156-215.71 Exam Questions
574 real 156-215.71 exam questions with expert-verified answers and explanations. Page 2 of 12.
- Question #51
Which antivirus scanning method does not work if the Gateway is connected as a node in proxy mode?
- Question #52
Which of the following is a CLI command for Security Gateway R71?
- Question #53
Check Point 156-215.71 Exam You are working with multiple Security Gateways that enforce an extensive number of rules. To simplify Security administration, which one of the followi...
- Question #54
The customer has a small Check Point installation which includes one Windows 2003 server as the Smart Console and a second server running secure Platform as both Security Managemen...
- Question #55
Which set of objects have an Authentication tab?
- Question #56
Which operating system is NOT supported by Endpoint Connect R71?
- Question #57
Security Servers can perform authentication tasks, but CANNOT perform content security tasks?
- Question #58
When launching SmartDashboard, what information is required to log into R71?
- Question #59
SmartView Tracker R71 consists of three different modes. They are
- Question #60
Can you upgrade a clustered deployment with zero downtime?
- Question #61
What action CANNOT be run from SmartUpdate R71?
- Question #62
When Jon first installed the system, he forgot to configure DNS servers on his Security Gateway. How could Jon configure DNS servers now that his Security Gateway is in production?
- Question #63
Using the out put below, what type of VPN is configured for fw-stlouis?
- Question #64
A clean up rule is used to:
- Question #65
Which Check Point address translation method allows an administrator to use fewer ISP-assigned IP addresses than the number of internal hosts requiring Internet connectivity?
- Question #66
Your bank's distributed R71 installation has Security Gateways up for renewal. Which SmartConsole application will tell you which Security Gateways have licenses that will expire w...
- Question #67
If you were NOT using IKE aggressive mode for your IPsec tunnel, how many packets would you see for normal Phase 1 exchange?
- Question #68
Identify the correct step performed by SmartUpdate to upgrade a remote Security Gateway. After selecting Packages Select / Add from CD, the:
- Question #69
You are reviving the security administrator activity for a bank and comparing it to the change log. How do you view Security Administrator activity?
- Question #70
You would use the Hide Rule feature to:
- Question #71
Which of the following methods will provide the most complete backup of an R71 configuration?
- Question #72
To monitor all traffic between a network and the internet on a Security Platform Gateway, what is the best utility to use?
- Question #73
Where are automatic NAT rules added to the Rule Base?
- Question #74
Which R71 SmartConsole tool would you use to verify the installed Security Policy name on a Security Gateway?
- Question #75
You are responsible for configuration of MegaCorp's Check Point Firewall. You need to allow two NAT rules to match a connection. Is it possible? Give the best answer
- Question #76
One of your licenses is set for an IP address no longer in use. What happens to this license during the licenser-upgrade process?
- Question #77
External commands can be included in SmartView Tracker via the menu Tools / Custom commands. The security management server is running under SecurePlatform, and the GUI is on a sys...
- Question #78
What is used to validate a digital certificate?
- Question #79
An internal router is sending UDP keep-alive packets that are being encapsulated with GRE and sent through your R70 Security Gateway to a partner site. A rule for GRE traffic is co...
- Question #80
Which do you configure to give remote access VPN users a local IP address?
- Question #81
You need to plan the company's new security system. The company needs a very high level of security and also high performance and high through put for their applications. You need...
- Question #82
Which can an administrator configure the notification action of a policy install time change?
- Question #83
You intend to upgrade a Check Point Gateway from R65 to R71. Prior to upgrading, you want to backup the Gateway should there be any problems with the upgrade. Which of the followin...
- Question #84
Which of the following describes the default behavior of an R71 Security Gateway?
- Question #85
Which R71 GUI would you use to see the number of packets accepted since the last policy install?
- Question #86
A digital signature:
- Question #87
Which of the following statements accurately describes the upgrade_export command?
- Question #88
What must a Security Administrator do to comply with a management requirement to log all traffic accepted through the perimeter Security gateway?
- Question #89
From the output below, where is the fingerprint generated?
- Question #90
Which of the following statements BEST describes Check Point's Hide Network Checkpoints Address Translation method?
- Question #91
How can you reset the password of the Security Administrator that was created during initial installation of the security management sever on Secure Platform? Check Point 156-215.7...
- Question #92
Match each of the following command to there correct function. Each command has one function only listed.
- Question #93
Which of the following statement about bridge mode is TRUE?
- Question #94
Beginning with R71 Software Blades was introduced. One of the Software Blades is the IPS Software Blade as a replacement for Smart Defense. When buyers are upgrading to a bundle, s...
- Question #95
What is the desired outcome when running the command op info - z -o cpinfo -out?
- Question #96
Which of the following are available SmartConsole clients which can be installed from the R71 windows CD? Read all answers and select the most complete and valid list.
- Question #97
Antivirus protection on a Check Point Gateway is available for all of the following protocols, EXCEPT:
- Question #98
Message digests use which of the following?
- Question #99
The fw monitor utility would be best to troubleshoot which of the following problems?
- Question #100
You have three servers located in DMZ address. You want internal users from 10.10.10x10 to access the DMZ servers by public IP addresses. Internet.net 10.10.10xis configured for th...