CheckPoint 156-210 Actual Free Exam Questions & Community Discussion

When you disable a rule the rule is NOT disabled until you verify your Security Policy.

How does VPN-1/Firewall-1 NG implement Transparent authentication?

The advantage of client authentication is that it can be used for any number of connections and for any services, but authentication is only valid for a specified length of time.

Assume an NT system. What is the default expiration for a Dynamic NAT connection NOT showing any TCP activity?

What Blocking Scope options are available when using Block Intruder? Choose three.

CORRECT TEXT
Which type of rule should be placed above the Stealth Rule?

Assume that you are working on a Windows NT operating system. What is the default expiration for a Dynamic NAT connection NOT showing any UDP activity?

Which of the following does a Check Point security gateway access, analyze, and use? Choose three.

You have created a rule that requires users to be authenticated, when connecting to the Internet using HTTP. Which is the BEST authentication method for users who must use specific computers for Internet access?

Which of the following describes the behavior of VPN-1/Firewall-1 NG?

How do recover communications between your management module and
enforcement module if you lock yourself out via a rule policy that is configured incorrectly?

CORRECT TEXT
The SANS Dshield.org Storm center integrates with SmartDefense, by: (Choose two)

The ICA creates certificates for the VPN-1/FireWall-1 Modules and any other communicating component are created via initialization of the Policy Editor. The ICA creates, signs, and delivers a certificate to the communicating component. When would the certificate become invalid? (Select all that apply) Explanation: according to checkpoint documentation there are two cases when certificates become invalid, the first case is when you reset ICA, because all the certificates have to be reissued, and the second case is when you delete a module at the policy editor because the object is no longer available and the management server published a CRL invalidating the associated SIC certificate previously issued by ICA.