CheckPoint Checkpoint Certifications 156-215.81.20 Questions & Answers

• Question 361:

  What is Consolidation Policy?

  A. The collective name of the Security Policy, Address Translation, and IPS Policies.

  B. The specific Policy written in SmartDashboard to configure which log data is stored in the SmartReporter database.

  C. The collective name of the logs generated by SmartReporter.

  D. A global Policy used to share a common enforcement policy for multiple Security Gateways.

  Correct Answer: B

• Question 362:

  Where do you verify that UserDirectory is enabled?

  A. Verify that Security Gateway > General Properties > Authentication > Use UserDirectory (LDAP) for Security Gateways is checked

  B. Verify that Global Properties > Authentication > Use UserDirectory (LDAP) for Security Gateways is checked.

  C. Verify that Security Gateway > General Properties > UserDirectory (LDAP) > Use UserDirectory (LDAP) for Security Gateways is checked.

  D. Verify that Global Properties > UserDirectory (LDAP) > Use UserDirectory (LDAP) for Security Gateways is checked.

  Correct Answer: D

• Question 363:

  Which of the following actions do NOT take place in IKE Phase 1?

  A. Peers agree on encryption method.

  B. Diffie-Hellman key is combined with the key material to produce the symmetrical IPsec key.

  C. Peers agree on integrity method.

  D. Each side generates a session key from its private key and peer's public key.

  Correct Answer: B

• Question 364:

  Which R77 GUI would you use to see number of packets accepted since the last policy install?

  A. SmartView Monitor

  B. SmartView Tracker

  C. SmartDashboard

  D. SmartView Status

  Correct Answer: A

• Question 365:

  Which of the following firewall modes DOES NOT allow for Identity Awareness to be deployed?

  A. Bridge

  B. Load Sharing

  C. High Availability

  D. Fail Open

  Correct Answer: A

• Question 366:

  What is the Manual Client Authentication TELNET port?

  A. 23

  B. 264

  C. 900

  D. 259

  Correct Answer: D

• Question 367:

  Jennifer McHanry is CEO of ACME. She recently bought her own personal iPad. She wants use her iPad to access the internal Finance Web server. Because the iPad is not a member of the Active Directory domain, she cannot identify seamlessly with AD Query. However, she can enter her AD credentials in the Captive Portal and then get the same access as on her office computer. Her access to resources is based on rules in the R77 Firewall Rule Base.

  To make this scenario work, the IT administrator must:

  1) Enable Identity Awareness on a gateway and select Captive Portal as one of the Identity Sources.

  2) In the Portal Settings window in the User Access section, make sure that Name and password login is selected.

  3) Create a new rule in the Firewall Rule Base to let Jennifer McHanry access network destinations. Select accept as the Action.

  4) Install policy.

  Ms McHanry tries to access the resource but is unable. What should she do?

  A. Have the security administrator select the Action field of the Firewall Rule "Redirect HTTP connections to an authentication (captive) portal".

  B. Have the security administrator reboot the firewall.

  C. Have the security administrator select Any for the Machines tab in the appropriate Access Role.

  D. Install the Identity Awareness agent on her iPad.

  Correct Answer: A

• Question 368:

  How many packets does the IKE exchange use for Phase 1 Main Mode?

  A. 12

  B. 1

  C. 3

  D. 6

  Correct Answer: D

• Question 369:

  What is also referred to as Dynamic NAT?

  A. Automatic NAT

  B. Static NAT

  C. Manual NAT

  D. Hide NAT

  Correct Answer: D

• Question 370:

  A client has created a new Gateway object that will be managed at a remote location. When the client attempts to install the Security Policy to the new Gateway object, the object does not appear in the Install On check box. What should you look for?

  A. Secure Internal Communications (SIC) not configured for the object.

  B. A Gateway object created using the Check Point > Externally Managed VPN Gateway option from the Network Objects dialog box.

  C. Anti-spoofing not configured on the interfaces on the Gateway object.

  D. A Gateway object created using the Check Point > Secure Gateway option in the network objects, dialog box, but still needs to configure the interfaces for the Security Gateway object.

  Correct Answer: B