CheckPoint Checkpoint Certifications 156-215.77 Questions & Answers

• Question 161:

  In the Rule Base displayed, user authentication in Rule 4 is configured as fully automatic. Eric is a member of the LDAP group, MSD_Group.

  

  What happens when Eric tries to connect to a server on the Internet?

  A. None of these things will happen.

  B. Eric will be authenticated and get access to the requested server.

  C. Eric will be blocked because LDAP is not allowed in the Rule Base.

  D. Eric will be dropped by the Stealth Rule.

  Correct Answer: B

• Question 162:

  Spoofing is a method of:

  A. Making packets appear as if they come from an authorized IP address.

  B. Detecting people using false or wrong authentication logins.

  C. Disguising an illegal IP address behind an authorized IP address through Port Address Translation.

  D. Hiding your firewall from unauthorized users.

  Correct Answer: A

• Question 163:

  Which type of R77 Security Server does not provide User Authentication?

  A. SMTP Security Server

  B. HTTP Security Server

  C. FTP Security Server

  D. HTTPS Security Server

  Correct Answer: A

• Question 164:

  Security Gateway R77 supports User Authentication for which of the following services? Select the response below that contains the MOST correct list of supported services.

  A. SMTP, FTP, TELNET

  B. SMTP, FTP, HTTP, TELNET

  C. FTP, HTTP, TELNET

  D. FTP, TELNET

  Correct Answer: C

• Question 165:

  A marketing firm's networking team is trying to troubleshoot user complaints regarding access to audio-streaming material from the Internet. The networking team asks you to check the object and rule configuration settings for the perimeter Security Gateway. Which SmartConsole application should you use to check these objects and rules?

  A. SmartView Tracker

  B. SmartView Monitor

  C. SmartView Status

  D. SmartDashboard

  Correct Answer: D

• Question 166:

  Exhibit:

  

  You installed Security Management Server on a computer using GAiA in the MegaCorp home office. You use IP address 10.1.1.1. You also installed the Security Gateway on a second GAiA computer, which you plan to ship to another Administrator at a MegaCorp hub office. What is the correct order for pushing SIC certificates to the Gateway before shipping it?

  A. 2, 3, 4, 1, 5

  B. 2, 1, 3, 4, 5

  C. 1, 3, 2, 4, 5

  D. 2, 3, 4, 5, 1

  Correct Answer: B

• Question 167:

  Anti-Spoofing is typically set up on which object type?

  A. Security Gateway

  B. Host

  C. Security Management object

  D. Network

  Correct Answer: A

• Question 168:

  Which rule is responsible for the installation failure? Exhibit:

  

  A. Rule 3

  B. Rule 4

  C. Rule 6

  D. Rule 5

  Correct Answer: C

• Question 169:

  As a Security Administrator, you must refresh the Client Authentication authorization time- out every time a new user connection is authorized. How do you do this? Enable the Refreshable Timeout setting:

  A. in the user object's Authentication screen.

  B. in the Gateway object's Authentication screen.

  C. in the Limit tab of the Client Authentication Action Properties screen.

  D. in the Global Properties Authentication screen.

  Correct Answer: C

• Question 170:

  Which of the following is a viable consideration when determining Rule Base order?

  A. Grouping IPS rules with dynamic drop rules

  B. Placing more restrictive rules before more permissive rules

  C. Grouping authentication rules with QOS rules

  D. Grouping reject and drop rules after the Cleanup Rule

  Correct Answer: B