CheckPoint Checkpoint Certifications 156-215.77 Questions & Answers

• Question 91:

  Which of the following is NOT defined by an Access Role object?

  A. Source Network

  B. Source Machine

  C. Source User

  D. Source Server

  Correct Answer: D

• Question 92:

  An Administrator without access to SmartDashboard installed a new IPSO-based R77 Security Gateway over the weekend. He e-mailed you the SIC activation key. You want to confirm communication between the Security Gateway and the Management Server by installing the Policy. What might prevent you from installing the Policy?

  A. An intermediate local Security Gateway does not allow a policy install through it to the remote new Security Gateway appliance. Resolve by running the command fw unloadlocal on the local Security Gateway.

  B. You first need to run the command fw unloadlocal on the R77 Security Gateway appliance in order to remove the restrictive default policy.

  C. You first need to create a new Gateway object in SmartDashboard, establish SIC via the Communication button, and define the Gateway's topology.

  D. You have not established Secure Internal Communications (SIC) between the Security Gateway and Management Server. You must initialize SIC on the Security Management Server.

  Correct Answer: C

• Question 93:

  How can you recreate the Security Administrator account, which was created during initial Management Server installation on GAiA?

  A. Export the user database into an ASCII file with fwm dbexport. Open this file with an editor, and delete the Administrator Account portion of the file. You will be prompted to create a new account.

  B. Type cpm -a, and provide the existing Administrator's account name. Reset the Security Administrator's password.

  C. Launch cpconfig and delete the Administrator's account. Recreate the account with the same name.

  D. Launch SmartDashboard in the User Management screen, and delete the cpconfig administrator.

  Correct Answer: C

• Question 94:

  During which step in the installation process is it necessary to note the fingerprint for first- time verification?

  A. When configuring the Gateway in the WebUI

  B. When configuring the Security Management Server using cpconfig

  C. When establishing SIC between the Security Management Server and the Gateway

  D. When configuring the Security Gateway object in SmartDashboard

  Correct Answer: B

• Question 95:

  How granular may an administrator filter an Access Role with identity awareness? Per:

  A. Specific ICA Certificate

  B. AD User

  C. Radius Group

  D. Windows Domain

  Correct Answer: B

• Question 96:

  Where are SmartEvent licenses installed?

  A. SmartEvent server

  B. Log Server

  C. Security Management Server

  D. Security Gateway

  Correct Answer: A

• Question 97:

  Which of the following objects is a valid source in an authentication rule?

  A. Host@Any

  B. User@Network

  C. User_group@Network

  D. User@Any

  Correct Answer: C

• Question 98:

  Which of the following firewall modes DOES NOT allow for Identity Awareness to be deployed?

  A. Bridge

  B. Load Sharing

  C. High Availability

  D. Fail Open

  Correct Answer: A

• Question 99:

  What happens if the identity of a user is known?

  A. If the user credentials do not match an Access Role, the traffic is automatically dropped.

  B. If the user credentials do not match an Access Role, the system displays a sandbox.

  C. If the user credentials do not match an Access Role, the gateway moves onto the next rule.

  D. If the user credentials do not match an Access Role, the system displays the Captive Portal.

  Correct Answer: C

• Question 100:

  Can you use Captive Portal with HTTPS?

  A. No, it only works with FTP

  B. No, it only works with FTP and HTTP

  C. Yes

  D. No, it only works with HTTP

  Correct Answer: C