CheckPoint 156-215.77 Online Practice Questions and Exam Preparation

CheckPoint 156-215.77 Online Questions & Answers

• Question 211:

  Which statement below describes the most correct strategy for implementing a Rule Base?

  A. Limit grouping to rules regarding specific access.
  B. Place the most frequently used rules at the top of the Policy and the ones that are not frequently used further down.
  C. Place a network-traffic rule above the administrator access rule.
  D. Add the Stealth Rule before the last rule.
  B. Place the most frequently used rules at the top of the Policy and the ones that are not frequently used further down.

• Question 212:

  Which of these components does NOT require a Security Gateway R77 license?

  A. Security Management Server
  B. Check Point Gateway
  C. SmartConsole
  D. SmartUpdate upgrading/patching
  C. SmartConsole

• Question 213:

  You want to generate a cpinfo file via CLI on a system running GAiA. This will take about 40 minutes since the log files are also needed. What action do you need to take regarding timeout?

  A. No action is needed because cpshell has a timeout of one hour by default.
  B. Log in as the default user expert and start cpinfo.
  C. Log in as admin, switch to expert mode, set the timeout to one hour with the command, idle 60, then start cpinfo.
  D. Log in as Administrator, set the timeout to one hour with the command idle 60 and start cpinfo.
  D. Log in as Administrator, set the timeout to one hour with the command idle 60 and start cpinfo.

• Question 214:

  Which of the following is NOT true for Clientless VPN?

  A. The Gateway can enforce the use of strong encryption.
  B. The Gateway accepts any encryption method that is proposed by the client and supported in the VPN.
  C. Secure communication is provided between clients and servers that support HTTP.
  D. User Authentication is supported.
  C. Secure communication is provided between clients and servers that support HTTP.

• Question 215:

  Which of the following items should be configured for the Security Management Server to authenticate using LDAP?

  A. Login Distinguished Name and password
  B. Windows logon password
  C. Check Point Password
  D. WMI object
  A. Login Distinguished Name and password

• Question 216:

  Your company has two headquarters, one in London, one in New York. Each of the headquarters includes several branch offices. The branch offices only need to communicate with the headquarters in their country, not with each other, and the headquarters need to communicate directly. What is the BEST configuration for establishing VPN Communities among the branch offices and their headquarters, and between the two headquarters? VPN Communities comprised of:

  A. Three mesh Communities: one for London headquarters and its branches; one for New York headquarters and its branches; and one for London and New York headquarters.
  B. Two mesh and one star Community: Each mesh Community is set up for each site between headquarters their branches. The star Community has New York as the center and London as its satellite.
  C. Two star communities and one mesh: A star community for each city with headquarters as center, and branches as satellites. Then one mesh community for the two headquarters.
  D. One star Community with the option to mesh the center of the star: New York and London Gateways added to the center of the star with the "mesh center Gateways? option checked; all London branch offices defined in one satellite window; but, all New York branch offices defined in another satellite window.
  C. Two star communities and one mesh: A star community for each city with headquarters as center, and branches as satellites. Then one mesh community for the two headquarters.

• Question 217:

  You are troubleshooting NAT entries in SmartView Tracker. Which column do you check to view the new source IP? Exhibit:

  

  A. XlateDPort
  B. XlateDst
  C. XlateSPort
  D. XlateSrc
  D. XlateSrc

• Question 218:

  Captive Portal is a __________ that allows the gateway to request login information from the user.

  A. Pre-configured and customizable web-based tool
  B. Transparent network inspection tool
  C. LDAP server add-on
  D. Separately licensed feature
  A. Pre-configured and customizable web-based tool

• Question 219:

  Which authentication type permits five different sign-on methods in the authentication properties window?

  A. Client Authentication
  B. Manual Authentication
  C. User Authentication
  D. Session Authentication
  A. Client Authentication

• Question 220:

  Your company is running Security Management Server R77 on GAiA, which has been migrated through each version starting from Check Point 4.1. How do you add a new administrator account?

  A. Using SmartDashboard, under Users, select Add New Administrator
  B. Using SmartDashboard or cpconfig
  C. Using the Web console on GAiA under Product configuration, select Administrators
  D. Using cpconfig on the Security Management Server, choose Administrators
  A. Using SmartDashboard, under Users, select Add New Administrator