CheckPoint CCSA 156-215.75 Questions & Answers

• Question 481:

  Another administrator accidentally installed a Security Policy on the wrong firewall. Having done this, you are both locked out of the firewall that is called myfw1. What command would you execute on your system console on myfw1 in order for you to push out a new Security Policy?

  A. fw dbloadlocal

  B. fw unloadlocal

  C. cpstop

  D. fw ctl filter

  Correct Answer: B

• Question 482:

  For normal packet transmission of an accepted communication to a host protected by a Security Gateway, how many lines per packet are recorded on a packet analyzer like Wireshark using fw monitor?

  A. 2

  B. 4

  C. 3

  D. None

  Correct Answer: B

• Question 483:

  How can I verify the policy version locally installed on the Firewall?

  A. fw ver

  B. fw ctl iflist

  C. fw ver -k

  D. fw stat

  Correct Answer: D

• Question 484:

  If you run fw monitor without any parameters, what does the output display?

  A. In /var/adm/monitor. Out

  B. On the console

  C. In /tmp/log/monitor out

  D. In / var/log/monitor. out

  Correct Answer: B

• Question 485:

  How do you recover communications between your Security Management Server and Security Gateway if you lock yourself out via a rule or policy mis-configuration?

  A. fw delete all.all@localhost

  B. cpstop

  C. fw unloadlocal

  D. fw unload policy

  Correct Answer: C

• Question 486:

  How can you check whether IP forwarding is enabled on an IP Security Appliance?

  A. clish c show routing active enable

  B. echo 1 > /proc/sys/net/ipv4/ip_forwarding

  C. ipsofwd list

  D. cat/proc/sys/net/ipv4/ip_forward

  Correct Answer: C

• Question 487:

  Which of the following options is available with the SecurePlatform cpconfig utility?

  A. GUI Clients

  B. Time and Date

  C. Export setup

  D. DHCP Server configuration

  Correct Answer: A

• Question 488:

  Which command would provide the most comprehensive diagnostic information to Check Point Technical Support?

  A. diag

  B. cpinfo -o date.cpinfo.txt

  C. netstat > date.netstat.txt

  D. cpstat > date.cpatat.txt

  Correct Answer: B

• Question 489:

  Which of the following statements accurately describes the snapshot command?

  A. snapshot creates a full OS-level backup, including network-interface data, Check Point product information, and configuration settings during an upgrade of a SecurePlatform Security Gateway.

  B. A Gateway snapshot includes configuration settings and Check Point product information from the remote Security Management Server.

  C. snapshot creates a full system-level backup of the Security Management Server on any OS

  D. snapshot stores only the system-configuration settings on the Gateway.

  Correct Answer: A

• Question 490:

  Where is the IPSO Boot Manager physically located on an IP Appliance?

  A. In the / nvram directory

  B. On an external jump drive

  C. On the platform's BIOS

  D. On built-in compact Flash memory

  Correct Answer: D