CheckPoint 156-215.77 Online Practice Questions and Exam Preparation

CheckPoint 156-215.77 Online Questions & Answers

• Question 271:

  What is the default setting when you use NAT?

  A. Destination Translated on Server side
  B. Destination Translated on Client side
  C. Source Translated on both sides
  D. Source Translated on Client side
  B. Destination Translated on Client side

• Question 272:

  Which of the following is a viable consideration when determining Rule Base order?

  A. Placing frequently accessed rules before less frequently accessed rules
  B. Grouping IPS rules with dynamic drop rules
  C. Adding SAM rules at the top of the Rule Base
  D. Grouping rules by date of creation
  A. Placing frequently accessed rules before less frequently accessed rules

• Question 273:

  Which of the following authentication methods can be configured in the Identity Awareness setup wizard?

  A. Check Point Password
  B. TACACS
  C. LDAP
  D. Windows password
  C. LDAP

• Question 274:

  Secure Internal Communications (SIC) is completely NAT-tolerant because it is based on:

  A. IP addresses.
  B. SIC is not NAT-tolerant.
  C. SIC names.
  D. MAC addresses.
  C. SIC names.

• Question 275:

  What command with appropriate switches would you use to test Identity Awareness connectivity?

  A. test_ldap
  B. test_ad_connectivity
  C. test_ldap_connectivity
  D. test_ad
  B. test_ad_connectivity

• Question 276:

  Where is the fingerprint generated, based on the output display? Exhibit:

  

  A. SmartConsole
  B. SmartUpdate
  C. Security Management Server
  D. SmartDashboard
  C. Security Management Server

• Question 277:

  Review the rules.

  

  Assume domain UDP is enabled in the impled rules.

  What happens when a user from the internal network tries to browse to the internet using HTTP? The user:

  A. can connect to the Internet successfully after being authenticated.
  B. is prompted three times before connecting to the Internet successfully.
  C. can go to the Internet after Telnetting to the client authentication daemon port 259.
  D. can go to the Internet, without being prompted for authentication.
  D. can go to the Internet, without being prompted for authentication.

• Question 278:

  John is the Security Administrator in his company. He installs a new R77 Security Management Server and a new R77 Gateway. He now wants to establish SIC between them. After entering the activation key, he gets the following message

  in SmartDashboard "Trust established?

  SIC still does not seem to work because the policy won't install and interface fetching does not work. What might be a reason for this?

  A. SIC does not function over the network.
  B. It always works when the trust is established
  C. The Gateway's time is several days or weeks in the future and the SIC certificate is not yet valid.
  D. This must be a human error.
  C. The Gateway's time is several days or weeks in the future and the SIC certificate is not yet valid.

• Question 279:

  A client has created a new Gateway object that will be managed at a remote location. When the client attempts to install the Security Policy to the new Gateway object, the object does not appear in the Install On check box. What should you look for?

  A. Secure Internal Communications (SIC) not configured for the object.
  B. A Gateway object created using the Check Point > Externally Managed VPN Gateway option from the Network Objects dialog box.
  C. Anti-spoofing not configured on the interfaces on the Gateway object.
  D. A Gateway object created using the Check Point > Security Gateway option in the network objects, dialog box, but still needs to configure the interfaces for the Security Gateway object.
  D. A Gateway object created using the Check Point > Security Gateway option in the network objects, dialog box, but still needs to configure the interfaces for the Security Gateway object.

• Question 280:

  A host on the Internet initiates traffic to the Static NAT IP of your Web server behind the Security Gateway. With the default settings in place for NAT, the initiating packet will translate the _________.

  A. destination on server side
  B. source on server side
  C. source on client side
  D. destination on client side
  D. destination on client side