CheckPoint Check Point Certified Security Administrator R71 - 156-215.71 Exam Practice Test

A. CRL

B. S/MIME

C. IPsec

D. PKCS

A. Another administrator is currently connected to the Security Management Server with read/write permissions which impacts your ability to save custom log queries to the Security Management Server.

B. You do not have the explicit right to save a custom query in your administrator permission profile under SmartConsole customization

C. You do not have OS write permissions on the local SmartView Tracker PC in order to save the custom query locally

D. You have read-only rights to the Security Management Server database.

A. Highlight the suspicious connection in SmartView Tracker Active mode. Block it using Tools / Block Intruder menu. Observe in the Active mode that the suspicious connection is listed in this SmartView Tracker view as "dropped".

B. Highlight the suspicious connection in SmartView Tracker Log mode. Block it using Tools / Block Intruder menu. Observe in the Log mode that the suspicious connection does not appear again in this SmartView Tracker view.

C. Highlight the suspicious connection in SmartView Tracker > Log mode. Block it using Tools > Block Intruder menu. Observe in the Log mode that the suspicious connection does not appear again in this SmartView Tracker view.

D. Highlight the suspicious connection in SmartView Tracker Active mode. Block it using Tools / Block Intruder menu. Observe in the Active mode that the suspicious connection does not appear again in this SmartView Tracker view.

A. External-user group

B. A group with a generic user

C. LDAP group

D. All Users

A. Login to the firewall using SSH and run fwm, then select System Configuration and Domain Name Servers.

B. Login to the SmartDashboard, edit the firewall Gateway object, select the tab Interfaces, then Domain Name Servers.

C. Login to the firewall using SSH and run sysconfig, then select Domain Name Servers.

D. Login to the firewall using SSH and run cpconfig, then select Domain Name Servers.

A. Destination IP address and destination port

B. Source IP address and destination port

C. Destination IP address and destination port

D. Source IP address and source port

A. encrypted by the Community.

B. encrypted using SIC.

C. not encrypted, only authenticated.

D. encrypted using SIC and re-encrypted again by the Community regardless of VPN domain configuration.

A. Strong data encryption

B. Scalability to accommodate user groups

C. Strong authentication

D. Centralized management

A. As expert user, issue the command: # IP link set eth0 addr 00:0C:29:12:34:56

B. Edit the file /etc/sysconfig/netconf.c and put the new MAC address in the field (conf : (conns
:( conn :hwaddr ("00:0C:29:12:34:56")

C. Open the WebUI, select Network > Connections > eth0. Place the new MAC address in the field Physical Address, and press Apply to save the settings.

D. As expert user, issue these commands: # IP link set eth0 down # IP link set eth0 addr 00:0C:29:12:34:56 # IP link set eth0 up

A. The Gateway certificate will be revoked on the security management server and SIC will be reset on the Gateway

B. SIC will be reset on the Gateway only

C. The gateway certificate will be revoked on the security management server only

D. The gateway certificate on the gateway only

A. The Gateway must be configured to work with Visitor Mode.

B. The specific Security Gateway must be configured as a member of the Remote Access Community

C. To use Integrity Clientless Security (ICS), you must install the IC3 server or configuration tool.

D. There are distinctly separate access rules required for SecureClient users vs. SSL Network Extender users.

A. Conditional

B. Symmetric

C. Asymmetric

D. Sequential

A. Uniquely identify machines installed with Check Point software only. They have the same function as RSA Authentication Certificates.

B. Increase network security by securing administrative communication with a two-factor challenge response authentication.

C. Are for Security Gateways created during the Security Management Server installation.

D. Can be used for securing internal network communications between the Security Gateway and an OPSEC device.

A. Disable Diffie Hellman by using stronger certificate based key-derivation. Use AES-256 bit on all encrypted channels and add PFS to QuickMode. Use double encryption by implementing AH and ESP as protocols.

B. Use Diffie Hellman for key construction and pre-shared keys for Quick Mode. Choose SHA in Quick Mode and encrypt with AES. Use AH protocol. Switch to Aggressive Mode.

C. Use certificates for Phase 1, SHA for all hashes, AES for all encryption and PFS, and use ESP protocol.

D. When you need strong encryption, IPsec is not the best choice. SSL VPNs are a better choice.