CheckPoint Checkpoint Certifications 156-215.80 Questions & Answers

• Question 291:

  Which of these attributes would be critical for a site-to-site VPN?

  A. Scalability to accommodate user groups

  B. Centralized management

  C. Strong authentication

  D. Strong data encryption

  Correct Answer: D

• Question 292:

  You have just installed your Gateway and want to analyze the packet size distribution of your traffic with SmartView Monitor.

  

  Unfortunately, you get the message:

  "There are no machines that contain Firewall Blade and SmartView Monitor".

  What should you do to analyze the packet size distribution of your traffic? Give the BEST answer.

  

  A. Purchase the SmartView Monitor license for your Security Management Server.

  B. Enable Monitoring on your Security Management Server.

  C. Purchase the SmartView Monitor license for your Security Gateway.

  D. Enable Monitoring on your Security Gateway.

  Correct Answer: D

• Question 293:

  You believe Phase 2 negotiations are failing while you are attempting to configure a site-to-site VPN with one of your firm's business partners. Which SmartConsole application should you use to confirm your suspicious?

  A. SmartDashboard

  B. SmartUpdate

  C. SmartView Status

  D. SmartView Tracker

  Correct Answer: D

• Question 294:

  Which of the following uses the same key to decrypt as it does to encrypt?

  A. Asymmetric encryption

  B. Dynamic encryption

  C. Certificate-based encryption

  D. Symmetric encryption

  Correct Answer: D

• Question 295:

  You are about to test some rule and object changes suggested in an R77 news group. Which backup solution should you use to ensure the easiest restoration of your Security Policy to its previous configuration after testing the changes?

  A. Manual copies of the directory $FWDIR/conf

  B. upgrade_export command

  C. Database Revision Control

  D. GAiA backup utilities

  Correct Answer: C

• Question 296:

  You are using SmartView Tracker to troubleshoot NAT entries. Which column do you check to view the NAT'd source port if you are using Source NAT?

  

  A. XlateDst

  B. XlateSPort

  C. XlateDPort

  D. XlateSrc

  Correct Answer: B

• Question 297:

  What happens if the identity of a user is known?

  A. If the user credentials do not match an Access Role, the traffic is automatically dropped.

  B. If the user credentials do not match an Access Role, the system displays a sandbox.

  C. If the user credentials do not match an Access Role, the gateway moves onto the next rule.

  D. If the user credentials do not match an Access Role, the system displays the Captive Portal.

  Correct Answer: C

• Question 298:

  Your company enforces a strict change control policy. Which of the following would be MOST effective for quickly dropping an attacker's specific active connection?

  A. Change the Rule Base and install the Policy to all Security Gateways

  B. Block Intruder feature of SmartView Tracker

  C. Intrusion Detection System (IDS) Policy install

  D. SAM ?Suspicious Activity Rules feature of SmartView Monitor

  Correct Answer: B

• Question 299:

  What port is used for communication to the User Center with SmartUpdate?

  A. CPMI 200

  B. TCP 8080

  C. HTTP 80

  D. HTTPS 443

  Correct Answer: D

• Question 300:

  As you review this Security Policy, what changes could you make to accommodate Rule 4?

  

  A. Remove the service HTTP from the column Service in Rule 4.

  B. Modify the column VPN in Rule 2 to limit access to specific traffic.

  C. Nothing at all

  D. Modify the columns Source or Destination in Rule 4

  Correct Answer: B