156-215-71 by CheckPoint Valid Free Exam Practice Test

Question 1

Installing a policy usually has no impact on currently existing connections. Which statement is TRUE?

A. All connections are reset, so a policy install is recommended during announced downtime only. B. Site-to-Site VPNs need to re-authenticate, so Phase 1 is passed again after installing the Security Policy. C. Users being authenticated by Client Authentication have to re-authenticate. D. All FTP downloads are reset; users have to start their downloads again.

Correct Answer: C

Question 2

If a Security Gateway enforces three protections, LDAP Injection, Malicious Code Protector, and Header Rejection, which Check Point license is required in SmartUpdate?

A. SmartEvent Intro B. Data Loss Prevention C. SSL: VPN D. IPS

Correct Answer: D

Question 3

When configuring the network interfaces of a Check Point Gateway, the direction can be defined
as Internal or External. What is the meaning of Interface leads to DMZ?

Checkpoint 156-215-71 Exam

A. Using restricted Gateways, this option automatically turns off the counting of IP Addresses originating from this interface B. It defines the DMZ Interface since this information is necessary for Content Control. C. Activating this option automatically turns this interface to External D. When selecting this option. Ann-Spoofing is configured automatically to this net.

Correct Answer: B

Question 4

The User Directory Software Blade is used to integrate which of the following with Security Gateway R71?

A. User authority server B. RADIUS server C. LDAP server D. Account management client server

Correct Answer: C

Question 5

Which of the following commands can be used to remove site-to-site IPsec Security Association (SA)?

A. fw ipsec tu B. vpn tu C. vpn ipsec D. vpn debug ipsec

Correct Answer: B

Question 6

Which of these attributes would be critical for a site-to-site VPN?

A. Strong data encryption B. Scalability to accommodate user groups C. Strong authentication D. Centralized management

Correct Answer: A

Question 7

Can you upgrade a clustered deployment with zero downtime?

A. No, you must bring all gateways down. B. No, this is not possible. C. Yes, this is the default setting. D. Yes, if you select the option zero downtime, it will keep one member active

Correct Answer: D

Question 8

You have just been hired as the Security Administrator for the Insure-It-All insurance company. Your manager gives you the following requirements for controlling DNS traffic:
Required Result #1: Accept domain-name-over-TCP traffic (zone-transfer traffic)
Required Result #2: Log domain-name-over-TCP traffic (zone-transfer traffic)
Desired Result #1: Accept domain-name-over-UDP traffic (queries traffic) Desired Result #2: Do not log domain-name-over-UDP traffic (queries traffic)
Desired Result #3: Do not clutter the Rule Base try creating explicit rules for traffic that can be controlled using Global Properties
To begin, you make the following configuration changes, and install the Security Policy
-Select the box Accept Domain Name over TCP (Zone Transfer) in Global Properties -Select the box Accept Domain Name over UDP (Queries) in Global Properties -Select the box Log Implied Rules in Global Properties
Do your initial actions meet the required and desired results?

A. The actions achieve all required results, but none of the desired results. B. The actions do not achieve the required results. C. The actions meet all required and desired results. D. The actions achieve the required results, and two of the desired results.

Correct Answer: D

Question 9

An Administrator without access to SmartDashboard installed a new IPSO-based R71 Security Gateway over the weekend. He e-mailed you the SIC activation key. You want to confirm communication between the Security Gateway and the Management Server by installing the Policy. What might prevent you from installing the Policy?

A. An intermediate local Security Gateway does not allow a policy install through it to the remote new Security Gateway appliance Resolve by running the tw unloadlocal command on the local Security Gateway. B. You first need to run the fw unloadlocal command on the R71 Security Gateway appliance in order to remove the restrictive default policy. C. You have not established Secure Internal Communications (SIC) between the Security Gateway and Management Server You must initialize SIC on the Security Management Server. D. You first need to create a new Gateway object in SmartDashboard, establish SIC via the Communication button, and define the Gateway's topology.

Correct Answer: D

Question 10

Where can you view the anti-virus status?

A. SmartView Tracking B. SmartView Monitor C. SmartUpdate D. SmartDashboard

Correct Answer: B

CheckPoint Check Point Certified Security Administrator R71 - 156-215-71 Exam Practice Test