156-215.80 practice questions 141–150

1. Question 141 · 380 in bank

   What is Consolidation Policy?

   • AThe collective name of the Security Policy, Address Translation, and IPS Policies.
   • BThe specific Policy written in SmartDashboard to configure which log data is stored in the SmartReporter database.
   • CThe collective name of the logs generated by SmartReporter.
   • DA global Policy used to share a common enforcement policy for multiple Security Gateways.

   Show answer

   Answer: B

   Next question

2. Question 142 · 380 in bank

   Where do you verify that UserDirectory is enabled?

   • AVerify that Security Gateway > General Properties > Authentication > Use UserDirectory (LDAP) for Security Gateways is checked
   • BVerify that Global Properties > Authentication > Use UserDirectory (LDAP) for Security Gateways is checked.
   • CVerify that Security Gateway > General Properties > UserDirectory (LDAP) > Use UserDirectory (LDAP) for Security Gateways is checked.
   • DVerify that Global Properties > UserDirectory (LDAP) > Use UserDirectory (LDAP) for Security Gateways is checked.

   Show answer

   Answer: D

   Next question

3. Question 143 · 380 in bank

   Which of the following actions do NOT take place in IKE Phase 1?

   • APeers agree on encryption method.
   • BDiffie-Hellman key is combined with the key material to produce the symmetrical IPsec key.
   • CPeers agree on integrity method.
   • DEach side generates a session key from its private key and peer's public key.

   Show answer

   Answer: B

   Next question

4. Question 144 · 380 in bank

   Which R77 GUI would you use to see number of packets accepted since the last policy install?

   • ASmartView Monitor
   • BSmartView Tracker
   • CSmartDashboard
   • DSmartView Status

   Show answer

   Answer: A

   Next question

5. Question 145 · 380 in bank

   Which of the following firewall modes DOES NOT allow for Identity Awareness to be deployed?

   • ABridge
   • BLoad Sharing
   • CHigh Availability
   • DFail Open

   Show answer

   Answer: A

   Next question

6. Question 146 · 380 in bank

   What is the Manual Client Authentication TELNET port?

   • A23
   • B264
   • C900
   • D259

   Show answer

   Answer: D

   Next question

7. Question 147 · 380 in bank

   Jennifer McHanry is CEO of ACME. She recently bought her own personal iPad. She wants use her iPad to access the internal Finance Web server. Because the iPad is not a member of the Active Directory domain, she cannot identify seamlessly with AD Query. However, she can enter her AD credentials in the Captive Portal and then get the same access as on her office computer. Her access to resources is based on rules in the R77 Firewall Rule Base. To make this scenario work, the IT administrator must: 1) Enable Identity Awareness on a gateway and select Captive Portal as one of the Identity Sources. 2) In the Portal Settings window in the User Access section, make sure that Name and password login is selected. 3) Create a new rule in the Firewall Rule Base to let Jennifer McHanry access network destinations. Select accept as the Action. 4) Install policy. Ms McHanry tries to access the resource but is unable. What should she do?

   • AHave the security administrator select the Action field of the Firewall Rule ג€Redirect HTTP connections to an authentication (captive) portalג€.
   • BHave the security administrator reboot the firewall.
   • CHave the security administrator select Any for the Machines tab in the appropriate Access Role.
   • DInstall the Identity Awareness agent on her iPad.

   Show answer

   Answer: A

   Next question

8. Question 148 · 380 in bank

   How many packets does the IKE exchange use for Phase 1 Main Mode?

   • A12
   • B1
   • C3
   • D6

   Show answer

   Answer: D

   Next question

9. Question 149 · 380 in bank

   What is also referred to as Dynamic NAT?

   • AAutomatic NAT
   • BStatic NAT
   • CManual NAT
   • DHide NAT

   Show answer

   Answer: D

   Next question

10. Question 150 · 380 in bank

    A client has created a new Gateway object that will be managed at a remote location. When the client attempts to install the Security Policy to the new Gateway object, the object does not appear in the Install On check box. What should you look for?

    • ASecure Internal Communications (SIC) not configured for the object.
    • BA Gateway object created using the Check Point > Externally Managed VPN Gateway option from the Network Objects dialog box.
    • CAnti-spoofing not configured on the interfaces on the Gateway object.
    • DA Gateway object created using the Check Point > Secure Gateway option in the network objects, dialog box, but still needs to configure the interfaces for the Security Gateway object.

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

156-215.80 practice, question 141. 380 questions available.