CheckPoint Check Point CCSA NG (156-210) Free Practice Test
Question 1
CORRECT TEXT
Which of the following statements accurately describes VPN-1/FireWall-1 Session Authentication? (Choose three)
Which of the following statements accurately describes VPN-1/FireWall-1 Session Authentication? (Choose three)
Correct Answer:
Pending
Question 2
CORRECT TEXT
Which of the following is NOT included in Application Intelligence Web Security?
Which of the following is NOT included in Application Intelligence Web Security?
Correct Answer:
Pending
Question 3
CORRECT TEXT
Which authentication method could be used for SIP services? (Choose two)
Which authentication method could be used for SIP services? (Choose two)
Correct Answer:
Pending
Question 4
To completely setup Static NAT, you ONLY have to select Add Automatic Address Translation rules on the NAT tab, and specify a public NAT IP address.
Correct Answer: A
Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).
Question 5
Network topology exhibit
In the network displayed in the exhibit, the public servers accept and initiate connections from the Internet.
The public servers must:
In the network displayed in the exhibit, the public servers accept and initiate connections from the Internet.
The public servers must:
Correct Answer: A
Question 6
Which of the following statements BEST describes Dynamic Network Address Translation (Hide NAT)?
Correct Answer: C
Question 7
Assume there has been no change made to default policy properties. To allow a telnet connection into your network, you must create two rules.
One to allow the initial Telnet connection in.
One to allow the destination machine to send information back to the client.
One to allow the initial Telnet connection in.
One to allow the destination machine to send information back to the client.
Correct Answer: A
Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).
Question 8
Which is false about SIC communications?
Correct Answer:
Explanation: VPN certificates, such of those used for IKE, are used for VPNs, and should not be confused with SIC certificates, used for securing internal network communications.
In SIC the management server acts as a certificate authority that issue this certificates to uniquely identify all checkpoint enabled machines. See Page 1.21 of the official CCSA NG Courseware - Management 1.
Incorrect Answers
B:SIC for Checkpoint SVN components uses certificates for authentication and standart- based SSL for encryption for communication between components. See Page 1.20 of the official CCSA NG Courseware - Management 1.
C:For SIC communications between the management server and Policy editor, the policy editor client must be defined as being authorized to use the management server. See Page
1.22 of the official CCSA NG Courseware - Management 1.
D:The IP address of the machine trying to connect must be defined as authorized with CPConfig utility. The management server verifies that the client IP address belongs to an authorized Policy editor client. See Pages 1.20 and 1.22 of the official CCSA NG Courseware - Management 1.
In SIC the management server acts as a certificate authority that issue this certificates to uniquely identify all checkpoint enabled machines. See Page 1.21 of the official CCSA NG Courseware - Management 1.
Incorrect Answers
B:SIC for Checkpoint SVN components uses certificates for authentication and standart- based SSL for encryption for communication between components. See Page 1.20 of the official CCSA NG Courseware - Management 1.
C:For SIC communications between the management server and Policy editor, the policy editor client must be defined as being authorized to use the management server. See Page
1.22 of the official CCSA NG Courseware - Management 1.
D:The IP address of the machine trying to connect must be defined as authorized with CPConfig utility. The management server verifies that the client IP address belongs to an authorized Policy editor client. See Pages 1.20 and 1.22 of the official CCSA NG Courseware - Management 1.
Question 9
Your customer has created a rule so that every user wants to go to Internet, that user must be authenticated. Which is the best method of authentication for users who must use specific computers for Internet access?
Correct Answer: E
Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).
Question 10
What NAT mode is necessary if you want to start an HTTP session on a Reserved or Illegal IP address?
Correct Answer: E
Question 11
Which of the following is NOT a security benefit of Check Point's Secure Internal Communications (SIC)?
Correct Answer: C