156-215.71 Exam Questions
574 real 156-215.71 exam questions with expert-verified answers and explanations. Page 2 of 12.
- Question #51
Which antivirus scanning method does not work if the Gateway is connected as a node in proxy mode?
- Question #52
Which of the following is a CLI command for Security Gateway R71?
- Question #53
Check Point 156-215.71 Exam You are working with multiple Security Gateways that enforce an extensive number of rules. To simplify Security administration, which one of the followi...
- Question #54
The customer has a small Check Point installation which includes one Windows 2003 server as the Smart Console and a second server running secure Platform as both Security Managemen...
- Question #55
Which set of objects have an Authentication tab?
- Question #56
Which operating system is NOT supported by Endpoint Connect R71?
- Question #57
Security Servers can perform authentication tasks, but CANNOT perform content security tasks?
- Question #58
When launching SmartDashboard, what information is required to log into R71?
- Question #59
SmartView Tracker R71 consists of three different modes. They are
- Question #60
Can you upgrade a clustered deployment with zero downtime?
- Question #61
What action CANNOT be run from SmartUpdate R71?
- Question #62
When Jon first installed the system, he forgot to configure DNS servers on his Security Gateway. How could Jon configure DNS servers now that his Security Gateway is in production?
- Question #63
Using the out put below, what type of VPN is configured for fw-stlouis?
- Question #64
A clean up rule is used to:
- Question #65
Which Check Point address translation method allows an administrator to use fewer ISP-assigned IP addresses than the number of internal hosts requiring Internet connectivity?
- Question #66
Your bank's distributed R71 installation has Security Gateways up for renewal. Which SmartConsole application will tell you which Security Gateways have licenses that will expire w...
- Question #67
If you were NOT using IKE aggressive mode for your IPsec tunnel, how many packets would you see for normal Phase 1 exchange?
- Question #68Core R80 Architecture and Management
Identify the correct step performed by SmartUpdate to upgrade a remote Security Gateway. After selecting Packages Select / Add from CD, the:
SmartUpdateSecurity Gateway upgradePackage Repositoryremote upgrade - Question #69
You are reviving the security administrator activity for a bank and comparing it to the change log. How do you view Security Administrator activity?
- Question #70
You would use the Hide Rule feature to:
- Question #71
Which of the following methods will provide the most complete backup of an R71 configuration?
- Question #72
To monitor all traffic between a network and the internet on a Security Platform Gateway, what is the best utility to use?
- Question #73
Where are automatic NAT rules added to the Rule Base?
- Question #74
Which R71 SmartConsole tool would you use to verify the installed Security Policy name on a Security Gateway?
- Question #75
You are responsible for configuration of MegaCorp's Check Point Firewall. You need to allow two NAT rules to match a connection. Is it possible? Give the best answer
- Question #76
One of your licenses is set for an IP address no longer in use. What happens to this license during the licenser-upgrade process?
- Question #77
External commands can be included in SmartView Tracker via the menu Tools / Custom commands. The security management server is running under SecurePlatform, and the GUI is on a sys...
- Question #78
What is used to validate a digital certificate?
- Question #79
An internal router is sending UDP keep-alive packets that are being encapsulated with GRE and sent through your R70 Security Gateway to a partner site. A rule for GRE traffic is co...
- Question #80
Which do you configure to give remote access VPN users a local IP address?
- Question #81
You need to plan the company's new security system. The company needs a very high level of security and also high performance and high through put for their applications. You need...
- Question #82
Which can an administrator configure the notification action of a policy install time change?
- Question #83
You intend to upgrade a Check Point Gateway from R65 to R71. Prior to upgrading, you want to backup the Gateway should there be any problems with the upgrade. Which of the followin...
- Question #84
Which of the following describes the default behavior of an R71 Security Gateway?
- Question #85
Which R71 GUI would you use to see the number of packets accepted since the last policy install?
- Question #86
A digital signature:
- Question #87
Which of the following statements accurately describes the upgrade_export command?
- Question #88
What must a Security Administrator do to comply with a management requirement to log all traffic accepted through the perimeter Security gateway?
- Question #89
From the output below, where is the fingerprint generated?
- Question #90
Which of the following statements BEST describes Check Point's Hide Network Checkpoints Address Translation method?
- Question #91
How can you reset the password of the Security Administrator that was created during initial installation of the security management sever on Secure Platform? Check Point 156-215.7...
- Question #92
Match each of the following command to there correct function. Each command has one function only listed.
- Question #93
Which of the following statement about bridge mode is TRUE?
- Question #94
Beginning with R71 Software Blades was introduced. One of the Software Blades is the IPS Software Blade as a replacement for Smart Defense. When buyers are upgrading to a bundle, s...
- Question #95
What is the desired outcome when running the command op info - z -o cpinfo -out?
- Question #96
Which of the following are available SmartConsole clients which can be installed from the R71 windows CD? Read all answers and select the most complete and valid list.
- Question #97
Antivirus protection on a Check Point Gateway is available for all of the following protocols, EXCEPT:
- Question #98Advanced VPN Solutions
Message digests use which of the following?
message digestcryptographyhashing algorithmsVPN security - Question #99
The fw monitor utility would be best to troubleshoot which of the following problems?
- Question #100Network Address Translation (NAT)
You have three servers located in DMZ address. You want internal users from 10.10.10x10 to access the DMZ servers by public IP addresses. Internet.net 10.10.10xis configured for th...
Static NATmanual NAT rulesDMZ accessinternal network