156-215.71 Exam Questions

Check Point 156-215.71 Exam You are the Security Administrator in a large company called ABC. A Check Point Firewall is installed and in use on SecurePlatform. You are concerned th...

You are a Security Administrator preparing to deploy a new HFA (Hotfix Accumulator) to ten Security Gateways at five geographically separate locations. What is the BEST method to i...

You want to generate a cpinfo file via CLI on a system running SecurePlatform. This will take about 40 minutes since the log files are also needed. What action do you need to take...

Which feature or command provides the easiest path for Security Administrators to revert to earlier versions of the same Security Policy and objects configuration?

Your Security Gateways are running near performance capacity and will get upgraded hardware next week. Which of the following would be MOST effective for quickly dropping all conne...

Which of the following statements about the Port Scanning feature of IPS is TRUE?

Certificates for Security Gateways are created during a simple initialization from______.

Reviews the following rules and note the Client Authentication Action properties screen, as shown below: Check Point 156-215.71 Exam After being authenticated by the Security Gatew...

A Web server behind the Security Gateway is set to Automatic Static NAT Client side NAT is enabled in the Global Properties. A client on the Internet initiates a session to the Web...

Which of the following statements about file-type recognition in Content Inspection is TRUE? Check Point 156-215.71 Exam

Which Security Gateway R71 configuration setting forces the Client Authentication authorization time-out to refresh, each time a new user is authenticated? The:

What information is found in the SmartView Tracker Management log?

When configuring objects in SmartMap, it helps if you________ the objects so that they may be used in a policy rule.

You have included the Cleanup Rule in your Rule Base. Where in the Rule Base should the Accept ICMP Requests implied rule have no effect?

Your organization's disaster recovery plan needs an update to the backup and restore section to reap the benefits of the new distributed R71 installation. Your plan must meet the f...

Your Rule Base includes a Client Authentication rule, using partial authentication and standard sign-on for HTTP, Telnet, and FTP services. The rule was working, until this morning...

Which SmartConsole component can Administrators use to track remote administrative activities?

Which of the following statements regarding SecureXL and CoreXL is TRUE?

Your perimeter Security Gateway's external IP is 200.200.200.3. Your network diagram shows: Required: Allow only network 192.168.10.0 and 192.168.20.0 to go out to the Internet, us...

During which step in the installation process is it necessary to note the fingerprint for first-time verification?

What's the difference between the SmartView Tracker Tool section in R71 and NGX R65?

Your organization has many Edge Gateways at various branch offices allowing users to access company resources. For security reasons, your organization's Security Policy requires al...

Several Security Policies can be used for different installation targets. The firewall protecting Human Resources' servers should have a unique Policy Package. These rules may only...

Examine the following Security Policy. What, if any, changes could be made to accommodate Rule 4?

After implementing Static Address Translation to allow Internet traffic to an internal Web Server on your DMZ, you notice that any NATed connections to that machine are being dropp...

What information is provided from the options in this screenshot? (i)Whether a SIC certificate was generated for the Gateway (ii)Whether the operating system is SecurePlatform or S...

Which type of R71 Security Server does not provide User Authentication? Check Point 156-215.71 Exam

Which of the following is true regarding configuration of clustering nodes?

Using the Backup and Restore operation on R71, it is possible to:

What directory in R71 contains all of the Rule Bases, objects, and the user database files?

Platforms IP290, IP390 and IP560 are flash-based, diskless platforms. And what do you have to Check Point 156-215.71 Exam do prior to upgrading their images to R71?

You have not performed software upgrade to NGX R71. You have upgraded your license and every time you try to run commands such as cplic print; cpstop, you receive all sort of error...

What two conditions must be met when you are manually adding CheckPoint appliances to an existing cluster?

When carrying out a backup operation on R71, you will have to backup which of the following files?

Which tool will you use prior to installation to reduce the risk of incompatibility with the deployment to R71? Check Point 156-215.71 Exam

In the RuleBase, which element determines what Firewall should do with a packet?

To distribute or upgrade a package, you must first add it to the Package Repository. You can add packages to the Package Repository from which of the following three locations?

How will you install a rule base? Choose the best answer.

How would you disable a rule? Check Point 156-215.71 Exam

Which of the options below best describes the difference between the Drop action and Reject action? ( assume TCP is specified in the service column of your rulebase)

Your company has headquarters in two countries: Toronto (Canada) and Washington (USA). Each headquarter has a number of branch offices. The branch offices only need to communicate...

The negotiation prior to the establishment of a VPN tunnel might result in the production of large packets. Some NAT devices may not fragment large packets correctly making the con...

How can you delete an automatic NAT rule? See the diagram if you choose wrong answer. Check Point 156-215.71 Exam

The SmartUpdate command line "cprinstall get" will: Check Point 156-215.71 Exam Check Point 156-215.71 Exam Check Point 156-215.71 Exam Check Point 156-215.71 Exam Check Point 156-...

You ran a certain SmartUpdate command line in order to find out the location of the product repository, and the result was "Current repository root is set to : /var/suroot/". What...

You use the cplic db_rm command to remove a license from the license repository on the Security Management server and receive an error message stating that only detached licenses c...

What is the difference between the commands cplic db_print and cplic print?

The SmartUpdate command line " cprinstall transfer" will:

What command prints the details of the Check Point licenses?

What will the command "d:\winnt\fw1\ng\bin] cppkg add C:\CPsuite-R71" achieve? Where d:\winnt\fw1\ng\bin is package-full-path?