CheckPoint CCSA 156-215.75 Questions & Answers

• Question 301:

  How do you use SmartView Monitor to compile traffic statistics for your company's Internet activity during production hours?

  A. View total packets passed through the security gateway

  B. Use the Traffic Counters settings and SmartView Monitor to generate a graph showing the total HTTP traffic for the day.

  C. Select the Tunnels view, and generate a report on the statistics

  D. Configure a suspicious activity rule which triggers an alert when HTTP traffic pass through gateway

  Correct Answer: B

• Question 302:

  One of your remote Security Gateway's suddenly stops sending logs, and you cannot install the Security Policy on the Gateway. All other remote Security Gateways are logging normally to the Security Management Server, and Policy installation is not affected. When you click the Test SIC status button in the problematic Gateway object you receive an error message. What is the problem?

  A. There is no connection between the Security Management Server and the remote Gateway. Rules or routing may block the connection.

  B. The remote Gateway's IP address has changed, which invalidates the SIC Certificate.

  C. The time on the Security Management Server's clock has changed, which invalidates the remote Gateway's Certificate.

  D. The Internal Certificate Authority for the Security Management Server object has been removed from objects_5_0.C.

  Correct Answer: A

• Question 303:

  Which of the following can be found in cpinfo from an enforcement point?

  A. The complete file objects_5_0. c

  B. Policy file information specific to this enforcement point

  C. Everything NOT contained in the file r2info

  D. VPN keys for all established connections to all enforcement points

  Correct Answer: B

• Question 304:

  Where is the best place to find information about connections between two machines?

  A. On a Security Management Server, using SmartView Tracker

  B. All options are valid.

  C. On a Security Gateway using the command fw log.

  D. On a Security Gateway Console interface; it gives you detailed access to log files and state table information

  Correct Answer: A

• Question 305:

  You can include External commands in SmartView Tracker by the menu Tools > Custom Commands.

  The Security Management Server is running under SecurePlatform, and the GUI is on a system running Microsoft Windows. How do you run the command traceroute on an IP address?

  A. There is no possibility to expand the three pre-defined options Ping, Whois, and Nslookup.

  B. Go to the menu Tools > Custom Commands and configure the Windows command tracert.exe to the list.

  C. Use the program GUIdbedit to add the command traceroute to the Security Management Server properties.

  D. Go to the menu, Tools > Custom Commands and configure the Linux command traceroute to the list.

  Correct Answer: B

• Question 306:

  You want to display log entries containing information from a specific column in the SmartView Tracker. If you want to see ONLY those entries, what steps would you take?

  A. Right-click column, Search.../ Add string / Apply Filter

  B. Right-click column, Edit Filter / Specific / Add / OK

  C. Left-click column, Search / Add string / Apply Filter

  D. Left-click column, Specific / Add / Apply Filter

  Correct Answer: B

• Question 307:

  How do you define a service object for a TCP port range?

  A. Manage Services / New TCP, provide name and define port: x-y

  B. Manage Services / New Group, provide name and add all service ports for range individually to the group object

  C. Manage Services / New Other, provide name and define protocol: 17, Range: x-y

  D. Manage Services / New Other, provide name and define protocol: x-y

  Correct Answer: A

• Question 308:

  You are working with three other Security Administrators. Which SmartConsole component can be used to monitor changes to rules or object properties made by the other administrators?

  A. Eventia Monitor

  B. SmartView Monitor

  C. SmartView Tracker

  D. Eventia Tracker

  Correct Answer: C

• Question 309:

  Which SmartView Tracker mode allows you to read the SMTP e-mail body sent from the Chief Executive Officer (CEO) of a company?

  A. This is not a SmartView Tracker feature.

  B. Display Payload View

  C. Display Capture Action

  D. Network and Endpoint Tab

  Correct Answer: A

• Question 310:

  What happens when you select File > Export from the SmartView Tracker menu?

  A. Logs in fw.log are exported to a file that can be opened by Microsoft Excel.

  B. Exported log entries are not viewable in SmartView Tracker.

  C. Current logs are exported to a new *.log file.

  D. Exported log entries are deleted from fw.log.

  Correct Answer: A