CheckPoint CCSA 156-215.75 Questions & Answers

• Question 521:

  The Security Gateway is installed on SecurePlatform R75. The default port for the Web User Interface is _______.

  A. TCP 18211

  B. TCP 257

  C. TCP 4433

  D. TCP 443

  Correct Answer: D

• Question 522:

  You need to completely reboot the Operating System after making which of the following changes on the Security Gateway? i.e. the command cprestart is not sufficient.

  1.

  Adding a hot-swappable NIC to the Operating System for the first time.

  2.

  Uninstalling the R75 Power/UTM package.

  3.

  Installing the R75 Power/UTM package.

  4.

  Re-establishing SIC to the Security Management Server.

  5.

  Doubling the maximum number of connections accepted by the Security Gateway.

  A. 3 only

  B. 1, 2, 3, 4, and 5

  C. 2, 3 only

  D. 3, 4, and 5 only

  Correct Answer: C

• Question 523:

  R75's INSPECT Engine inserts itself into the kernel between which two layers of the OSI model?

  A. Presentation and Application

  B. Physical and Data

  C. Session and Transport

  D. Data and Network

  Correct Answer: D

• Question 524:

  What would be the benefit of upgrading from SmartDefense to IPS R75?

  A. The SmartDefense is replaced by the technology of IPS-1.

  B. The SmartDefense technology expands IPS-1 to IPS R75.

  C. Completely rewritten engine provides improved security performance and reporting.

  D. There is no difference - IPS R75 is the new name.

  Correct Answer: C

• Question 525:

  When Jon first installed the system, he forgot to configure DNS servers on his Security Gateway. How could Jon configure DNS servers now that his Security Gateway is in production?

  A. Login to the firewall using SSH and run cpconfig, then select Domain Name Servers.

  B. Login to the firewall using SSH and run fwm, then select System Configuration and Domain Name Servers.

  C. Login to the SmartDashboard, edit the firewall Gateway object, select the tab Interfaces, then Domain Name Servers.

  D. Login to the firewall using SSH and run sysconfig, then select Domain Name Servers.

  Correct Answer: D

• Question 526:

  Once installed, the R75 kernel resides directly below which layer of the OSI model? Note: Application is the top and Physical is the bottom of the IP stack.

  A. Network

  B. Transport

  C. Data Link

  D. Session

  Correct Answer: A

• Question 527:

  You are running the Security Gateway on SecurePlatform and configure SNX with default settings. The client fails to connect to the Security Gateway. What is wrong?

  A. The routing table on the client does not get modified.

  B. The client has Active-X blocked.

  C. The client is configured incorrectly.

  D. The SecurePlatform Web User Interface is listening on port 443.

  Correct Answer: D

• Question 528:

  How can you recreate the account of the Security Administrator, which was created during initial installation of the Management Server on SecurePlatform?

  A. Launch cpconfig and delete the Administrator's account. Recreate the account with the same name.

  B. Export the user database into an ASCII file with fwm dbexport. Open this file with an editor, and delete the Administrator Account portion of the file. You will be prompted to create a new account.

  C. Type cpm -a, and provide the existing Administrator's account name. Reset the Security Administrator's password.

  D. Launch SmartDashboard in the User Management screen, and delete the cpconfig administrator.

  Correct Answer: A

• Question 529:

  How can you most quickly reset Secure Internal Communications (SIC) between a Security Management Server and Security Gateway?

  A. Run the command fwm sic-reset to initialize the Internal Certificate Authority (ICA) of the Security Management Server. Then retype the activation key on the Security Gateway from SmartDashboard.

  B. Use SmartDashboard to retype the activation key on the Security Gateway. This will automatically Sync SIC to both the Security Management Server and Gateway.

  C. From cpconfig on the Gateway, choose the Secure Internal Communication option and retype the activation key. Next, retype the same key in the Gateway object in SmartDashboard and reinitialize Secure Internal Communications (SIC).

  D. From the Security Management Server's command line, Type fw putkey p < IP Address of security Gateway>.

  Correct Answer: C

• Question 530:

  You are a security architect and need to design a secure firewall, VPN and IPS solution. Where would be the best place to install IPS in the topology if the internal network is already protected?

  A. On the firewall itself to protect all connected networks centrally.

  B. On each network segment separately.

  C. On the LAN is enough, the DMZ does not need to be protected.

  D. In front of the firewall is enough.

  Correct Answer: A