156-215.71 Exam Questions
574 real 156-215.71 exam questions with expert-verified answers and explanations. Page 5 of 12.
- Question #202
Anti-Spam status is monitored using which of the following tool?
- Question #203
User Monitor details window is shown in the diagram 1 of the SmartView Monitor. Which of the following information you would not get in the window? Check Point 156-215.71 Exam
- Question #204
The rule below shows the Encrypt rule in a Traditional Mode Rule Base. What is likely to be Simplified Mode equivalent if the if the connections originates at X and its destination...
- Question #205
SmartDirectory (LDAP) new features include which of the following? Select the all correct answers.
- Question #206
You are configuring IPS, Denial of Service - Teardrop section. Which of the following is true of Teardrop?
- Question #207
Check Point 156-215.71 Exam Which of the following command will you use to export users from the NGX user database?
- Question #208
The diagrams show your network and the encrypt rule. If the source and destination are inside the VPN Domain of the same gateway i.e. Source X is in Net_A and Destination Y is in N...
- Question #209
The main drawback to tunneling-mode encryption is:
- Question #210
259 or connect via HTTP at If SecureClient cannot download a new policy from any Policy Server, it will try again after a fixed interval. If the fixed interval is set to default, t...
- Question #211
Which of the following Security servers can perform authentication tasks but will not be able perform content security tasks?
- Question #212
Which of the following commands would you use to clear an IP- to- physical address translation table when using SecurePlatform? Check Point 156-215.71 Exam Check Point 156-215.71 E...
- Question #213
You are in SecurePlatform and want to configure a new virtual LAN. If the name of NIC card that host is 3C579 and the Vlan identifier is 10, what command would you use to achieve t...
- Question #214
What command will you use to configure network interfaces settings?
- Question #215
A user was initiating client authentication session by beginning a TELNET session on port 900. What do you think might be wrong?
- Question #216
Study the diagram and answer the question below. What type of client GUI is shown in the diagram? Check Point 156-215.71 Exam
- Question #217
SmartUpdate is the primary tool used for upgrading Check Point gateways. When upgrading your gateway, what feature will you choose if want to upgrade all packages installed on your...
- Question #218
The allowed Sources in the Location tab of the User Properties window specify that the user to whom a User Authentication rule is being applied is not allowed access from the sourc...
- Question #219
What services are supported by client authentication?
- Question #220
In what situation will you consider and deploy policy management conventions?
- Question #221
On the Anti-Spam & Mail tab of the SmartDashboard, you can configure which of the following:
- Question #222
Which of the following is true of Symmetric Encryption?
- Question #223
Your company was unable to obtain more than four legal internet IP addresses from your ISP, and as an administrator you decide to use a single IP address for internet access. What...
- Question #224
VPN routing provides a way of controlling how VPN traffic is directed. There are two methods for doing this. Which of these two methods will Route VPN traffic based on the encrypti...
- Question #225
Study the diagram and answer the question below. What rule would allow access from your local network using FTP service with User Authentication as a method of authentication?
- Question #226
Which of the following is true regarding SmartDirectory (LDAP) Groups? Select all the correct answers. Check Point 156-215.71 Exam
- Question #227
What will be the consequence of disabling TCP state check in the IPS tab? Check Point 156-215.71 Exam
- Question #228
You are responsible for the configuration of MegaCorp's Firewall you need to allow two NA rules to match a connection. Is it possible? Give the best answer
- Question #229
You administer a large, geographically distributed network. The Internet connection at a remote site failed during the weekend, and the Security Gateway logged locally for over 48...
- Question #230
Which of the following is NOT true for Clientless VPN?
- Question #231
A rule_______ is designed to log and drop nil other communication that does not match another rule.
- Question #232
You currently do not have a Check Point software subscription for one of your products. What will happen if you attempt to upgrade the license for this product?
- Question #233
Which could be an appropriate solution for assigning a unique office mode IP address to secure client users?
- Question #234
How are cached usernames and passwords cleared from the memory of a R71 Security Gateway?
- Question #235
When you use the Global Properties default settings on R71. Which type of traffic will be dropped?
- Question #236
URL Filtering Policy ran make exceptions for specific sites by being enforced?
- Question #237
You are the Security Administrate for university The University's FTP servers have old hardware and software. Certain FTP command causes the FTP servers to malfunction Upgrading th...
- Question #238
Spoofing is a method of:
- Question #239
You plan to migrate a Windows NG with Application Intelligence (AI) R55 SmartCener server to R71. You also plan to upgrade four VPN-1 pro Gateways at remote offices and one local V...
- Question #240
When john first installed the system, he forgets to configure DNS servers on the security Gateway. How could John configure DNS servers now that his security gateway is in producti...
- Question #241
You have an NGX R65 Gateway running on SecurePlatform. The Gateway also serves as a Policy Server. When you run patch add CD from the Security Gateway R71 CD-ROM, what does this co...
- Question #242
Which of the following explanations best describes the command fw logswitch [-h target] [+ | -] [oldlog]?
- Question #243
Fill in the blank: When you want to create a VPN community where all participating gateways are able to connect to each other, you need to set up a ___________ community.
- Question #244
NAT can be implemented on which of the following lists of objects?
- Question #245
Check Point 156-215.71 Exam When using an encryption algorithm, which is generally considered the best encryption method?
- Question #246
Central license management allows a Security Administrator to perform which of the following functions? 1) Check for expired licenses. 2) Sort licenses and view license properties...
- Question #247
Which SmartView Tracker selection would most effectively show who installed a Security Policy blocking all traffic from the corporate network?
- Question #248
Which authentication type permits five different sign-on methods in the authentication properties window?
- Question #249
Select the correct statement about Secure Internal Communication (SIC) Certificates, SIC certificates?
- Question #250
What is the syntax for uninstalling a package using newpkg?
- Question #251
Gateway. The initiating traffic is an example of __________.