CheckPoint CCSA 156-215.75 Questions & Answers

• Question 351:

  John is the Security Administrator in his company. He installs a new R75 Security Management Server and a new R75 Gateway. He now wants to establish SIC between them. After entering the activation key, the message "Trust established" is displayed in SmartDashboard, but SIC still does not seem to work because the policy won't install and interface fetching still does not work. What might be a reason for this?

  A. This must be a human error.

  B. The Gateway's time is several days or weeks in the future and the SIC certificate is not yet valid.

  C. SIC does not function over the network.

  D. It always works when the trust is established.

  Correct Answer: B

• Question 352:

  You have installed a R75 Security Gateway on SecurePlatform. To manage the Gateway from the enterprise Security Management Server, you create a new Gateway object and Security Policy. When you install the new Policy from the Policy menu, the Gateway object does not appear in the Install Policy window as a target. What is the problem?

  A. The new Gateway's temporary license has expired.

  B. The object was created with Node > Gateway.

  C. The Gateway object is not specified in the first policy rule column Install On.

  D. No Masters file is created for the new Gateway.

  Correct Answer: B

• Question 353:

  Select the correct statement about Secure Internal Communications (SIC) Certificates. SIC Certificates:

  A. Are used for securing internal network communications between the SmartDashboard and the Security Management Server.

  B. For R75 Security Gateways are created during the Security Management Server installation.

  C. Decrease network security by securing administrative communication among the Security Management Servers and the Security Gateway.

  D. Uniquely identify Check Point enabled machines; they have the same function as VPN Certificates.

  Correct Answer: D

• Question 354:

  Which of the following describes the default behavior of an R75 Security Gateway?

  A. Traffic is filtered using controlled port scanning.

  B. All traffic is expressly permitted via explicit rules.

  C. Traffic not explicitly permitted is dropped.

  D. IP protocol types listed as secure are allowed by default, i.e. ICMP, TCP, UDP sessions are inspected.

  Correct Answer: C

• Question 355:

  When you use the Global Properties' default settings on R75, which type of traffic will be dropped if no explicit rule allows the traffic?

  A. SmartUpdate connections

  B. Firewall logging and ICA key-exchange information

  C. Outgoing traffic originating from the Security Gateway

  D. RIP traffic

  Correct Answer: D

• Question 356:

  Of the following, what parameters will not be preserved when using Database Revision Control?

  1) Simplified mode Rule Bases 2) Traditional mode Rule Bases 3) Secure Platform WebUI Users 4) SIC certificates 5) SmartView Tracker audit logs 6) SmartView Tracker traffic logs 7) Implied Rules 8) IPS Profiles 9) Blocked connections 10) Manual NAT rules 11) VPN communities 12) Gateway route table 13) Gateway licenses

  A. 3, 4, 5, 6, 9, 12, 13

  B. 5, 6, 9, 12, 13

  C. 1, 2, 8, 10, 11

  D. 2, 4, 7, 10, 11

  Correct Answer: A

• Question 357:

  How can you configure an application to automatically launch on the Security Management Server when traffic is dropped or accepted by a rule in the Security Policy?

  A. Pop-up alert script

  B. User-defined alert script

  C. Custom scripts cannot be executed through alert scripts

  D. SNMP trap alert script

  Correct Answer: B

• Question 358:

  Which of the following is NOT useful to verify whether or NOT a Security Policy is active on a Gateway?

  A. Check the name of Security Policy of the appropriate Gateway in Smart Monitor.

  B. Cpstat fw f policy

  C. fw stat

  D. fw ctl get string active_secpol

  Correct Answer: D

• Question 359:

  Which feature or command provides the easiest path for Security Administrators to revert to earlier versions of the same Security Policy and objects configuration?

  A. Policy Package management

  B. dbexport/dbimport

  C. Database Revision Control

  D. upgrade_export/upgrade_import

  Correct Answer: C

• Question 360:

  Your Security Management Server fails and does not reboot. One of your remote Security Gateways managed by the Security Management Server reboots. What occurs with the remote Gateway after reboot?

  A. Since the Security Management Server is not available, the remote Gateway cannot fetch the Security Policy. Therefore, no traffic is allowed through the Gateway.

  B. Since the Security Management Server is not available, the remote Gateway cannot fetch the Security Policy. Therefore, all traffic is allowed through the Gateway.

  C. Since the Security Management Server is not available, the remote Gateway uses the local Security Policy, but does not log traffic.

  D. The remote Gateway fetches the last installed Security Policy locally and passes traffic normally. The Gateway will log locally, since the Security Management Server is not available.

  Correct Answer: D