156-215.80 practice questions 121–130

1. Question 121 · 380 in bank

   Which rule is responsible for the user authentication failure?

   

   • ARule 4
   • BRule 6
   • CRule 3
   • DRule 5

   Show answer

   Answer: C

   Next question

2. Question 122 · 380 in bank

   Which tool CANNOT be launched from SmartUpdate R77?

   • AIP Appliance Voyager
   • Bsnapshot
   • CGAiA WebUI
   • Dcpinfo

   Show answer

   Answer: B

   Next question

3. Question 123 · 380 in bank

   Katie has been asked to do a backup on the Blue Security Gateway. Which command would accomplish this in the Gaia CLI?

   • ABlue > add local backup
   • BExpert&Blue#add local backing
   • CBlue > set backup local
   • DBlue > add backup local

   Show answer

   Answer: D

   Next question

4. Question 124 · 380 in bank

   You want to establish a VPN, using certificates. Your VPN will exchange certificates with an external partner. Which of the following activities sh you do first?

   • ACreate a new logical-server object to represent your partner's CA
   • BExchange exported CA keys and use them to create a new server object to represent your partner's Certificate Authority (CA)
   • CManually import your partner's Certificate Revocation List.
   • DManually import your partner's Access Control List.

   Show answer

   Answer: B

   Next question

5. Question 125 · 380 in bank

   What must a Security Administrator do to comply with a management requirement to log all traffic accepted through the perimeter Security Gateway?

   • AIn Global Properties > Reporting Tools check the box Enable tracking all rules (including rules marked as None in the Track column). Send these logs to a secondary log server for a complete logging history. Use your normal log server for standard logging for troubleshooting.
   • BInstall the View Implicit Rules package using SmartUpdate.
   • CDefine two log servers on the R77 Gateway object. Lof Implied Rules on the first log server. Enable Log Rule Base on the second log server. Use SmartReporter to merge the two log server records into the same database for HIPPA log audits.
   • DCheck the Log Implied Rules Globally box on the R77 Gateway object.

   Show answer

   Answer: A

   Next question

6. Question 126 · 380 in bank

   Your boss wants you to closely monitor an employee suspected of transferring company secrets to the competition. The IT department discovered the suspect installed a WinSCP client in order to use encrypted communication. Which of the following methods is BEST to accomplish this task?

   • AUse SmartView Tracker to follow his actions by filtering log entries that feature the WinSCP destination port. Then, export the corresponding entries to a separate log file for documentation.
   • BUse SmartDashboard to add a rule in the firewall Rule Base that matches his IP address, and those of potential targets and suspicious protocols. Apply the alert action or customized messaging.
   • CWatch his IP in SmartView Monitor by setting an alert action to any packet that matches your Rule Base and his IP address for inbound and outbound traffic.
   • DSend the suspect an email with a keylogging Trojan attached, to get direct information about his wrongdoings.

   Show answer

   Answer: A

   Next question

7. Question 127 · 380 in bank

   Match the following commands to their correct function. Each command has one function only listed.

   

   • AC1>F6; C2>F4; C3>F2; C4>F5
   • BC1>F2; C2>F1; C3>F6; C4>F4
   • CC1>F2; C2>F4; C3>F1; C4>F5
   • DC1>F4; C2>F6; C3>F3; C4>F5

   Show answer

   Answer: A

   Next question

8. Question 128 · 380 in bank

   Which of the following is NOT an option for internal network definition of Anti-spoofing?

   • ASpecific ג€" derived from a selected object
   • BRoute-based ג€" derived from gateway routing table
   • CNetwork defined by the interface IP and Net Mask
   • DNot-defined

   Show answer

   Answer: B

   Next question

9. Question 129 · 380 in bank

   MegaCorp's security infrastructure separates Security Gateways geographically. You must request a central license for one remote Security Gateway. How do you apply the license?

   • AUsing the remote Gateway's IP address, and attaching the license to the remote Gateway via SmartUpdate.
   • BUsing your Security Management Server's IP address, and attaching the license to the remote Gateway via SmartUpdate.
   • CUsing the remote Gateway's IP address, and applying the license locally with command cplic put.
   • DUsing each of the Gateway's IP addresses, and applying the licenses on the Security Management Server with the command cprlic put.

   Show answer

   Answer: B

   Next question

10. Question 130 · 380 in bank

    rd According to Check Point Best Practice, when adding a 3 party gateway to a Check Point security solution what object SHOULD be added? A(n):

    • AInteroperable Device
    • BNetwork Node
    • CExternally managed gateway
    • DGateway

    Show answer

    Answer: A

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

156-215.80 practice, question 121. 380 questions available.