Check Point Certified Security Administrator - GAiA (156-215.76) Free Practice Test

Question 1

You believe Phase 2 negotiations are failing while you are attempting to configure a site-tosite VPN with one of your firm's business partners. Which SmartConsole application should you use to confirm your suspicions?

A. SmartUpdate

B. SmartView Status

C. SmartView Tracker

D. SmartDashboard

Correct Answer: C

Question 2

What is the purpose of a Stealth Rule?

A. To permit management traffic.

B. To permit implied rules.

C. To prevent users from connecting directly to the gateway.

D. To drop all traffic to the management server that is not explicitly permitted.

Correct Answer: C

Question 3

For which service is it NOT possible to configure user authentication?

A. HTTPS

B. FTP

C. SSH

D. Telnet

Correct Answer: C

Question 4

When using vpn tu, which option must you choose if you only want to clear phase 2 for a specific IP (gateway)?

A. (7) Delete all IPsec+IKE SAs for a given peer (GW)

B. (6) Delete all IPsec SAs for a given User (Client)

C. (8) Delete all IPsec+IKE SAs for a given User (Client)

D. (5) Delete all IPsec SAs for a given peer (GW)

Correct Answer: D

Question 5

You have a mesh VPN Community configured to create a site-to-site VPN.

Given the displayed VPN properties, what can you conclude about this community?

A. Changing the setting Perform key exchange encryption with from AES-256 to 3DES will enhance the VPN Community's security , and reduce encryption overhead.

B. Changing the setting Perform IPsec data encryption with from AES-128 to 3Des will increase the encryption overhead.

C. Change the data-integrity setting for this VPN Community because MD5 is oncompatible with AES.

D. The VPN Community will perform IKE Phase 1 key-exchange encryption using the longest key Security Gateway R76 supports.

Correct Answer: B

Question 6

Which of the following are available SmartConsole clients which can be installed from the R76 Windows CD? Read all answers and select the most complete and valid list.

A. SmartView Tracker, SmartDashboard, SmartLSM, SmartView Monitor

B. SmartView Tracker, SmartDashboard, CPINFO, SmartUpdate, SmartView Status

C. SmartView Tracker, CPINFO, SmartUpdate

D. Security Policy Editor, Log Viewer, Real Time Monitor GUI

Correct Answer: C

Question 7

You are troubleshooting NAT entries in SmartView Tracker. Which column do you check to view the new source IP?

A. XlateDst

B. XlateDPort

C. XlateSrc

D. XlateSPort

Correct Answer: C

Question 8

Before upgrading SecurePlatform, you should create a backup. To save time, many administrators use the command backup. This creates a backup of the Check Point configuration as well as the system configuration.
An administrator has installed the latest HFA on the system for fixing traffic problem after creating a backup file. There is a mistake in the very complex static routing configuration. The Check Point configuration has not been changed. Can the administrator use a restore to fix the errors in static routing?

A. A backup cannot be restored, because the binary files are missing.

B. The restore can be done easily by the command restore and selecting the file netconf.

C. The restore is done by selecting Snapshot Management from the boot menu of GAi

D. The restore is not possible because the backup file does not have the same build number (version).

Correct Answer: B

Question 9

Study the Rule base and Client Authentication Action properties screen

After being authenticated by the Security Gateway, when a user starts an HTTP connection to a Web site, the user tries to FTP to another site using the command line. What happens to the user? The:

A. user is prompted for authentication by the Security Gateway again.

B. FTP data connection is dropped after the user is authenticated successfully.

C. FTP connection is dropped by Rule 2.

D. user is prompted from that FTP site only, and does not need to enter his username and password for Client Authentication.

Correct Answer: D

Question 10

Which of the following items should be configured for the Security Management Server to authenticate via LDAP?

A. WMI object

B. Windows logon password

C. Check Point Password

D. Active Directory Server object

Correct Answer: D

Question 11

If a SmartUpdate upgrade or distribution operation fails on GAiA, how is the system recovered?

A. The Administrator must remove the rpm packages manually, and re-attempt the upgrade.

B. The Administrator can only revert to a previously created snapshot (if there is one) with the command cprinstall snapshot <object name> <filename>.

C. The Administrator must reinstall the last version via the command cprinstall revert <object name> <file name>.

D. GAiA will reboot and automatically revert to the last snapshot version prior to upgrade.

Correct Answer: D

Question 12

Which feature or command provides the easiest path for Security Administrators to revert to earlier versions of the same Security Policy and objects configuration?

A. upgrade_export/upgrade_import

B. dbexport/dbimport

C. Database Revision Control

D. Policy Package management

Correct Answer: C

Welcome to TestSimulate

CheckPoint Check Point Certified Security Administrator - GAiA (156-215.76) Free Practice Test