CheckPoint CCSA 156-215.75 Questions & Answers

• Question 451:

  Peter is your new Security Administrator. On his first working day, he is very nervous and sets the wrong password three times. His account is locked. What can be done to unlock Peter's account? Give the BEST answer.

  A. You can unlock Peter's account by using the command fwm unlock_admin -u Peter on the Security Gateway.

  B. It is not possible to unlock Peter's account. You have to install the firewall once again or abstain from Peter's help.

  C. You can unlock Peter's account by using the command fwm lock_admin -u Peter on the Security Management Server.

  D. You can unlock Peter's account by using the command fwm unlock_admin -u Peter on the Security Management Server.

  Correct Answer: C

• Question 452:

  Which of the following tools is used to generate a Security Gateway R75 configuration report?

  A. ethereal

  B. cpinfo

  C. licview

  D. infoview

  Correct Answer: B

• Question 453:

  Which of the following is a CLI command for Security Gateway R75?

  A. fwm policy_print

  B. fw shutdown

  C. fw merge

  D. fw tab -u

  Correct Answer: D

• Question 454:

  Your company is running Security Management Server R75 on SecurePlatform, which has been migrated through each version starting from Check Point 4.1. How do you add a new administrator account?

  A. Using SmartDashboard, under Users, select Add New Administrator

  B. Using the Web console on SecurePlatform under Product configuration, select Administrators

  C. Using SmartDashboard or cpconf ig

  D. Using cpconftg on the Security Management Server, choose Administrators

  Correct Answer: A

• Question 455:

  When restoring R75 using the command upgrade > Port. Which of the following items is NOT restored?

  A. Licenses

  B. Global properties

  C. SIC Certificates

  D. Route tables

  Correct Answer: D

• Question 456:

  Your organization's disaster recovery plan needs an update to the backup and restore section to reap the benefits of the new distributed R75 installation. Your plan must meet the following required and desired objectives:

  Required Objective: The Security Policy repository must be backed up no less frequently than every 24 hours. Desired Objective: The R75 components that enforce the Security Polices should be blocked up at least once a week. Desired Objective: Back up R75 logs at least once a week

  Your disaster recovery plan is as follows:

  Use the cron utility to run the upgrade_ export command each night on the Security Management Servers. Configure the organization's routine backup software to back up the files created by the upgrade_ export command. Configure the SecurePlatform backup utility to back up the Security Gateways every Saturday night Use the cron utility to run the upgrade export: command each Saturday niqht on the log servers Configure an automatic, nightly loqswitch Configure the organization's routine backup software to back up the switched logs every night

  Upon evaluation, your plan:

  A. Meets the required objective but does not meet either desired objective.

  B. Does not meet the required objective.

  C. Meets the required objective and only one desired objective.

  D. Meets the required objective and both desired objectives.

  Correct Answer: D

• Question 457:

  Which of the following methods will provide the most complete backup of an R75 configuration?

  A. Policy Package Management

  B. Copying the $PWDIR\conf and $CPDIR\conf directories to another server

  C. upgrade_export command

  D. Database Revision Control

  Correct Answer: C

• Question 458:

  Which of the following commands can provide the most complete restoration of an R75 configuration?

  A. Cpconfig

  B. Upgrade_import

  C. fwm dbimport p

  D. cpinfo recover

  Correct Answer: B

• Question 459:

  Your R75 primary Security Management Server is installed on SecurePlatform. You plan to schedule the Security Management Server to run fw logswitch automatically every 48 hours.

  How do you create this schedule?

  A. Create a time object, and add 48 hours as the interval. Open the primary Security Management Server object's Logs and Masters window, enable Schedule log switch, and select the Time object.

  B. Create a time object, and add 48 hours as the interval. Open the Security Gateway object's Logs and Masters window, enable Schedule log switch, and select the Time object.

  C. Create a time object, and add 48 hours as the interval. Select that time object's Global Properties > Logs and Masters window, to schedule a logswitch.

  D. On a SecurePlatform Security Management Server, this can only be accomplished by configuring the fw logswitch command via the cron utility.

  Correct Answer: A

• Question 460:

  You need to back up the routing, interface, and DNS configuration information from your R75 SecurePlatform Security Gateway. Which backup-and-restore solution do you use?

  A. SecurePlatform backup utilities

  B. upgrade_export and upgrade_import commands

  C. Database Revision Control

  D. Manual copies of the $FWDIR/conf directory

  Correct Answer: A