CheckPoint Checkpoint Certifications 156-215.77 Questions & Answers

• Question 271:

  Peter is your new Security Administrator. On his first working day, he is very nervous and enters the wrong password three times. His account is locked. What can be done to unlock Peter's account? Give the BEST answer.

  A. You can unlock Peter's account by using the command fwm lock_admin -u Peter on the Security Management Server.

  B. You can unlock Peter's account by using the command fwm unlock_admin -u Peter on the Security Management Server

  C. It is not possible to unlock Peter's account. You have to install the firewall once again or abstain from Peter's help.

  D. You can unlock Peter's account by using the command fwm unlock_admin -u Peter on the Security Gateway.

  Correct Answer: A

• Question 272:

  The customer has a small Check Point installation which includes one Windows 7 workstation as the SmartConsole, one GAiA device working as Security Management Server, and a third server running SecurePlatform as Security Gateway. This is an example of a(n):

  A. Hybrid Installation

  B. Unsupported configuration

  C. Stand-Alone Installation

  D. Distributed Installation

  Correct Answer: D

• Question 273:

  Looking at the SYN packets in the Wireshark output, select the statement that is true about NAT. Exhibit:

  

  A. This is an example of Hide NAT.

  B. There is not enough information provided in the Wireshark capture to determine the NAT settings.

  C. This is an example of Static NAT and Translate destination on client side unchecked in Global Properties.

  D. This is an example of Static NAT and Translate destination on client side checked in Global Properties.

  Correct Answer: D

• Question 274:

  SmartView Tracker R77 consists of three different modes. They are:

  A. Log, Active, and Audit

  B. Log, Active, and Management

  C. Network and Endpoint, Active, and Management

  D. Log, Track, and Management

  Correct Answer: C

• Question 275:

  Which of the following can be found in cpinfo from an enforcement point?

  A. Everything NOT contained in the file r2info

  B. VPN keys for all established connections to all enforcement points

  C. The complete file objects_5_0.c

  D. Policy file information specific to this enforcement point

  Correct Answer: D

• Question 276:

  You are responsible for the configuration of MegaCorp's Check Point Firewall. You need to allow two NAT rules to match a connection. Is it possible? Give the BEST answer.

  A. No, it is not possible to have more than one NAT rule matching a connection. When the firewall receives a packet belonging to a connection, it compares it against the first rule in the Rule Base, then the second rule, and so on. When it finds a rule that matches, it stops checking and applies that rule.

  B. Yes, it is possible to have two NAT rules which match a connection, but only in using Manual NAT (bidirectional NAT).

  C. Yes, there are always as many active NAT rules as there are connections.

  D. Yes, it is possible to have two NAT rules which match a connection, but only when using Automatic NAT (bidirectional NAT).

  Correct Answer: D

• Question 277:

  Which of the following is a hash algorithm?

  A. 3DES

  B. IDEA

  C. DES

  D. MD5

  Correct Answer: D

• Question 278:

  You manage a global network extending from your base in Chicago to Tokyo, Calcutta and Dallas. Management wants a report detailing the current software level of each Enterprise class Security Gateway. You plan to take the opportunity to create a proposal outline, listing the most cost-effective way to upgrade your Gateways. Which two SmartConsole applications will you use to create this report and outline?

  A. SmartView Tracker and SmartView Monitor

  B. SmartLSM and SmartUpdate

  C. SmartDashboard and SmartView Tracker

  D. SmartView Monitor and SmartUpdate

  Correct Answer: D

• Question 279:

  The fw monitor utility is used to troubleshoot which of the following problems?

  A. Phase two key negotiation

  B. Address translation

  C. Log Consolidation Engine

  D. User data base corruption

  Correct Answer: B

• Question 280:

  NAT can NOT be configured on which of the following objects?

  A. HTTP Logical Server

  B. Gateway

  C. Address Range

  D. Host

  Correct Answer: A