CheckPoint Checkpoint Certifications 156-215.77 Questions & Answers

• Question 61:

  What gives administrators more flexibility when configuring Captive Portal instead of LDAP query for Identity Awareness authentication?

  A. Captive Portal is more secure than standard LDAP

  B. Nothing, LDAP query is required when configuring Captive Portal

  C. Captive Portal works with both configured users and guests

  D. Captive Portal is more transparent to the user

  Correct Answer: C

• Question 62:

  Which of the following items should be configured for the Security Management Server to authenticate using LDAP?

  A. Check Point Password

  B. WMI object

  C. Domain Admin username

  D. Windows logon password

  Correct Answer: A

• Question 63:

  What mechanism does a gateway configured with Identity Awareness and LDAP initially use to communicate with a Windows 2003 or 2008 server?

  A. WMI

  B. CIFS

  C. RCP

  D. LDAP

  Correct Answer: A

• Question 64:

  All of the following are Security Gateway control connections defined by default implied rules, EXCEPT:

  A. Exclusion of specific services for reporting purposes.

  B. Acceptance of IKE and RDP traffic for communication and encryption purposes.

  C. Communication with server types, such as RADIUS, CVP, UFP, TACACS, and LDAP.

  D. Specific traffic that facilitates functionality, such as logging, management, and key exchange.

  Correct Answer: A

• Question 65:

  What physical machine must have access to the User Center public IP address when checking for new packages with SmartUpdate?

  A. A Security Gateway retrieving the new upgrade package

  B. SmartUpdate installed Security Management Server PC

  C. SmartUpdate GUI PC

  D. SmartUpdate Repository SQL database Server

  Correct Answer: C

• Question 66:

  Which command gives an overview of your installed licenses?

  A. cplicense

  B. showlic

  C. fw lic print

  D. cplic print

  Correct Answer: D

• Question 67:

  The Tokyo Security Management Server Administrator cannot connect from his workstation in Osaka.

  

  Which of the following lists the BEST sequence of steps to troubleshoot this issue?

  A. Check for matching OS and product versions of the Security Management Server and the client. Then, ping the Gateways to verify connectivity. If successful, scan the log files for any denied management packets.

  B. Verify basic network connectivity to the local Gateway, service provider, remote Gateway, remote network and target machine. Then, test for firewall rules that deny management access to the target. If successful, verify that pcosaka is a valid client IP address.

  C. Check the allowed clients and users on the Security Management Server. If pcosaka and your user account are valid, check for network problems. If there are no network related issues, this is likely to be a problem with the server itself. Check for any patches and upgrades. If still unsuccessful, open a case with Technical Support.

  D. Call Tokyo to check if they can ping the Security Management Server locally. If so, login to sgtokyo, verify management connectivity and Rule Base. If this looks okay, ask your provider if they have some firewall rules that filters out your management traffic.

  Correct Answer: B

• Question 68:

  Which command would provide the most comprehensive diagnostic information to Check Point Technical Support?

  A. fw cpinfo

  B. cpinfo -o date.cpinfo.txt

  C. diag

  D. cpstat - date.cpstat.txt

  Correct Answer: B

• Question 69:

  Which operating systems are supported by a Check Point Security Gateway on an open server? Select MOST complete list.

  A. Sun Solaris, Red Hat Enterprise Linux, Check Point SecurePlatform, IPSO, Microsoft Windows

  B. Check Point GAiA and SecurePlatform, and Microsoft Windows

  C. Check Point GAiA, Microsoft Windows, Red Hat Enterprise Linux, Sun Solaris, IPSO

  D. Check Point GAiA and SecurePlatform, IPSO, Sun Solaris, Microsoft Windows

  Correct Answer: B

• Question 70:

  You are working with multiple Security Gateways that enforce an extensive number of rules. To simplify security administration, which one of the following would you choose to do?

  A. Eliminate all possible contradictory rules such as the Stealth or Cleanup rules.

  B. Run separate SmartConsole instances to login and configure each Security Gateway directly.

  C. Create network objects that restrict all applicable rules to only certain networks.

  D. Create a separate Security Policy package for each remote Security Gateway.

  Correct Answer: D