CheckPoint 156-215.75 Online Practice Questions and Exam Preparation

CheckPoint 156-215.75 Online Questions & Answers

• Question 421:

  Review the following list of actions that Security Gateway R75 can take when it controls packets. The Policy Package has been configured for Simplified Mode VPN. Select the response below that includes the available actions:

  A. Accept, Drop, Encrypt, Session Auth
  B. Accept, Drop, Reject, Client Auth
  C. Accept, Hold, Reject, Proxy
  D. Accept, Reject, Encrypt, Drop
  B. Accept, Drop, Reject, Client Auth

• Question 422:

  Which of the following commands do you run on the AD server to identify the DN name before configuring LDAP integration with the Security Gateway?

  A. query ldap –name administrator
  B. dsquery user –name administrator
  C. ldapquery –name administrator
  D. cpquery –name administrator
  B. dsquery user –name administrator

• Question 423:

  Domain name can NOT be changed in SmartProvisioning and Domain Name is grayed out. What is a possible reason for this?

  A. There is no SmartProvisioning license installed.
  B. Profile is not assigned to any Gateway.
  C. Override profile setting on device level is set to Mandatory.
  D. Domain name settings are always fetched from firewall object.
  C. Override profile setting on device level is set to Mandatory.

• Question 424:

  The following graphic illustrates which command being issued on SecurePlatform?

  A. The administrator will have to open the old session and make the changes, no note is added automatically, however, the manager adds his notes stating the changes required.
  B. The same session is modified with a note automatically added stating under repair.
  C. The old status is removed and a new session is created with the same name, but with a note stating new session after repair.
  D. A new session is created by the name Repairing Session and the old session status is updated to Repaired with a note stating Repaired by Session < new id>
  D. A new session is created by the name Repairing Session and the old session status is updated to Repaired with a note stating Repaired by Session < new id>

• Question 425:

  You just upgraded to R71 and are using the IPS Software Blade. You want to enable all critical protections while keeping the rate of false positive very low. How can you achieve this?

  A. new IPS system is based on policies, but it has no ability to calculate or change the confidence level, so it always has a high rate of false positives.
  B. As in SmartDefense, this can be achieved by activating all the critical checks manually.
  C. The new IPS system is based on policies and gives you the ability to activate al checks with critical severity and a high confidence level.
  D. This can't be achieved; activating any IPS system always causes a high rate of false positives.
  C. The new IPS system is based on policies and gives you the ability to activate al checks with critical severity and a high confidence level.

• Question 426:

  What physical machine must have access to the UserCenter public IP when checking for new packages with SmartUpdate?

  A. VPN-1 Security Gateway getting the new upgrade package
  B. SmartUpdate installed SmartCenter Server PC
  C. SmartUpdate Repository SQL database Server
  D. SmartUpdate GUI PC
  D. SmartUpdate GUI PC

• Question 427:

  In R71, how would you define a rule to block all traffic sent to or from Germany?

  A. This action is not possible.
  B. Create a policy rule with destination being a custom dynamic object representing Germany and action block. You must also create a rule in the opposite direction.
  C. Create a country specific policy within IPS Geo Protections with Germany as the country, block as the action, and from and to country for direction.
  D. Go to Policy / Global Properties / Geographical Protection Enforcement and add Germany to the blocked countries list.
  C. Create a country specific policy within IPS Geo Protections with Germany as the country, block as the action, and from and to country for direction.

• Question 428:

  Which of the following SSL Network Extender server-side prerequisites are correct? Select all that apply.

  A. The VPN1-Gateway must be configured to work with Visitor Mode
  B. The specific VPN-1 Security Gateway must be configured as a member of the VPN-1 Remote Access Community.
  C. There are distinctly separate access rules required for SecureClient users vs. SSL Network Extender users.
  D. To use Integrity Clientless Security (ICS), you must install the ICS server or configuration tool.
  A. The VPN1-Gateway must be configured to work with Visitor Mode
  B. The specific VPN-1 Security Gateway must be configured as a member of the VPN-1 Remote Access Community.
  D. To use Integrity Clientless Security (ICS), you must install the ICS server or configuration tool.

• Question 429:

  When using SmartWorkflow, how many sessions can be in progress at the same time?

  A. 2
  B. As many as you want
  C. 1
  D. 3
  C. 1

• Question 430:

  For Management High Availability synchronization, what does the Advance status mean?

  A. The peer SMS has not been synchronized properly.
  B. The peer SMS is properly synchronized.
  C. The active SMS and its peer have different installed policies and databases.
  D. The peer SMS is more up-to-date.
  D. The peer SMS is more up-to-date.