156-215.76 Exam Training Practice Tests (CheckPoint Check Point Certified Security Administrator

Question 1

Which component functions as the Internal Certificate Authority for R76?

A. SmartLSM B. Management Server C. Security Gateway D. Policy Server

Correct Answer: B

Question 2

What action CANNOT be run from SmartUpdate R76?

A. Preinstall verifier B. Get all Gateway Data C. Fetch sync status D. Reboot Gateway

Correct Answer: C

Question 3

Chris has lost SIC communication with his Security Gateway and he needs to re-establish SIC.

What would be the correct order of steps needed to perform this task?

A. 5, 1, 2, 4 B. 2, 3, 1, 4 C. 5, 1, 4, 2 D. 3, 1, 4, 2

Correct Answer: A

Question 4

Secure Internal Communications (SIC) is completely NAT-tolerant because it is based on:

A. IP addresses. B. SIC names. C. SIC is not NAT-tolerant. D. MAC addresses.

Correct Answer: B

Question 5

You are about to test some rule and object changes suggested in an R76 news group. Which backup solution should you use to ensure the easiest restoration of your Security Policy to its previous configuration after testing the changes?

A. Database Revision Control B. Manual copies of the directory $FWDIR/conf C. upgrade_export command D. SecurePlatform backup utilities

Correct Answer: A

Question 6

Identity Awareness can be deployed in which of the following modes?

A. Router B. Load Sharing C. High Availability D. Detect

Correct Answer: D

Question 7

The INSPECT engine inserts itself into the kernel between which two OSI model layers?

A. Presentation and Application B. Data link and Network C. Physical and Data D. Session and Transport

Correct Answer: B

Question 8

Which command would provide the most comprehensive diagnostic information to Check Point Technical Support?

A. cpstat - date.cpstat.txt B. fw cpinfo C. diag D. cpinfo -o date.cpinfo.txt

Correct Answer: D

Question 9

Users with Identity Awareness Agent installed on their machines login with __________, so that when the user logs into the domain, that information is also used to meet Identity Awareness credential requests.

A. Key-logging B. ICA Certificates C. SecureClient D. Single Sign-On

Correct Answer: D

Question 10

The SIC certificate is stored in the directory _______________.

A. $CPDIR/conf B. $FWDIR/conf C. $FWDIR/database D. $CPDIR/registry

Correct Answer: A

Question 11

Which of the following describes the default behavior of an R76 Security Gateway?

A. Traffic not explicitly permitted is dropped. B. IP protocol types listed as secure are allowed by default, i.e. ICMP, TCP, UDP sessions are inspected. C. All traffic is expressly permitted via explicit rules. D. Traffic is filtered using controlled port scanning.

Correct Answer: A

CheckPoint Check Point Certified Security Administrator - GAiA - 156-215.76 Exam Practice Test