CheckPoint 156-215.75 Actual Free Exam Questions & Community Discussion

Which of these attributes would be critical for a site-to-site VPN?

Where are automatic NAT rules added to the Rule Base?

R75's INSPECT engine inserts itself into the kernel between which two OSI model layers?

Your users are defined in a Windows 2003 R2 Active Directory server. You must add LDAP users to a Client Authentication rule. Which kind of user group do you need in the Client Authentication rule in R75?

What is the primary benefit of using upgrade_export over either backup of snapshot?

Which utility is necessary for reestablishing SIC?

With deployment of SecureClient, you have defined in the policy that you allow traffic only to an encrypted domain. But when your mobile users move outside of your company, they often cannot use SecureClient because they have to register first (i.e. in Hotel or Conference rooms). How do you solve this problem?

A company has disabled logging for some of the most commonly used Policy rules. This was to decrease load on the Security Management Server and to make tracking dropped connections easier. What action would you recommend to get reliable statistics about the network traffic using SmartReporter?

A Security Policy installed by another Security Administrator has blocked all SmartDashboard connections to the stand-alone installation of R75. After running the fw unloadlocal command, you are able to reconnect with SmartDashboard and view all changes. Which of the following change is the most likely cause of the block?

During which step in the installation process is it necessary to note the fingerprint for first-time verification?

You are evaluating the configuration of a mesh VPN Community used to create a site-tosite VPN. This graphic displays the VPN properties in this mesh Community.

Which of the following would be the most valid conclusion?

When using vpn tu, which option must you choose if you want to rebuild your VPN for a specific IP (gateway)?

One of your remote Security Gateway's suddenly stops sending logs, and you cannot install the Security Policy on the Gateway. All other remote Security Gateways are logging normally to the Security Management Server, and Policy installation is not affected. When you click the Test SIC status button in the problematic Gateway object you receive an error message. What is the problem?

Which of the following SSL Network Extender server-side prerequisites is NOT correct?

Captive Portal is a _____________ that allows the gateway to request login information from the user.