156-215.80 practice questions 11–20

1. Question 11 · 380 in bank

   Which utility allows you to configure the DHCP service on GAIA from the command line?

   • Aifconfig
   • Bdhcp_cfg
   • Csysconfig
   • Dcpconfig

   Show answer

   Answer: C

   Next question

2. Question 12 · 380 in bank

   Assuming you have a Distributed Deployment, what will be the effect of running the following command on the Security Management Server?

   

   • ARemove the installed Security Policy.
   • BRemove the local ACL lists.
   • CNo effect.
   • DReset SIC on all gateways.

   Show answer

   Answer: A

   Next question

3. Question 13 · 380 in bank

   An administrator is creating an IPsec site-to-site VPN between his corporate office and branch office. Both offices are protected by Check Point Security Gateway managed by the same Security Management Server. While configuring the VPN community to specify the pre-shared secret, the administrator found that the check box to enable pre-shared secret is shared and cannot be enabled. Why does it not allow him to specify the pre-shared secret?

   • AIPsec VPN blade should be enabled on both Security Gateway.
   • BPre-shared can only be used while creating a VPN between a third party vendor and Check Point Security Gateway.
   • CCertificate based Authentication is the only authentication method available between two Security Gateway managed by the same SMS.
   • DThe Security Gateways are pre-R75.40.

   Show answer

   Answer: C

   Next question

4. Question 14 · 380 in bank

   Which of the following ClusterXL modes uses a non-unicast MAC address for the cluster IP address.

   • AHigh Availability
   • BLoad Sharing Multicast
   • CLoad Sharing Pivot
   • DMaster/Backup

   Show answer

   Answer: B

   Next question

5. Question 15 · 380 in bank

   What are the three authentication methods for SIC?

   • APasswords, Users, and standards-based SSL for the creation of secure channels
   • BCertificates, standards-based SSL for the creation of secure channels, and 3DES or AES128 for encryption
   • CPacket Filtering, certificates, and 3DES or AES128 for encryption
   • DCertificates, Passwords, and Tokens

   Show answer

   Answer: B

   Next question

6. Question 16 · 380 in bank

   What is the order of NAT priorities?

   • AStatic NAT, IP pool NAT, hide NAT
   • BIP pool NAT, static NAT, hide NAT
   • CStatic NAT, automatic NAT, hide NAT
   • DStatic NAT, hide NAT, IP pool NAT

   Show answer

   Answer: A

   Next question

7. Question 17 · 380 in bank

   Which of the following is an identity acquisition method that allows a Security Gateway to identify Active Directory users and computers?

   • AUserCheck
   • BActive Directory Query
   • CAccount Unit Query
   • DUser Directory Query

   Show answer

   Answer: B

   Next question

8. Question 18 · 380 in bank

   Ken wants to obtain a configuration lock from other administrator on R80 Security Management Server Operating System. He can do this via WebUI or via CLI. Which command should he use in CLI?

   • Aremove database lock
   • BThe database feature has one command: lock database override.
   • Coverride database lock
   • DThe database feature has two commands: lock database override and unlock database. Both will work.

   Show answer

   Answer: D

   Next question

9. Question 19 · 380 in bank

   Examine the following Rule Base.

   

   What can we infer about the recent changes made to the Rule Base?

   • ARule 7 was created by the 'admin' administrator in the current session
   • B8 changes have been made by administrators since the last policy installation
   • CTe rules 1, 5 and 6 cannot be edited by the 'admin' administrator
   • DRule 1 and object webserver are locked by another administrator

   Show answer

   Answer: D

   Next question

10. Question 20 · 380 in bank

    ALPHA Corp has a new administrator who logs into the Gaia Portal to make some changes. He realizes that even though he has logged in as an administrator, he is unable to make any changes because all configuration options are greyed out as shown in the screenshot image below. What is the likely cause for this?

    

    • AThe Gaia /bin/confd is locked by another administrator from a SmartConsole session.
    • BThe database is locked by another administrator SSH session.
    • CThe Network address of his computer is in the blocked hosts.
    • DThe IP address of his computer is not in the allowed hosts.

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

156-215.80 practice, question 11. 380 questions available.