CheckPoint CCSA 156-215.75 Questions & Answers

• Question 511:

  The Internal Certificate Authority (ICA) CANNOT be used for:

  A. Virtual Private Network (VPN) Certificates for gateways

  B. NAT rules

  C. Remote-access users

  D. SIC connections

  Correct Answer: B

• Question 512:

  Match each of the following command to their correct function. Each command has one function only listed.

  

  A. C1>F2; C2>F1; C3>F6; C4>F4

  B. C1>F6; C2>F4; C3>F2; C4>F5

  C. C1>F2; C4>F4; C3>F1; C4>F5

  D. C1>F4; C2>F6, C3>F3; C4>F2

  Correct Answer: B

• Question 513:

  The Administrator of the Tokyo Security Management Server cannot connect from his workstation in Osaka. Which of the following lists the BEST sequence of steps to troubleshoot this issue?

  

  A. Check for matching OS and product versions of the Security Management Server and the client. Then, ping the Gateways to verify connectivity. If successful, scan the log files for any denied management packets.

  B. Call Tokyo to check if they can ping the Security Management Server locally. If so, login to sgtokyo, verify management connectivity and Rule Base. If this looks okay, ask your provider if they have some firewall rules that filters out your management traffic.

  C. Verify basic network connectivity to the local Gateway, service provider, remote Gateway, remote network and target machine. Then, test for firewall rules that deny management access to the target. If successful, verify that pcosaka is a valid client IP address.

  D. Check the allowed clients and users on the Security Management Server. If pcosaka and your user account are valid, check for network problems. If there are no network related issues, this is likely to be a problem with the server itself. Check for any patches and upgrades. If still unsuccessful, open a case with Technical Support.

  Correct Answer: C

• Question 514:

  You have configured SNX on the Security Gateway. The client connects to the Security Gateway and the user enters the authentication credentials. What must happen after authentication that allows the client to connect to the Security Gateway's VPN domain?

  A. Active-X must be allowed on the client.

  B. An office mode address must be obtained by the client.

  C. SNX modifies the routing table to forward VPN traffic to the Security Gateway.

  D. The SNX client application must be installed on the client.

  Correct Answer: C

• Question 515:

  How can you reset the password of the Security Administrator that was created during initial installation of the Security Management Server on SecurePlatform?

  A. Type cpm -a, and provide the existing administrator's account name. Reset the Security Administrator's password.

  B. Export the user database into an ASCII file with fwm dbexport. Open this file with an editor, and delete the "Password" portion of the file. Then log in to the account without a password. You will be prompted to assign a new password.

  C. Launch SmartDashboard in the User Management screen, and edit the cpconfig administrator.

  D. Type fwm -a, and provide the existing administrator's account name. Reset the Security Administrator's password

  Correct Answer: D

• Question 516:

  An Administrator without access to SmartDashboard installed a new IPSO-based R75 Security Gateway over the weekend. He e-mailed you the SIC activation key. You want to confirm communication between the Security Gateway and the Management Server by installing the Policy. What might prevent you from installing the Policy?

  A. You first need to create a new Gateway object in SmartDashboard, establish SIC via the Communication button, and define the Gateway's topology.

  B. You have not established Secure Internal Communications (SIC) between the Security Gateway and Management Server You must initialize SIC on the Security Management Server.

  C. An intermediate local Security Gateway does not allow a policy install through it to the remote new Security Gateway appliance Resolve by running the tw unloadlocal command on the local Security Gateway.

  D. You first need to run the fw unloadlocal command on the R75 Security Gateway appliance in order to remove the restrictive default policy.

  Correct Answer: A

• Question 517:

  Tom has been tasked to install Check Point R75 in a distributed deployment. Before Tom installs the systems this way, how many machines will he need if he does not include a SmartConsole machine in his calculations?

  A. One machine

  B. One machine, but it needs to be installed using SecurePlatform for compatibility purposes

  C. Three machines

  D. Two machines

  Correct Answer: D

• Question 518:

  Over the weekend, an Administrator without access to SmartDashboard installed a new R75 Security Gateway using SecurePlatform. You want to confirm communication between the Gateway and the Management Server by installing the Security Policy. What might prevent you from installing the Policy?

  A. You first need to initialize SIC in SmartUpdate.

  B. You have not established Secure Internal Communications (SIC) between the Security Gateway and Management Server. You must initialize SIC on the Security Management Server.

  C. You have not established Secure Internal Communications (SIC) between the Security Gateway and Management Server. You must initialize SIC on both the Security Gateway and the Management Server.

  D. You first need to run the fw unloadlocal command on the new Security Gateway.

  Correct Answer: B

• Question 519:

  Your customer wishes to install the SmartConsole on a Windows system. What are the minimum hardware requirements for R75? Give the BEST answer.

  A. 500 MB Free disk space and 512 MB RAM

  B. 1 GB Free disk space and 512 MB RAM

  C. 1 GB Free disk space and 1 GB RAM

  D. 512 MB Free disk space and 1 GB RAM

  Correct Answer: A

• Question 520:

  From the output below, where is this fingerprint generated?

  

  A. SmartUpdate

  B. Security Management Server

  C. SmartDashboard

  D. SmartConsole

  Correct Answer: B