properties

  B. Gateway Object > General Properties

  C. Policy > Global Properties > Identity Awareness

  D. Security Management Server > Identity Awareness

  Correct Answer: B

• Question 24:

  How do you configure the Security Policy to provide user access to the Captive Portal through an external (Internet) interface?

  A. Change the Identity Awareness settings under Global Properties to allow Captive Portal access on all interfaces.

  B. Change the Identity Awareness settings under Global Properties to allow Captive Portal access for an external interface.

  C. Change the gateway settings to allow Captive Portal access via an external interface.

  D. No action is necessary. This access is available by default.

  Correct Answer: C

• Question 25:

  What type of traffic can be re-directed to the Captive Portal?

  A. FTP

  B. All of the above

  C. SMTP

  D. HTTP

  Correct Answer: D

• Question 26:

  Users with Identity Awareness Agent installed on their machines login with __________, so that when the user logs into the domain, that information is also used to meet Identity Awareness credential requests.

  A. ICA Certificates

  B. Key-logging

  C. SecureClient

  D. Single Sign-On

  Correct Answer: D

• Question 27:

  Which of the following methods is NOT used by Identity Awareness to catalog identities?

  A. AD Query

  B. GPO

  C. Captive Portal

  D. Identity Agent

  Correct Answer: B

• Question 28:

  When using AD Query to authenticate users for Identity Awareness, identity data is received seamlessly from the Microsoft Active Directory (AD). What is NOT a recommended usage of this method?

  A. Leveraging identity in Internet application control

  B. Identity-based enforcement for non-AD users (non-Windows and guest users)

  C. Identity-based auditing and logging

  D. Basic identity enforcement in the internal network

  Correct Answer: B

• Question 29:

  Which of the following is NOT a valid option when configuring access for Captive Portal?

  A. According to the Firewall Policy

  B. From the Internet

  C. Through internal interfaces

  D. Through all interfaces

  Correct Answer: B

• Question 30:

  How granular may an administrator filter an Access Role?

  A. Windows Domain

  B. AD User

  C. Radius Group

  D. Specific ICA Certificate

  Correct Answer: B