CheckPoint 156-210 Actual Free Exam Questions & Community Discussion
What command uninstalls the currently loaded Inspection Code from selected targets?
Correct Answer: E
Vote an answer
CORRECT TEXT
What is the advantage of using VPN-1/FireWall-1 Password for the authentication scheme, rather than using OS Password?
What is the advantage of using VPN-1/FireWall-1 Password for the authentication scheme, rather than using OS Password?
Correct Answer:
Pending
Fully Automatic Client authentication provides authentication for all protocols, whether supported by these protocols or not.
Correct Answer: A
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
CORRECT TEXT
Which of the following is TRUE, if you change the inspection order of implied rules?
Which of the following is TRUE, if you change the inspection order of implied rules?
Correct Answer:
Pending
Which is the correct rule in the following Rule Base?
No
SOURCE
DESTINATION
SERVICE
ACTION
TRACK
1
AllUsers@Chicago
Any
Any
Session Auth
Log
2
AllUsers@Chicago
Chicago
Any
Session Auth
Log
3
AllUsers@Any
Any
Any
Session Auth
Log
4
AllUsers@Chicago
Any
Any
User Auth
Log
No
SOURCE
DESTINATION
SERVICE
ACTION
TRACK
1
AllUsers@Chicago
Any
Any
Session Auth
Log
2
AllUsers@Chicago
Chicago
Any
Session Auth
Log
3
AllUsers@Any
Any
Any
Session Auth
Log
4
AllUsers@Chicago
Any
Any
User Auth
Log
Correct Answer: C
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
Why would an administrator want to negate a selected object in the Rule Base?
Correct Answer: C
Vote an answer
CORRECT TEXT
You have locked yourself out, with a rule or an incorrectly configured Security Policy. What would you do to recover communication between your SmartCenter Server and Enforcement Module?
You have locked yourself out, with a rule or an incorrectly configured Security Policy. What would you do to recover communication between your SmartCenter Server and Enforcement Module?
Correct Answer:
Pending
Session authentication provides an authentication method NOT supported by protocols that can be integrated with any application.
No.
Source
Destination
Service
Action
Track
Install On
1.
Any
Local_Net
telnet
Accept
Long
Gateways
2.
Pub Server1
Pub Server2
Any
Accept
Long
Gateways
No.
Source
Destination
Service
Action
Track
Install On
1.
Any
Local_Net
telnet
Accept
Long
Gateways
2.
Pub Server1
Pub Server2
Any
Accept
Long
Gateways
Correct Answer:
Explanation: this is true, session authentication does not support some protocols that could be integrated with any application, see Session Authentication topic at the Checkpoint NG Online help.
Incorrect Answers
B:session authentication doesn't support protocols that can be integrated with any application, see Checkpoint NG documentation.
Incorrect Answers
B:session authentication doesn't support protocols that can be integrated with any application, see Checkpoint NG documentation.
CORRECT TEXT
Which of the following is the BEST authentication for roaming users, such as doctors updating patient records via HTTP at various workstations in a hospital?
Which of the following is the BEST authentication for roaming users, such as doctors updating patient records via HTTP at various workstations in a hospital?
Correct Answer:
Pending
CORRECT TEXT
Which of the following objects are allowed in the Source components of the Rule Base? (Choose two)
Which of the following objects are allowed in the Source components of the Rule Base? (Choose two)
Correct Answer:
Pending
What is true of the Enforcement Module? (Select all that apply)
Correct Answer:
Explanation: We normally use a multihomed machine to have internal, external and DMZ interfaces. It's also installed in a enforcement point, because it will analyze the network traffic to comply with the enterprise security policy. Additionally, it can provide authentication through the supported schemes (Client, Session, User) and also some content security at the application level like stripping off Java code from HTTP connections.
Incorrect Answers
B:Logging is maintained at the management module.
Incorrect Answers
B:Logging is maintained at the management module.
Which log viewer mode allows you to actually see the contents of the files HTTP-ed by the corporation's Chief Executive Officer?
Correct Answer: B
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
______ rules, defined in a firewall object's properties, are enforced before any rule in the Security Policy's Rule Base.
Correct Answer: C
Vote an answer
0
0
0
10