CheckPoint Checkpoint Certifications 156-215.77 Questions & Answers

• Question 211:

  When using an encryption algorithm, which is generally considered the best encryption method?

  A. Triple DES

  B. AES-256

  C. CAST cipher

  D. DES

  Correct Answer: B

• Question 212:

  Your company is still using traditional mode VPN configuration on all Gateways and policies. Your manager now requires you to migrate to a simplified VPN policy to benefit from the new features. This needs to be done with no downtime due to critical applications which must run constantly. How would you start such a migration?

  A. This cannot be done without downtime as a VPN between a traditional mode Gateway and a simplified mode Gateway does not work.

  B. This can not be done as it requires a SIC- reset on the Gateways first forcing an outage.

  C. You first need to completely rewrite all policies in simplified mode and then push this new policy to all Gateways at the same time.

  D. Convert the required Gateway policies using the simplified VPN wizard, check their logic and then migrate Gateway per Gateway.

  Correct Answer: D

• Question 213:

  Which Client Authentication sign-on method requires the user to first authenticate via the User Authentication mechanism, when logging in to a remote server with Telnet?

  A. Manual Sign On

  B. Agent Automatic Sign On

  C. Partially Automatic Sign On

  D. Standard Sign On

  Correct Answer: C

• Question 214:

  Which of the following is a viable consideration when determining Rule Base order?

  A. Grouping rules by date of creation

  B. Grouping reject and drop rules after the Cleanup Rule

  C. Grouping authentication rules with address-translation rules

  D. Grouping functionally related rules together

  Correct Answer: D

• Question 215:

  Which of the below is the MOST correct process to reset SIC from SmartDashboard?

  A. Run cpconfig, and click Reset.

  B. Click the Communication button for the firewall object, then click Reset. Run cpconfig and type a new activation key.

  C. Run cpconfig, and select Secure Internal Communication > Change One Time Password.

  D. Click Communication > Reset on the Gateway object, and type a new activation key.

  Correct Answer: B

• Question 216:

  You are conducting a security audit. While reviewing configuration files and logs, you notice logs accepting POP3 traffic, but you do not see a rule allowing POP3 traffic in the Rule Base. Which of the following is the most likely cause?

  A. The POP3 rule is disabled.

  B. POP3 is accepted in Global Properties.

  C. The POP3 rule is hidden.

  D. POP3 is one of 3 services (POP3, IMAP, and SMTP) accepted by the default mail object in R77.

  Correct Answer: C

• Question 217:

  If you are experiencing LDAP issues, which of the following should you check?

  A. Connectivity between the R77 Gateway and LDAP server

  B. Secure Internal Communications (SIC)

  C. Overlapping VPN Domains

  D. Domain name resolution

  Correct Answer: A

• Question 218:

  Complete this statement from the options provided. Using Captive Portal, unidentified users may be either; blocked, allowed to enter required credentials, or required to download the _____________.

  A. Identity Awareness Agent

  B. Full Endpoint Client

  C. ICA Certificate

  D. SecureClient

  Correct Answer: A

• Question 219:

  Which of these attributes would be critical for a site-to-site VPN?

  A. Scalability to accommodate user groups

  B. Centralized management

  C. Strong authentication

  D. Strong data encryption

  Correct Answer: D

• Question 220:

  Which of the following is NOT a valid option when configuring access for Captive Portal?

  A. From the Internet

  B. Through internal interfaces

  C. Through all interfaces

  D. According to the Firewall Policy

  Correct Answer: A