최신 156-215.71 무료덤프 - CheckPoint Check Point Certified Security Administrator R71

문제1

You cannot use SmartDashboard's SmartDirectory features to connect to the LDAP server. What should you investigate?

A. 1, 2, and 3

B. 1 and 2

C. 1 and 3

D. 2 and 3

정답: D

문제2

Which SmartConsole tool would you use to see the last policy pushed in the audit log?

A. SmartView Server

B. SmartView Status

C. SmartView Tracker

D. None, SmartConsole applications only communicate with the Security Management Server.

정답: C

문제3

Which of the following are authentication methods that Security Gateway R71 uses to validate connection attempts? Select the response below that includes the MOST complete list of valid authentication methods.

A. Connection, User, Client

B. Proxied, User, Dynamic, Session

C. Connection, Proxied, Session

D. User, Client, Session

정답: D

문제4

When troubleshooting NAT entries in SmartView Tracker, which column do we need to check to view the NAT'd source port when using source NAT?

A. XlateDst

B. XlateDPort

C. XlateSrc

D. XlateSPort

정답: D

문제5

Which of the below is the MOST correct process to reset SIC from SmartDashboard?

A. Run cpconfig, and click Reset.

B. Click Reset in the Communication window of the Gateway object, and type a new activation key.

C. Click the Communication button for the firewall object, then click Reset. Run cpconfig and type a new activation key.

D. Run cpconfig, and select Secure Internal Communication / Change One Time Password.

정답: C

문제6

Select the correct statement about Secure Internal Communications (SIC) Certificates. SIC Certificates:

A. Uniquely identify machines installed with Check Point software only. They have the same function as RSA Authentication Certificates.

B. Increase network security by securing administrative communication with a two-factor challenge response authentication.

C. Can be used for securing internal network communications between the Security Gateway and an OPSEC device.

D. Are for Security Gateways created during the Security Management Server installation.

정답: C

문제7

You receive a notification that long-lasting Telnet connections to a mainframe are dropped after an hour of inactivity. Reviewing SmartView Tracker shows the packet is dropped with the error: "Unknown established connection"
How do you resolve this problem without causing other security issues? Choose the BEST answer.

A. Create a new TCP service object on port 23 called Telnet-mainframe. Define a service-based session Timeout of 24-hours. Use this new object only in the rule that allows the Telnet connections to the mainframe.

B. Ask the mainframe users to reconnect every time this error occurs.

C. Increase the TCP session timeout under Global Properties > Stateful Inspection.

D. Increase the service-based session timeout of the default Telnet service to 24-hours.

정답: A

문제8

Which of the following objects is a valid source in an authentication rule?

A. User@Any

B. Host@Any

C. User@Network

D. User_group@Network

정답: D

문제9

Looking at an fw monitor capture in Wireshark, the initiating packet in Hide NAT translates on________.

A. o

B. O

C. I

D. i

정답: B

문제10

When Jon first installed the system, he forgot to configure DNS servers on his Security Gateway. How could Jon configure DNS servers now that his Security Gateway is in production?

A. Login to the firewall using SSH and run fwm, then select System Configuration and Domain Name Servers.

B. Login to the firewall using SSH and run sysconfig, then select Domain Name Servers.

C. Login to the firewall using SSH and run cpconfig, then select Domain Name Servers.

D. Login to the SmartDashboard, edit the firewall Gateway object, select the tab Interfaces, then Domain Name Servers.

정답: B

문제11

Which rules are not applied on a first-match basis?

A. Session Authentication

B. Client Authentication

C. User Authentication

D. Cleanup

정답: C

문제12

When selecting an authentication scheme for a user, which scheme would you use if you only want the password to be stored locally? (The password is not stored at a third party component.)

A. SecurID

B. TACACS

C. Check Point Password

D. OS Password

정답: C

문제13

When you change an implicit rule's order from last to first in global properties, how do you make the change take effect?

A. Run fw fetch from the security gateway

B. Select install database from the policy menu

C. Select save from the file menu

D. Reinstall the security policy

정답: D

문제14

What information is found in the SmartView Tracker Management log?

A. Destination IP address

B. Most accessed Rule Base rule

C. SIC revoke certificate event

D. Number of concurrent IKE negotiations

정답: C

문제15

If you were NOT using IKE aggressive mode for your IPsec tunnel, how many packets would you see for normal Phase 1 exchange?

A. 6

B. 9

C. 3

D. 2

정답: A

문제16

Your company is still using traditional mode VPN configuration on all Gateways and policies. Your manager now requires you to migrate to a simplified VPN policy to benefit from the new features. This needs to be done with no downtime due to critical applications which must run constantly. How would you start such a migration?

A. You first need to completely rewrite all policies in simplified mode and then push this new policy to all Gateways at the same time.

B. This cannot be done without downtime as a VPN between a traditional mode Gateway and a simplified mode Gateway does not work.

C. This can not be done as it requires a SIC- reset on the Gateways first forcing an outage.

D. Convert the required Gateway policies using the simplified VPN wizard, check their logic and then migrate Gateway per Gateway.

정답: D

최신 156-215.71 무료덤프 - CheckPoint Check Point Certified Security Administrator R71

우리와 연락하기

유용한 링크

최신 업데이트