CheckPoint CCSA 156-215.75 Questions & Answers

• Question 421:

  Although SIC was already established and running, Joe reset SIC between the Security Management Server and a remote Gateway. He set a new activation key on the Gateway's side with the cpconfig command and put in the same activation key in the Gateway's object on the Security Management Server Unfortunately SIC cannot be established. What is a possible reason for the problem?

  A. The installed policy blocks the communication.

  B. Joe forgot to reboot the Gateway.

  C. Joe forgot to exit from cpconfig.

  D. The old Gateway object should have been deleted and recreated.

  Correct Answer: C

• Question 422:

  You installed Security Management Server on a computer using SecurePlatform in the MegaCorp home

  office. You use IP address 10.1.1.1. You also installed the Security Gateway on a second SecurePlatform

  computer, which you plan to ship to another Administrator at a MegaCorp hub office. What is the correct

  order for pushing SIC certificates to the Gateway before shipping it?

  1) Run cpconfig on the gateway, set secure internal communication, enter the activation key and reconfirm.

  2) Initialize internal certificate authority (ICA) on the security Management server.

  3) Confirm the gateway object with the host name and IP address for the remote site.

  4) Click the communication button in the gateway object's general screen, enter the activation key, and

  click initialize and ok.

  5) Install the security policy.

  A. 2, 3, 4, 5, 1

  B. 1, 3, 2, 4, 5

  C. 2, 3, 4, 1, 5

  D. 2, 1, 3, 4, 5

  Correct Answer: B

• Question 423:

  Which of the below is the MOST correct process to reset SIC from SmartDashboard?

  A. Run cpconfig, and click Reset.

  B. Click the Communication button for the firewall object, then click Reset. Run cpconfig and type a new activation key.

  C. Click Communication > Reset on the Gateway object, and type a new activation key.

  D. Run cpconfig, and select Secure Internal Communication > Change One Time Password.

  Correct Answer: B

• Question 424:

  Spoofing is a method of:

  A. Hiding your firewall from unauthorized users.

  B. Disguising an illegal IP address behind an authorized IP address through port address Translation.

  C. Making packets appear as if they come from an authorized IP address

  D. Detecting people using false or wrong authentication logins.

  Correct Answer: C

• Question 425:

  Certificates for Security Gateways are created during a simple initialization from______.

  A. SmartUpdate

  B. sysconfig

  C. The ICA management tool.

  D. SmartDashboard

  Correct Answer: D

• Question 426:

  How does the Get Address button, found on the Host Node Object > General Properties page retrieve the address?

  A. Route Table

  B. SNMP Get

  C. Address resolution (ARP. RARP)

  D. Name resolution (hosts file, DNS, cache)

  Correct Answer: D

• Question 427:

  Anti-Spoofing is typically set up on which object type?

  A. Host

  B. Domain

  C. Network

  D. Security Gateway

  Correct Answer: D

• Question 428:

  You create implicit and explicit rules for the following network. The group object internal- networks includes networks 10.10.10.0 and 10.10.20.0. Assume Accept ICMP requests is enabled as Before last in Global Properties.

  Based on these rules, what happens if you Ping from host 10.10.10.5 to a host on the Internet by IP address? ICMP will be:

  A. dropped by rule 0.

  B. dropped by rule 2, the Cleanup Rule.

  C. accepted by rule 1.

  D. dropped by the last Implicit rule.

  Correct Answer: C

• Question 429:

  When you change an implicit rule's order from last to first in global properties, how do you make the change take effect?

  A. Select save from the file menu

  B. Reinstall the security policy

  C. Select install database from the policy menu

  D. Run fw fetch from the security gateway

  Correct Answer: B

• Question 430:

  The button Get Address, found on the Host Node Object > General Properties page, will retrieve what?

  A. The domain name

  B. The fully qualified domain name

  C. The Mac address

  D. The IP address

  Correct Answer: D