Latest CheckPoint 156-215-75 Actual Free Exam Questions & Community Discussion, Page 1

Question #1

An Administrator without access to SmartDashboard installed a new IPSO-based R75 Security Gateway over the weekend. He e-mailed you the SIC activation key. You want to confirm communication between the Security Gateway and the Management Server by installing the Policy. What might prevent you from installing the Policy?

A. You have not established Secure Internal Communications (SIC) between the Security Gateway and Management Server You must initialize SIC on the Security Management Server.

B. You first need to create a new Gateway object in SmartDashboard, establish SIC via the Communication button, and define the Gateway's topology.

C. An intermediate local Security Gateway does not allow a policy install through it to the remote new Security Gateway appliance Resolve by running the tw unloadlocal command on the local Security Gateway.

D. You first need to run the fw unloadlocal command on the R75 Security Gateway appliance in order to remove the restrictive default policy.

Discussion 0

Correct Answer: B Vote an answer

Question #2

How can you reset the Security Administrator password that was created during initial Security Management Server installation on SecurePlatform?

A. Launch SmartDashboard in the User Management screen, and edit the cpconfig administrator.

B. Export the user database into an ASCII file with fwm dbexport. Open this file with an editor, and delete the Password portion of the file. Then log in to the account without a password. You will be prompted to assign a new password.

C. Type cpm -a, and provide the existing administrator's account name. Reset the Security Administrator's password.

D. As expert user Type fwm -a, and provide the existing administrator's account name. Reset the Security Administrator's password.

Discussion 0

Correct Answer: D Vote an answer

Question #3

You are conducting a security audit. While reviewing configuration files and logs, you notice logs accepting POP3 traffic, but you do not see a rule allowing POP3 traffic in the Rule Base. Which of the following is the most likely cause?

A. The POP3 rule is disabled.

B. POP3 is accepted in Global Properties.

C. POP3 is one of 3 services (POP3, IMAP, and SMTP) accepted by the default mail object in R75.

D. The POP3 rule is hidden.

Discussion 0

Correct Answer: D Vote an answer

Question #4

You believe Phase 2 negotiations are failing while you are attempting to configure a site-tosite VPN with one of your firm's business partners. Which SmartConsole application should you use to confirm your suspicions?

A. SmartView Status

B. SmartDashboard

C. SmartUpdate

D. SmartView Tracker

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #5

Phase 1 uses________.

A. Symmetric

B. Sequential

C. Conditional

D. Asymmetric

Discussion 0

Correct Answer: D Vote an answer

Question #6

Why should the upgrade_export configuration file (.tgz) be deleted after you complete the import process?

A. It will conflict with any future upgrades when using SmartUpdate.

B. It will prevent a future successful upgrade_export since the .tgz file cannot be overwritten.

C. It contains your security configuration, which could be exploited.

D. SmartUpdate will start a new installation process if the machine is rebooted.

Discussion 0

Correct Answer: C Vote an answer

Question #7

You have configured a remote site Gateway that supports your boss's access from his home office using a DSL dialup connection. Everything worked fine yesterday, but today all connectivity is lost. Your initial investigation results in "nobody has touched anything", which you can support by taking a look in SmartView Tracker Management. What is the problem and what can be done about it?

A. The NAT configuration is not correct; you can only use private IP addresses in a static NAT setup.

B. A static NAT setup may not work with DSL, since the external IP may change. Hide NAT behind the Gateway is the preferred method here.

C. According to published limitations of Security Gateway R75, there's a bug with NAT. A restart of the Gateway will help here.

D. You cannot use NAT and a dialup connection.

Discussion 0

Correct Answer: B Vote an answer

Question #8

The fw stat -l command includes all of the following except:

A. The date and time of the policy that is installed.

B. The number of packets that have been dropped

C. The number of packets that have been inspected

D. The number of times the policy has been installed

Discussion 0

Correct Answer: D Vote an answer

Question #9

All Check Point Suite products before version RXX need to be upgraded to RXX before you can upgrade them to R75. RXX is:

A. R60

B. R55

C. R65

D. R61

Discussion 0

Correct Answer: C Vote an answer

Question #10

When attempting to connect with SecureClient Mobile the following error message is received.
The certificate provided is invalid. Please provide the username and password.
What is the probable cause of the error?

A. There is no connection to the server, and the client disconnected.

B. The certificate provided is invalid.

C. The user attempting to connect is not configured to have an office mode IP address so the connection failed.

D. The user's credentials are invalid.

Discussion 0

Correct Answer: B Vote an answer

Question #11

Which rule is responsible for installation feature?

A. Rule 7

B. Rule 5

C. Rule 8

D. Rule 4

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #12

The Administrator of the Tokyo Security Management Server cannot connect from his workstation in Osaka. Which of the following lists the BEST sequence of steps to troubleshoot this issue?

A. Check for matching OS and product versions of the Security Management Server and the client. Then, ping the Gateways to verify connectivity. If successful, scan the log files for any denied management packets.

B. Check the allowed clients and users on the Security Management Server. If pcosaka and your user account are valid, check for network problems. If there are no network related issues, this is likely to be a problem with the server itself. Check for any patches and upgrades. If still unsuccessful, open a case with Technical Support.

C. Call Tokyo to check if they can ping the Security Management Server locally. If so, login to sgtokyo, verify management connectivity and Rule Base. If this looks okay, ask your provider if they have some firewall rules that filters out your management traffic.

D. Verify basic network connectivity to the local Gateway, service provider, remote Gateway, remote network and target machine. Then, test for firewall rules that deny management access to the target. If successful, verify that pcosaka is a valid client IP address.

Discussion 0

Correct Answer: D Vote an answer

Question #13

You are running the Security Gateway on SecurePlatform and configure SNX with default settings. The client fails to connect to the Security Gateway. What is wrong?

A. The SecurePlatform Web User Interface is listening on port 443.

B. The client has Active-X blocked.

C. The client is configured incorrectly.

D. The routing table on the client does not get modified.

Discussion 0

Correct Answer: A Vote an answer

CheckPoint 156-215-75 Actual Free Exam Questions & Community Discussion

Download Free CheckPoint 156-215-75 Demo