Check Point Certified Security Administrator (156-215.77) Free Practice Test

Question 1

Which of the following is NOT useful to verify whether or not a Security Policy is active on a Gateway?

A. cpstat fw -f policy

B. fw ctl get string active_secpol

C. Check the Security Policy name of the appropriate Gateway in SmartView Monitor.

D. fw stat

Correct Answer: B

Question 2

How do you recover communications between your Security Management Server and Security Gateway if you lock yourself out through a rule or policy mis-configuration?

A. fwm unloadlocal

B. fw unloadlocal

C. fw delete all.all@localhost

D. fw unload policy

Correct Answer: B

Question 3

Complete this statement. The block Intruder option in the Active log is available
____________.

A. in the SmartView Tracker client

B. only if you have the IPS blade enabled at least in one gateway

C. since R75.40 release

D. in the SmartView Monitor client

Correct Answer: A

Question 4

You have created a Rule Base for firewall, websydney. Now you are going to create a new policy package with security and address translation rules for a second Gateway. What is TRUE about the new package's NAT rules?
Exhibit:

A. Rules 1, 2, 3 will appear in the new package.

B. Rules 4 and 5 will appear in the new package.

C. NAT rules will be empty in the new package.

D. Only rule 1 will appear in the new package.

Correct Answer: A

Question 5

SmartView Tracker R77 consists of three different modes. They are:

A. Log, Active, and Audit

B. Log, Track, and Management

C. Network and Endpoint, Active, and Management

D. Log, Active, and Management

Correct Answer: C

Question 6

How do you use SmartView Monitor to compile traffic statistics for your company's Internet Web activity during production hours?

A. Use Traffic settings and SmartView Monitor to generate a graph showing the total HTTP traffic for the day.

B. Configure a Suspicious Activity Rule which triggers an alert when HTTP traffic passes through the Gateway.

C. View total packets passed through the Security Gateway.

D. Select Tunnels view, and generate a report on the statistics.

Correct Answer: A

Question 7

Which operating systems are supported by a Check Point Security Gateway on an open server? Select MOST complete list.

A. Sun Solaris, Red Hat Enterprise Linux, Check Point SecurePlatform, IPSO, Microsoft Windows

B. Check Point GAiA and SecurePlatform, and Microsoft Windows

C. Check Point GAiA, Microsoft Windows, Red Hat Enterprise Linux, Sun Solaris, IPSO

D. Check Point GAiA and SecurePlatform, IPSO, Sun Solaris, Microsoft Windows

Correct Answer: B

Question 8

The Captive Portal tool:

A. Allows access to users already identified.

B. Acquires identities from unidentified users.

C. Is deployed from the Identity Awareness page in the Global Properties settings.

D. Is only used for guest user authentication.

Correct Answer: B

Welcome to TestSimulate

CheckPoint Check Point Certified Security Administrator (156-215.77) Free Practice Test