156-215.71 Exam Questions

In a distributed management environment, the administrator has removed all default check boxes from the Policy > Global Properties > Firewall tab. In order for the Security Gateway...

You need to plan the company's new security system. The company needs a very high level of security and also high performance and high throughput for their applications. You need t...

Once installed, the R71 kernel resides directly below which layer of the OSI model? Note: Application is the top and Physical is the bottom of the IP stack.

How can you reset the password of the Security Administrator that was created during initial installation of the Security Management Server on SecurePlatform?

The Administrator of the London Security Gateway has just installed the Security Gateway and Management Server. He has not changed any default settings. As he tries to configure th...

When restoring R71 using the upgrade_ import command, which of the following items is NOT restored?

Which operating systems are supported by a Check Point Security Gateway on an open server?

Your network is experiencing connectivity problems and you want to verify if routing problems are present. You need to disable the firewall process but still allow routing to pass...

ALL of the following options are provided by the SecurePlatform sysconfig utility, EXCEPT:

Your company is running Security Management Server R71 on SecurePlatform, which has been migrated through each version starting from Check Point 4.1. How do you add a new administr...

The command fw fetch causes the:

Which of the following provides confidentiality services for data and messages in a Check Point VPN?

Of the following VPN Community options, which is most likely to provide a balance between IKE compatibility to VPN-capable devices (Check Point and non-Check Point) and preserving...

You wish to configure an IKE VPN between two R71 Security Gateways, to protect two networks. The network behind one Gateway is 10.15.0.0/16, and network 192.168.9.0/24 is behind th...

Your manager requires you to setup a VPN to a new business partner site. The administrator from the partner site gives you his VPN settings and you notice that he setup AES 128 for...

For VPN routing to succeed, what must be configured?

If Henry wanted to configure Perfect Forward Secrecy for his VPN tunnel, in which phase would he be configuring this?

You enable Automatic Static NAT on an internal host node object with a private IP address of 10.10.10.5, which is NATed into 216.216.216.5. (You use the default settings in Global...

Which command allows verification of the Security Policy name and install date on a Security Gateway?

Which answers are TRUE? Automatic Static NAT CANNOT be used when: (i) NAT decision is based on the destination port. (ii) Source and Destination IP both have to be translated. (iii...

When translation occurs using automatic Hide NAT, what also happens?

Which of the following statements BEST describes Check Point's Hide Network Address Translation method?

Which R71 feature or command allows Security Administrators to revert to earlier versions of the Security Policy without changing object configurations?

A Hide NAT rule has been created which includes a source address group often (10) networks and three (3) other group objects (containing 4, 5, and 6 host objects respectively). Ass...

A client has created a new Gateway object that will be managed at a remote location. When the client attempts to install the Security Policy to the new Gateway object, the object d...

You have configured a remote site Gateway that supports your boss's access from his home office using a DSL dialup connection. Everything worked fine yesterday, but today all conne...

A host on the Internet initiates traffic to the Static NAT IP of your Web server behind the Security Gateway. With the default settings in place for NAT, the initiating packet will...

When you use the Global Properties' default settings on R71, which type of traffic will be dropped if no explicit rule allows the traffic?

A Stealth rule is used to:

SmartView Tracker logs the following Security Administrator activities, EXCEPT:

You are working with three other Security Administrators. Which SmartConsole component can be used to monitor changes to rules or object properties made by the other administrators...

Which SmartView Tracker mode allows you to read the SMTP e-mail body sent from the Chief Executive Officer (CEO) of a company?

One of your remote Security Gateway's suddenly stops sending logs, and you cannot install the Security Policy on the Gateway. All other remote Security Gateways are logging normall...

Where can an administrator specify the notification action to be taken by the firewall in the event that available disk space drops below 15%?

Which R71 component displays the number of packets accepted, rejected, and dropped on a specific Security Gateway, in real time?

For which protocol is anti-virus not available?

For remote user authentication, which authentication scheme is NOT supported?

What happens to evaluation licenses during the license-upgrade process?

Which of the following statements about service contracts, i.e., Certificate, software subscription, or support contract, is FALSE? Check Point 156-215.71 Exam

All R71 Security Servers can perform authentication with the exception of one. Which of the Security Servers cannot perform authentication?

What is the difference between Standard and Specific Sign On methods?

Which column in the Rule Base is used to define authentication parameters?

Check Point 156-215.71 Exam Identify the ports to which the Client Authentication daemon listens by default.

If a Security Gateway enforces three protections, LDAP Injection, Malicious Code Protector, and Header Rejection, which Check Point license is required in SmartUpdate?

R71's INSPECT Engine inserts itself into the kernel between which two layers of the OSI model?

Your R71 primary Security Management Server is installed on SecurePlatform. You plan to schedule the Security Management Server to run fw logswitch automatically every 48 hours. Ho...

Which command is used to uninstall the Security Policy directly from the Security Gateway? Check Point 156-215.71 Exam

Which of these attributes would be critical for a site-to-site VPN?

What statement is true regarding Visitor Mode?

How does the Get Address button, found on the Host Node Object > General Properties page retrieve the address?