CheckPoint CCSA 156-215.75 Questions & Answers

• Question 51:

  What mechanism does a gateway configured with Identity Awareness and LDAP initially use to communicate with a Windows 2003 or 2008 server?

  A. RCP

  B. LDAP

  C. WMI

  D. CIFS

  Correct Answer: C

• Question 52:

  Which of the following are available SmartConsole clients which can be installed from the R75 Windows CD? Read all answer and select the most complete and valid list.

  A. SmartView Tracker, CPINFO, SmartUpdate

  B. SmartView Tracker, SmartDashboard, SmartLSM, SmartView Monitor

  C. SmartView Tracker, SmartDashboard, CPINFO, SmartUpdate, SmartView Status

  D. Security Policy Editor, Log viewer, Real Time Monitor GUI

  Correct Answer: B

• Question 53:

  Which of the following items should be configured for the Security Management Server to authenticate using LDAP?

  A. Domain Admin password

  B. Check Point Password

  C. Windows logon password

  D. WM1 object

  Correct Answer: A

• Question 54:

  The Captive Portal tool:

  A. Allows access to users already identified

  B. Acquires identities from unidentified users

  C. Is deployed from the Identity Awareness page in the Global Properties settings

  D. Is only used for guest user authentication

  Correct Answer: B

• Question 55:

  The London Security Gateway Administrator has just installed the Security Gateway and Management Server. He has not changed any default settings. As he tries to configure the Gateway, he is unable to connect. Which troubleshooting suggestion will NOT help him?

  A. Check if some intermediate network device has a wrong routing table entry, VLAN assignment, duplex-mismatch, or trunk issue.

  B. Verify that the Rule Base explicitly allows management connections.

  C. Test the IP address assignment and routing settings of the Security Management Server, Gateway, and console client.

  D. Verify the SIC initialization.

  Correct Answer: B

• Question 56:

  You install and deploy SecurePlatform with default settings. You allow visitor Mode in the Gateway object's Remote Access properties and install policy, but SecureClient refuses to connect. What is the cause of this?

  A. Set the Visitor Mode Policy > Global Properties > Remote-Access > VPN Advanced

  B. Offline mode is not configured C. You need to start SSL Network Extended first, then use Visitor Mode

  D. The WebUI on SecurePlatform runs on port 443 (HTTPS). When you configure Visitor Mode it cannot bind to default port 443, because it's used by another program (WebUI). You need to change the WebUI port, or run Visitor Mode on a different port.

  Correct Answer: D

• Question 57:

  Which of the following allows administrators to allow or deny traffic to or from a specific network based on the user's credentials?

  A. Access Role

  B. Access Rule

  C. Access Policy

  D. Access Certificate

  Correct Answer: B

• Question 58:

  What are you required to do before running the command upgrade_export?

  A. Run a cpatop on the Security Management Server

  B. Run a cpstop on the Security Gateway

  C. Close all GUI clients

  D. Run cpconfig and set yourself up as a GUI client

  Correct Answer: C

• Question 59:

  What action CANNOT be run from SmartUpdate R75?

  A. Reboot Gateway

  B. Fetch sync status

  C. Get all Gateway Data

  D. Preinstall verifier

  Correct Answer: B

• Question 60:

  What happens if the identity of a user is known?

  A. If the user credentials do not match an Access Role, the gateway moves onto the next rule.

  B. If the user credentials do not match an Access Role, the system displays the Captive Portal

  C. If the user credentials do not match an Access Role, the traffic is automatically dropped

  D. If the user credentials do not match an Access Role, the system displays a sandbox.

  Correct Answer: A