CheckPoint Checkpoint Certifications 156-915.77 Questions & Answers

• Question 151:

  How are cached usernames and passwords cleared from the memory of a R77 Security Gateway?

  A. By using the Clear User Cache button in SmartDashboard.

  B. Usernames and passwords only clear from memory after they time out.

  C. By retrieving LDAP user information using the command fw fetchldap.

  D. By installing a Security Policy.

  Correct Answer: D

• Question 152:

  You find that Users are not prompted for authentication when they access their Web servers, even though you have created an HTTP rule via User Authentication. Choose the BEST reason why.

  A. You checked the cache password on desktop option in Global Properties.

  B. Another rule that accepts HTTP without authentication exists in the Rule Base.

  C. You have forgotten to place the User Authentication Rule before the Stealth Rule.

  D. Users must use the SecuRemote Client, to use the User Authentication Rule.

  Correct Answer: B

• Question 153:

  Review the rules.

  

  Assume domain UDP is enabled in the impled rules.

  What happens when a user from the internal network tries to browse to the internet using HTTP? The user:

  A. can connect to the Internet successfully after being authenticated.

  B. is prompted three times before connecting to the Internet successfully.

  C. can go to the Internet after Telnetting to the client authentication daemon port 259.

  D. can go to the Internet, without being prompted for authentication.

  Correct Answer: D

• Question 154:

  Charles requests a Website while using a computer not in the net_singapore network.

  

  What is TRUE about his location restriction?

  A. Source setting in Source column always takes precedence.

  B. Source setting in User Properties always takes precedence.

  C. As location restrictions add up, he would be allowed from net_singapore and net_sydney.

  D. It depends on how the User Auth object is configured; whether User Properties or Source Restriction takes precedence.

  Correct Answer: D

• Question 155:

  Security Gateway R77 supports User Authentication for which of the following services? Select the response below that contains the MOST correct list of supported services.

  A. SMTP, FTP, TELNET

  B. SMTP, FTP, HTTP, TELNET

  C. FTP, HTTP, TELNET

  D. FTP, TELNET

  Correct Answer: C

• Question 156:

  Your customer, Mr. Smith needs access to other networks and should be able to use all services. Session authentication is not suitable. You select Client Authentication with HTTP. The standard authentication port for client HTTP authentication (Port 900) is already in use. You want to use Port 9001 but are having connectivity problems. Why are you having problems?

  

  A. The configuration file $FWDIR/conf/fwauthd.conf is incorrect.

  B. The Security Policy is not correct.

  C. You can't use any port other than the standard port 900 for Client Authentication via HTTP.

  D. The service FW_clntauth_http configuration is incorrect.

  Correct Answer: A

• Question 157:

  All R77 Security Servers can perform authentication with the exception of one. Which of the Security Servers can NOT perform authentication?

  A. FTP

  B. SMTP

  C. HTTP

  D. RLOGIN

  Correct Answer: B

• Question 158:

  As a Security Administrator, you must refresh the Client Authentication authorization time- out every time a new user connection is authorized. How do you do this? Enable the Refreshable Timeout setting:

  A. in the user object's Authentication screen.

  B. in the Gateway object's Authentication screen.

  C. in the Limit tab of the Client Authentication Action Properties screen.

  D. in the Global Properties Authentication screen.

  Correct Answer: C

• Question 159:

  Your company's Security Policy forces users to authenticate to the Gateway explicitly, before they can use any services. The Gateway does not allow the Telnet service to itself from any location. How would you configure authentication on the Gateway? With a:

  A. Client Authentication rule using the manual sign-on method, using HTTP on port 900

  B. Client Authentication rule, using partially automatic sign on

  C. Client Authentication for fully automatic sign on

  D. Session Authentication rule

  Correct Answer: A

• Question 160:

  Assume you are a Security Administrator for ABCTech. You have allowed authenticated access to users from Mkting_net to Finance_net. But in the user's properties, connections are only permitted within Mkting_net. What is the BEST way to resolve this conflict?

  A. Select Ignore Database in the Action Properties window.

  B. Permit access to Finance_net.

  C. Select Intersect with user database in the Action Properties window.

  D. Select Intersect with user database or Ignore Database in the Action Properties window.

  Correct Answer: D