156-215.71 Exam Questions

John currently administers a network using single CPU single core servers for the Security Gateways and is running R71. His company is now going to implement VOIP and needs more pe...

You are running a R71 Security Gateway on SecurePlatform. In case of a hardware failure, you have a server with the exact same hardware and firewall version installed. What backup...

Before upgrading SecurePlatform, you should create a backup. To save time, many administrators use the command backup. This creates a backup of the Check Point configuration as wel...

Where can you find the Check Point's SNMP MIB file?

Many companies have defined more than one administrator. To increase security, only one administrator should be able to install a Rule Base on a specific Firewall. How do you confi...

Check Point 156-215.71 Exam Which command enables IP forwarding on IPSO?

You want to create an ASCII formatted output file of the fw monitor command. What is the correct syntax to accomplish this task?

When you run the fw monitor -e "accept;" command, what type of traffic is captured?

The Get Address button, found on the Host Node Object / General Properties page, will retrieve what?

Anti-Spoofing is typically set up on which object type?

How can you activate the SNMP daemon on a Check Point Security Gateway?

Which of the below is the MOST correct process to reset SIC from SmartDashboard?

What are the two basic rules which should be used by all Security Administrators?

All of the following are Security Gateway control connections defined by default implied rules, EXCEPT:

Which rules are not applied on a first-match basis?

Installing a policy usually has no impact on currently existing connections. Which statement is TRUE?

You enable Hide NAT on the network object, 10.1.1.0 behind the Security Gateway's external interface. You browse to from host, 10.1.1.10 successfully. You enable a log on the rule...

NAT can NOT be configured on which of the following objects?

Which NAT option applicable for Automatic NAT applies to Manual NAT as well?

The fw monitor utility is used to troubleshoot which of the following problems?

Secure Internal Communications (SIC) is completely NAT-tolerant because it is based on:

In a Hide NAT connection outbound, which portion of the packet is modified?

Which of the following is a viable consideration when determining Rule Base order?

Which of the following is a viable consideration when determining Rule Base order?

When you add a resource object to a rule, which of the following occurs?

You are a Security Administrator using one Security Management Server managing three different firewalls. One of the firewalls does NOT show up in the dialog box when attempting to...

Your Security Management Server fails and does not reboot. One of your remote Security Gateways managed by the Security Management Server reboots. What occurs with the remote Gatew...

What information is found in the SmartView Tracker Management log?

What information is found in the SmartView Tracker Management log?

Where is the best place to find information about connections between two machines?

External commands can be included in SmartView Tracker via the menu Tools / Custom Commands. The Security Management Server is running under SecurePlatform, and the GUI is on a sys...

You want to display log entries containing information from a specific column in the SmartView Tracker. If you want to see ONLY those entries, what steps would you take?

A security audit has determined that your unpatched Web application server is accessing a SQL server. You believe that you have enabled the proper IPS setting but would like to ver...

Which SmartConsole tool would you use to see the last policy pushed in the audit log?

What are the results of the command: fw sam [Target IP Address]?

You are the Security Administrator for MegaCorp and are enjoying your holiday. One day, you receive a call that some connectivity problems have occurred. Before the holiday, you co...

In SmartDashboard, you configure 45 MB as the required free hard-disk space to accommodate logs. What can you do to keep old log files, when free space falls below 45 MB? Check Poi...

You are Security Administrator for a large call center. The management team is concerned that employees may be installing and attempting to use peer-to-peer file-sharing utilities,...

How do you configure an alert in SmartView Monitor?

True or False: SmartView Monitor can be used to create alerts on a specified Gateway.

Which R71 SmartConsole tool would you use to verify the installed Security Policy name on a Security Gateway?

Where can an administrator configure the notification action in the event of a policy install time change?

Where are custom queries stored in R71 SmartView Tracker?

How do you view a Security Administrator's activities with SmartConsole?

Where do you enable popup alerts for IPS settings that have detected suspicious activity?

The R71 fw monitor utility is used to troubleshoot which of the following problems? Check Point 156-215.71 Exam

You are the Security Administrator for MegaCorp. In order to see how efficient your firewall Rule Base is, you would like to see how often the particular rules match. Where can you...

A company has disabled logging for some of the most commonly used Policy rules. This was to decrease load on the Security Management Server and to make tracking dropped connections...

Which feature in R71 permits blocking specific IP addresses for a specified time period?

Your company enforces a strict change control policy. Which of the following would be MOST effective for quickly dropping an attacker's specific active connection? Check Point 156-...