CheckPoint 156-210 Actual Free Exam Questions & Community Discussion
When you select the alert radio button on the topology tab of the interface properties window:
Correct Answer: E
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
Which is not a step in Session Authentication?
Correct Answer:
Explanation: In session authentication the session agent doesn't try to authenticate the user if the validation checking is already done.
Here is the complete process:First, the user connects directly to the destination server, then the inspection module intercepts the connection and the inspection module connects to the session agent on the client PC, then the session agent prompts the user for authentication data and returns it to the inspection engine in the firewall, at the end, if the authentication is successful, the gateway allows the connection to pass through to the target server.
Incorrect Answers
E:This is not part of the session authentication process.
Here is the complete process:First, the user connects directly to the destination server, then the inspection module intercepts the connection and the inspection module connects to the session agent on the client PC, then the session agent prompts the user for authentication data and returns it to the inspection engine in the firewall, at the end, if the authentication is successful, the gateway allows the connection to pass through to the target server.
Incorrect Answers
E:This is not part of the session authentication process.
Omanan Enterprises has the premier reclamation system for scrap aluminum in the western hemisphere. Then phenomenal growth over the last 10 years has led to the decision to establish a presence in the Internet in order to their customers. To that end, Omanan Enterprise network administrator, Jason has acquired a Web Server, and email server and 14 IP addresses from their ISP. Jason also purchased a Checkpoint VPN-1/FireWall-1 stand alone gateway module, with these interfaces, to protect Omanan enterprises' corporate data their ISP will be providing DNS services.
The Web Server and email server must have Static routable IP addresses. The eight member executive counsel of Omanan Enterprises would to have routable IP addresses also, so that they can video-conference with the company's suppliers.
Omanan Enterprises' remaining 200 employees would like to have access to Internet, and the executive counsel believe that granting them access might improve company morale.
Jason installs and configured Checkpoint VPN-1/FireWall1 stand alone Gateway module at the perimeter of Omanan Enterprises corporate LAN. He uses the 3rd NIC in the stand alone firewall gateway module to create DMZ. Jason installs the Web server and the email server on the DMZ. He creates tools and objects on the checkpoint VPN-1/FireWall-1 stand alone gateway module to allow HTTP, POP3 and SMTP from the Internet to the DMZ. He Creates objects to represent the web and email server and configures them for Static NAT.
Jason reconfigures his DHCP server so that each of the members of the executive counsel has reserved IP address. He then sues those reservations co create Statically NAT-ed objects on the Checkpoint VPN/Firewall-1 Standalone Gateway module. Jason creates another object represents the internal network he configures this object for Dynamic NAT. He adds a rule allowing HTTP traffic from the internal network to any destination. Jason created an additional rule to allow POP3 and SMTP traffic between the internal networks and DMZ.
Choose the one phrase below that best describes Jason's proposal.
The Web Server and email server must have Static routable IP addresses. The eight member executive counsel of Omanan Enterprises would to have routable IP addresses also, so that they can video-conference with the company's suppliers.
Omanan Enterprises' remaining 200 employees would like to have access to Internet, and the executive counsel believe that granting them access might improve company morale.
Jason installs and configured Checkpoint VPN-1/FireWall1 stand alone Gateway module at the perimeter of Omanan Enterprises corporate LAN. He uses the 3rd NIC in the stand alone firewall gateway module to create DMZ. Jason installs the Web server and the email server on the DMZ. He creates tools and objects on the checkpoint VPN-1/FireWall-1 stand alone gateway module to allow HTTP, POP3 and SMTP from the Internet to the DMZ. He Creates objects to represent the web and email server and configures them for Static NAT.
Jason reconfigures his DHCP server so that each of the members of the executive counsel has reserved IP address. He then sues those reservations co create Statically NAT-ed objects on the Checkpoint VPN/Firewall-1 Standalone Gateway module. Jason creates another object represents the internal network he configures this object for Dynamic NAT. He adds a rule allowing HTTP traffic from the internal network to any destination. Jason created an additional rule to allow POP3 and SMTP traffic between the internal networks and DMZ.
Choose the one phrase below that best describes Jason's proposal.
Correct Answer: A
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
Which of the following are tasks performed by a VPN-1/FireWall-1 SmartCenter Server? Choose three.
Correct Answer: A,B,C
Vote an answer
CORRECT TEXT
Which of the following statements accurately describes VPN-1/FireWall-1 Session Authentication? (Choose three)
Which of the following statements accurately describes VPN-1/FireWall-1 Session Authentication? (Choose three)
Correct Answer:
Pending
What does a status of Untrusted tell you?
Correct Answer: A
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
Client Authentication rules should be placed above the Stealth rule, so users can authenticate to the firewall.
Correct Answer: A
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
Static Source NAT translates public internal source IP addresses to private external source IP addresses.
Correct Answer: B
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
Where is the external if file located in VPN1/Firewall-1 NG?
Correct Answer: C
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
Which of the following statements about Client Authentication is FALSE?
Correct Answer: B
Vote an answer
You are Security Administrator preparing to deploy a new hot-fix to ten Enforcement Modules at five geographically separated locations. What is the BEST method to implement this hot-fix?
Correct Answer: E
Vote an answer
CORRECT TEXT
Security Administrators use Session Authentication when they want users to:
(Choose two)
Security Administrators use Session Authentication when they want users to:
(Choose two)
Correct Answer:
Pending
Choose the two responses that BEST describe a VPN-1/Firewall-1 Rule Base.
A Rule Base is:
A Rule Base is:
Correct Answer: A,C
Vote an answer
0
0
0
10