CheckPoint CCSA 156-215.75 Questions & Answers

• Question 61:

  My Awareness is implemented to manage access to protected resources based on a user's _____________.

  A. Time of connection

  B. Application requirement

  C. Identity

  D. Computer MAC address

  Correct Answer: C

• Question 62:

  You are the Security Administrator for MegaCorp and would like to view network activity using SmartReporter. You select a standard report as you can see here, you can select the London Gateway.

  

  When you attempt to configure the Express Report, you are unable to select Gateway.

  

  What is the reason for this behavior? Give the BEST answer

  A. You must enable the Eventia Express Mode on the London Gateway

  B. You must enable Monitoring in the London Gateway object's General Properties

  C. You have the license for Eventia Reporter in Standard mode only

  D. You must enable the Express Mode inside Eventia Reporter.

  Correct Answer: B

• Question 63:

  If a security gateway enforces three protections, LDAP injection, Malicious Code Protector Rejection, which checkpoint license is required in SmartPhone?

  A. SmallEvent intro

  B. IPS

  C. SSL VPN

  D. Data Loss Prevention

  Correct Answer: B

• Question 64:

  Using Captive Portal, unidentified users may be blocked, allowed to enter required credentials, or required to download.

  A. ICA Certificate

  B. SecureClient

  C. Full Endpoint Client

  D. Identity Awareness Agent

  Correct Answer: D

• Question 65:

  What is true about the Rule Base shown?

  

  (i). HTTP traffic from webrome to websingapore will be encrypted (ii). HTTP traffic from websingapore to webrome will be encrypted (iii). HTTP traffic from webrome ro websingapore will be encrypted (iv). HTTP traffic from websingapore to webromw will be blocked

  A. (ii) and (iii)

  B. (iii) and (iv)

  C. (i), (ii) and (iii)

  D. (iii) only

  Correct Answer: C

• Question 66:

  The third-shift Administrator was updating Security Management Server Access settings in Global Properties and testing. He managed to lock himself out of his account. How can you unlock this account?

  A. Delete the file sdmin.lock in the Security Management Server directory $PWDIR/tmp/

  B. The fwn lock_admin u from Security Management Server command line

  C. Type fwn unlock_admin u from the Security Gateway command line

  D. Type fwn unlock_admin from the Security Management Server Command line

  Correct Answer: B

• Question 67:

  What command syntax would you use to turn on PDP logging in a distributed environment?

  A. pdp tracker on

  B. pdp log = l

  C. pdp track = l

  D. pdp logging on

  Correct Answer: A

• Question 68:

  Once an Access Role is configured, in which Rule Bases can it be implemented?

  A. DLP

  B. Mobile Access

  C. Firewall

  D. IPS

  Correct Answer: C

• Question 69:

  Identity Awareness is implemented to manage access to protected resources based on a user's _____________.

  A. Location

  B. Application requirement

  C. Computer MAC address

  D. Time of connection

  Correct Answer: B

• Question 70:

  Which of the following is NOT defined by an Access Role object?

  A. Source Network

  B. Source Logging and/or Alerting Rule

  C. Source Machine

  D. Source Server

  Correct Answer: B