CheckPoint Check Point Certified Security Administrator - 156-215.77 Exam Practice Test
What type of traffic can be re-directed to the Captive Portal?
Correct Answer: D
Vote an answer
John Adams is an HR partner in the ACME organization. ACME IT wants to limit access to HR servers to a set of designated IP addresses to minimize malware infection and unauthorized access risks. Thus, the gateway policy permits access only from John's desktop which is assigned a static IP address 10.0.0.19.
He has received a new laptop and wants to access the HR Web Server from anywhere in the organization. The IT department gave the laptop a static IP address, but that limits him to operating it only from his desk. The current Rule Base contains a rule that lets John Adams access the HR Web Server from his laptop with a static IP (10.0.0.19).
He wants to move around the organization and continue to have access to the HR Web Server. To make this scenario work, the IT administrator:
1) Enables Identity Awareness on a gateway, selects AD Query as one of the Identity Sources, and installs the policy.
2) Adds an access role object to the Firewall Rule Base that lets John Adams access the HR Web Server from any machine and from any location and installs policy.
John plugged in his laptop to the network on a different network segment and was not able to connect to the HR Web server. What is the next BEST troubleshooting step?
He has received a new laptop and wants to access the HR Web Server from anywhere in the organization. The IT department gave the laptop a static IP address, but that limits him to operating it only from his desk. The current Rule Base contains a rule that lets John Adams access the HR Web Server from his laptop with a static IP (10.0.0.19).
He wants to move around the organization and continue to have access to the HR Web Server. To make this scenario work, the IT administrator:
1) Enables Identity Awareness on a gateway, selects AD Query as one of the Identity Sources, and installs the policy.
2) Adds an access role object to the Firewall Rule Base that lets John Adams access the HR Web Server from any machine and from any location and installs policy.
John plugged in his laptop to the network on a different network segment and was not able to connect to the HR Web server. What is the next BEST troubleshooting step?
Correct Answer: C
Vote an answer
Identify the correct step performed by SmartUpdate to upgrade a remote Security Gateway.
After selecting Packages > Distribute and Install Selected Package and choosing the target Gateway, the:
After selecting Packages > Distribute and Install Selected Package and choosing the target Gateway, the:
Correct Answer: C
Vote an answer
Which SmartConsole tool would you use to see the last policy pushed in the audit log?
Correct Answer: D
Vote an answer
Which of the following is NOT an option for internal network definition of Anti-spoofing?
Correct Answer: B
Vote an answer
In the Rule Base displayed, user authentication in Rule 4 is configured as fully automatic.
Eric is a member of the LDAP group, MSD_Group.
What happens when Eric tries to connect to a server on the Internet?
Eric is a member of the LDAP group, MSD_Group.
What happens when Eric tries to connect to a server on the Internet?
Correct Answer: A
Vote an answer
You are installing a Security Management Server. Your security plan calls for three administrators for this particular server. How many can you create during installation?
Correct Answer: A
Vote an answer
You have included the Cleanup Rule in your Rule Base. Where in the Rule Base should the Accept ICMP Requests implied rule have no effect?
Correct Answer: A
Vote an answer
Which of the following methods will provide the most complete backup of an R77 configuration?
Correct Answer: C
Vote an answer
A third-shift Security Administrator configured and installed a new Security Policy early this morning. When you arrive, he tells you that he has been receiving complaints that Internet access is very slow. You suspect the Security Gateway virtual memory might be the problem. Which SmartConsole component would you use to verify this?
Correct Answer: C
Vote an answer