7
CheckPoint 156-215.75 156-215.75 : Check Point Certified Security Administrator 10 Q&A Version 3.0 http://www.testsnow.com/156-215.75.htm

Testsnow 156-215.75 Exam - Check Point Certified Security Administrator

Embed Size (px)

DESCRIPTION

Testsnow offers CheckPoint 156-215.75 questions and answers for your Check Point Certified Security Administrator exam preparation. Download 156-215.75 free sample to check the quality.

Citation preview

Page 1: Testsnow 156-215.75 Exam - Check Point Certified Security Administrator

CheckPoint 156-215.75156-215.75 : Check Point Certified Security Administrator

10 Q&A

Version 3.0

http://www.testsnow.com/156-215.75.htm

Page 2: Testsnow 156-215.75 Exam - Check Point Certified Security Administrator

Leading the way in IT testing and certification tools, www.TestsNow.com

- 2 -

Important Note, Please Read Carefully

Other TestsNow productsA) Offline Testing engineUse the offline Testing engine product topractice the questions in an exam environment.

Build a foundation of knowledge which will be useful also after passing the exam.

Latest VersionWe are constantly reviewing our products. New material is added and old material isrevised. Free updates are available for 90 days after the purchase. You should check yourmember zone at TestsNow and update 3-4 days before the scheduled exam date.

Here is the procedure to get the latest version:

1.Go towww.TestsNow.com2.Click on Log in3.The latest versions of all purchased products are downloadable from here. Just click thelinks.For most updates,it is enough just to print the new questions at the end of the newversion, not the whole document.

FeedbackIf you spot a possible improvement then please let us know. We always interested inimproving product quality.Feedback should be send to [email protected]. You should include thefollowing: Exam number, version, page number, question number, and your login Email.

Our experts will answer your mail promptly.

CopyrightEach iPAD file is a green exe file. if we find out that a particular iPAD Viewer file isbeing distributed by you, TestsNow reserves the right to take legal action against youaccording to the International Copyright Laws.

ExplanationsThis product does not include explanations at the moment. If you are interested inproviding explanations for this exam, please contact [email protected].

Page 3: Testsnow 156-215.75 Exam - Check Point Certified Security Administrator

Leading the way in IT testing and certification tools, www.TestsNow.com

- 3 -

www.TestsNow.com Q: 1 Of the three mechanisms Check Point uses for controllingtraffic, which enables firewalls to incorporate layer 4 awareness in packetinspection?

A. IPS

B. Packet filtering

C. Stateful Inspection

D. Application Intelligence

Answer: C

www.TestsNow.com Q: 2 Which of the following statements about Bridge mode isTRUE?

A. When managing a Security Gateway in Bridge mode, it is possible to use a bridgeinterface for Network Address Translation.

B. Assuming a new installation, bridge mode requires changing the existing IP routingof the network.

C. All ClusterXL modes are supported.

D. A bridge must be configured with a pair of interfaces.

Answer: D

www.TestsNow.com Q: 3 Which SmartConsole component can Administrators useto track remote administrative activities?

Page 4: Testsnow 156-215.75 Exam - Check Point Certified Security Administrator

Leading the way in IT testing and certification tools, www.TestsNow.com

- 4 -

A. WebUI

B. Eventia Reporter

C. SmartView Monitor

D. SmartView Tracker

Answer: D

www.TestsNow.com Q: 4 Which of the following statements is TRUE aboutmanagement plug-ins?

A. The plug-in is a package installed on the Security Gateway.

B. A management plug-in interacts with a Security Management Server to provide newfeatures and support for new products.

C. Using a plug-in offers full central management only if special licensing is applied tospecific features of the plug-in.

D. Installing a management plug-in is just like an upgrade process. (It overwritesexisting components.)

Answer: B

www.TestsNow.com Q: 5 The customer has a small Check Point installation whichincludes one Windows 2003 server as SmartConsole and Security ManagementServer with a second server running SecurePlatform as Security Gateway. This isan example of a(n):

A. Hybrid Installation.

Page 5: Testsnow 156-215.75 Exam - Check Point Certified Security Administrator

Leading the way in IT testing and certification tools, www.TestsNow.com

- 5 -

B. Unsupported configuration.

C. Distributed Installation.

D. Stand-Alone Installation.

Answer: C

www.TestsNow.com Q: 6 When doing a Stand-Alone Installation, you would installthe Security Management Server with which other Check Point architecturecomponent?

A. SecureClient

B. Security Gateway

C. SmartConsole

D. None, Security Management Server would be installed by itself

Answer: B

www.TestsNow.com Q: 7 You are a security architect and need to design a securefirewall, VPN and IPS solution. Where would be the best place to install IPS in thetopology if the internal network is already protected?

A. On the firewall itself to protect all connected networks centrally.

B. On each network segment separately.

C. On the LAN is enough, the DMZ does not need to be protected.

D. In front of the firewall is enough.

Page 6: Testsnow 156-215.75 Exam - Check Point Certified Security Administrator

Leading the way in IT testing and certification tools, www.TestsNow.com

- 6 -

Answer: A

www.TestsNow.com Q: 8 You are installing a Security Management Server. Yoursecurity plan calls for three administrators for this particular server. How manycan you create during installation?

A. Depends on the license installed on the Security Management Server

B. Only one with full access and one with read-only access

C. One

D. As many as you want

Answer: C

www.TestsNow.com Q: 9 During which step in the installation process is itnecessary to note the fingerprint for first-time verification?

A. When establishing SIC between the Security Management Server and the Gateway

B. When configuring the Security Management Server using cpconfig

C. When configuring the Security Gateway object in SmartDashboard

D. When configuring the Gateway in the WebUl

Answer: B

www.TestsNow.com Q: 10 How can you most quickly reset Secure InternalCommunications (SIC) between a Security Management Server and SecurityGateway?

Page 7: Testsnow 156-215.75 Exam - Check Point Certified Security Administrator

Leading the way in IT testing and certification tools, www.TestsNow.com

- 7 -

A. Run the command fwm sic-reset to initialize the Internal Certificate Authority (ICA)of the Security Management Server. Then retype the activation key on the SecurityGateway from SmartDashboard.

B. Use SmartDashboard to retype the activation key on the Security Gateway. This willautomatically Sync SIC to both the Security Management Server and Gateway.

C. From cpconfig on the Gateway, choose the Secure Internal Communication optionand retype the activation key. Next, retype the same key in the Gateway object inSmartDashboard and reinitialize Secure Internal Communications (SIC).

D. From the Security Management Server¡¯s command line, Type fw putkey ¨Cp<shared key> < IP Address of security Gateway>.

Answer: C