156-215.71 Exam Training Practice Tests (CheckPoint Check Point Certified Security Administrator R71)]

Question 1

Message digests use which of the following?

A. SHA-1 and MD5 B. DES and RC4 C. SSL and MD4 D. IDEA and RC4

Correct Answer: C

Question 2

Which SmartView Tracker selection would most effectively show who installed a Security Policy blocking all traffic from the corporate network?

A. Network and Endpoint tab B. Custom filter C. Active tab D. Management Tab

Correct Answer: D

Question 3

Which of the following is NOT supported with office mode?

A. L2TP B. Secure Client C. Transparent mode D. SSL Network Extender

Correct Answer: C

Question 4

For VPN routing to succeed, what must be configured?

A. VPN routing is not configured in the Rule Base or Community objects. Only the native-routing mechanism on each Gateway can direct the traffic via its VTI configured interfaces. B. A single rule in the Rule Base must cover all traffic on the central (HUB) Security Gateway for the VPN domain. C. At least two rules in the Rule Base must be created, one to cover traffic inbound and the other to cover traffic outbound on the central (HUB) Security Gateway. D. No rules need to be created; implied rules that cover inbound and outbound traffic on the central (HUB) Gateway are already in place from Policy > Properties > Accept VPN-1 Control Connections.

Correct Answer: B

Question 5

In which IKE phase are IKE SA's negotiated?

A. Phase 4 B. Phase 1 C. Phase 3 D. Phase 2

Correct Answer: B

Question 6

You find a suspicious connection from a problematic host. You decide that you want to block everything from that whole network, not just the problematic host. You want to block this for an hour while you investigate further, but you do not want to add any rules to the Rule Base. How do you achieve this?

A. Create a Suspicious Activity Rule in SmartView Monitor B. Add a "temporary" rule using SmartDashboard and select hide rule. C. Use dbedit to script the addition of a rule directly into the Rule Bases_5_0. fws configuration file. D. Select block intruder from the tools menu in SmartView Tracker.

Correct Answer: A

Question 7

Which OPSEC server can be used to prevent users from accessing certain Web sites?

A. CVP B. LEA C. AMON D. UFP

Correct Answer: D

Question 8

User Marc is requesting a Website while he is using a computer out of the net_singapore network. What is TRUE about his location restriction?

Checkpoint 156-215-71 Exam

A. As location restrictions add up, he would be allowed from net_singapore and net_sydney. B. Source setting in Source column always takes precedence C. It depends on how the User Auth object is configured; whether User Properties or Source Restriction takes precedence. D. Source setting in User Properties always takes precedence.

Correct Answer: C

Question 9

Your company enforces a strict change control policy. Which of the following would be MOST effective for quickly dropping an attacker's specific active connection?

A. Intrusion Detection System (IDS) Policy install B. Block Intruder feature of SmartView Tracker C. Change the Rule Base and install the Policy to all Security Gateways D. SAM - Suspicious Activity Rules feature of SmartView Monitor

Correct Answer: B

Question 10

Which of the following explanations best describes the command fw logswitch [-h target] [+ | -] [oldlog]?

A. Control Kernel B. Display a remote machine's log-file list. C. Create a new Log file. The old log has moved D. Display protocol Hosts

Correct Answer: C

Question 11

Which of the following statements about file-type recognition in Content Inspection is TRUE?

A. Antivirus status is monitored using SmartView Tracker. B. A scan failure will only occur if the antivirus engine fails to initialize. C. All file types are considered "at risk", and are not configurable by the Administrator or the Security Policy. D. The antivirus engine acts as a proxy, caching the scanned file before delivering it to the client.

Correct Answer: D

CheckPoint Check Point Certified Security Administrator R71 - 156-215.71 Exam Practice Test