Check Point Certified Security Administrator - GAiA (156-215.13) Free Practice Test

Question 1

Which command allows you to view the contents of an R76 table?

A. fw tab -t <tablename>

B. fw tab -s <tablename>

C. fw tab -a <tablename>

D. fw tab -x <tablename>

Correct Answer: A

Question 2

Which SmartView Tracker mode allows you to read the SMTP e-mail body sent from the Chief Executive Officer (CEO) of a company?

A. Network and Endpoint Tab

B. This is not a SmartView Tracker feature.

C. Display Capture Action

D. Display Payload View

Correct Answer: B

Question 3

Select the TRUE statements about the Rule Base shown?

1) HTTP traffic from webrome to websingapore will be encrypted. 2) HTTP traffic from websingapore to webrome will be encrypted. 3) HTTP traffic from webrome to websingapore will be authenticated. 4) HTTP traffic from websingapore to webrome will be blocked.

A. 1, 2, and 3

B. 2 and 3

C. 3 only

D. 3 and 4

Correct Answer: D

Question 4

Which item below in a Security Policy would be enforced first?

A. Administrator-defined Rule Base

B. Security Policy First rule

C. IP spoofing/IP options

D. Network Address Translation

Correct Answer: C

Question 5

For remote user authentication, which authentication scheme is NOT supported?

A. RADIUS

B. SecurID

C. TACACS

D. Check Point Password

Correct Answer: C

Question 6

Which rules are not applied on a first-match basis?

A. User Authentication

B. Session Authentication

C. Client Authentication

D. Cleanup

Correct Answer: A

Question 7

You find a suspicious FTP site trying to connect to one of your internal hosts. How do you block it in real time and verify it is successfully blocked? Highlight the suspicious connection in SmartView Tracker:

A. Log mode. Block it using Tools > Block Intruder menu. Observe in the Log mode that the suspicious connection is listed in this SmartView Tracker view as "dropped".

B. Active mode. Block it using Tools > Block Intruder menu. Observe in the Active mode that the suspicious connection does not appear again in this SmartView Tracker view.

C. Active mode. Block it using Tools > Block Intruder menu. Observe in the Active mode that the suspicious connection is listed in this SmartView Tracker view as "dropped".

D. Log mode. Block it using Tools > Block Intruder menu. Observe in the Log mode that the suspicious connection does not appear again in this SmartView Tracker view.

Correct Answer: B

Question 8

You want to establish a VPN, using certificates. Your VPN will exchange certificates with an external partner. Which of the following activities should you do first?

A. Exchange exported CA keys and use them to create a new server object to represent your partner's Certificate Authority (CA).

B. Manually import your partner's Certificate Revocation List.

C. Manually import your partner's Access Control List.

D. Create a new logical-server object to represent your partner's CA.

Correct Answer: A

Question 9

What is the Manual Client Authentication TELNET port?

A. 23

B. 900

C. 259

D. 264

Correct Answer: C

Welcome to TestSimulate

CheckPoint Check Point Certified Security Administrator - GAiA (156-215.13) Free Practice Test