156-215.13 Exam Training Practice Tests (CheckPoint Check Point Certified Security Administrator

Question 1

You are a Security Administrator using one Security Management Server managing three different firewalls. One firewall does NOT show up in the dialog box when attempting to install a Security Policy. Which of the following is a possible cause?

A. The firewall is not listed in the Policy Installation Targets screen for this policy package. B. The license for this specific firewall has expired. C. The firewall object has been created but SIC has not yet been established. D. The firewall has failed to sync with the Security Management Server for 60 minutes.

Correct Answer: A

Question 2

UDP packets are delivered if they are ___________.

A. referenced in the SAM related dynamic tables B. bypassing the kernel by the forwarding layer of ClusterXL C. a valid response to an allowed request on the inverse UDP ports and IP D. a stateful ACK to a valid SYN-SYN/ACK on the inverse UDP ports and IP

Correct Answer: C

Question 3

In order to have full control, you decide to use Manual NAT entries instead of Automatic NAT rules. Which of the following is NOT true?

A. When using Dynamic Hide NAT with an address that is not configured on a Gateway interface, you need to add a proxy ARP entry for that address. B. If you chose Automatic NAT instead, all necessary entries are done for you. C. When using Static NAT, you must add proxy ARP entries to the Gateway for all hiding addresses. D. When using Static NAT, you must enter ARP entries for the Gateway on all hosts that are using the NAT Gateway with that Gateway's internal interface IP address.

Correct Answer: D

Question 4

Which command displays the installed Security Gateway version?

A. fw stat B. fw ver C. cpstat -gw D. fw printver

Correct Answer: B

Question 5

Over the weekend, an Administrator without access to SmartDashboard installed a new R76 Security Gateway using GAiA. You want to confirm communication between the Gateway and the Management Server by installing the Security Policy. What might prevent you from installing the Policy?

A. You first need to run the command fw unloadlocal on the new Security Gateway. B. You have not established Secure Internal Communications (SIC) between the Security Gateway and Management Server. You must initialize SIC on the Security Management Server. C. You have not established Secure Internal Communications (SIC) between the Security Gateway and Management Server. You must initialize SIC on both the Security Gateway and the Management Server. D. You first need to initialize SIC in SmartUpdate.

Correct Answer: B

Question 6

You are about to test some rule and object changes suggested in an R76 news group. Which backup solution should you use to ensure the easiest restoration of your Security Policy to its previous configuration after testing the changes?

A. Database Revision Control B. Manual copies of the directory $FWDIR/conf C. upgrade_export command D. SecurePlatform backup utilities

Correct Answer: A

Question 7

The User Directory Software Blade is used to integrate which of the following with Security Gateway R76?

A. Account Management Client server B. LDAP server C. RADIUS server D. UserAuthority server

Correct Answer: B

Question 8

When configuring the Check Point Gateway network interfaces, you can define the direction as Internal or External.

What does the option Interface leads to DMZ mean?

A. Select this option to automatically configure Anti-Spoofing to this net. B. Using restricted Gateways, this option automatically turns off the counting of IP Addresses originating from this interface. C. It defines the DMZ Interface since this information is necessary for Content Control D. Activating this option automatically turns this interface to External.

Correct Answer: C

Question 9

How do you configure an alert in SmartView Monitor?

A. By choosing the Gateway, and Configure Thresholds. B. An alert cannot be configured in SmartView Monitor. C. By right-clicking on the Gateway, and selecting System Information. D. By right-clicking on the Gateway, and selecting Properties.

Correct Answer: A

Question 10

Which of the following actions take place in IKE Phase 2 with Perfect Forward Secrecy disabled?

A. Peers authenticate using certificates or preshared secrets. B. Each Security Gateway generates a private Diffie-Hellman (DH) key from random pools. C. The DH public keys are exchanged. D. Symmetric IPsec keys are generated.

Correct Answer: D

CheckPoint Check Point Certified Security Administrator - GAiA - 156-215.13 Exam Practice Test