156-215.71 Exam Questions

Static NAT connections, by default, translate on which inspection point of the firewall kernel?

You are about to test some rule and object changes suggested in an R71 news group. Which backup solution should you use to ensure the easiest restoration of your Security Policy to...

Which Check Point address translation method is necessary if you want to connect from a host on the Internet via HTTP to a server with a reserved (RFC 1918) IP address on your DMZ?

You receive a notification that long-lasting Telnet connections to a mainframe are dropped after an hour of inactivity. Reviewing SmartView Tracker shows the packet is dropped with...

After installing Security Gateway R71, you discover that one port on your Intel Quad NIC on the Security Gateway is not fetched by a Get Topology request. What is the most likely c...

Which of the following objects is a valid source in an authentication rule?

Which of these components does NOT require a Security Gateway R71 license?

The Administrator of the Tokyo Security Management Server cannot connect from his workstation in Osaka. Which of the following lists the BEST sequence of steps to troubleshoot this...

How many inspection capture points are shown in fw monitor?

Looking at an fw monitor capture in Wireshark, the initiating packet in Hide NAT translates on________.

Which of the following statements accurately describes the snapshot command?

What is a possible reason for the IKE failure shown in this screenshot? Check Point 156-215.71 Exam

Which statement is TRUE about implicit rules?

Which item below in a Security Policy would be enforced first?

Your main internal network 10.10.10.0/24 allows all traffic to the Internet using Hide NAT. You also have a small network 10.10.20.0/24 behind the internal router. You want to conf...

Review the rules in the graphic. Assume domain UDP is enabled in the implied rules. What happens when a user from the internal network tries to browse to the Internet using HTTP? T...

Over the weekend, an Administrator without access to SmartDashBoard installed a new R71 Security Gateway using SecurePlatform. You want to infirm communication between the Gateway...

What rules send log information to Dshield.org when Storm Center is configured?

Another administrator accidentally installed a Security Policy on the wrong firewall. Having done this, you are both locked out of the firewall that is called myfw1. What command w...

User Marc is requesting a Website while he is using a computer out of the net_singapore network. What is TRUE about his location restriction?

Which of the following R71 SmartView Tracker views will display a popup warning about performance implications on the Security Gateway?

Your shipping company uses a custom application to update the shipping distribution database. The custom application includes a service used only to notify remote sites that the di...

John is the Security Administrator in his company. He needs to maintain the highest level of security on the firewalls he manages. He is using Check Point R71. Does he need the IPS...

You are working with multiple Security Gateways that enforce a common set of rules. To minimize the number of policy packages, which one of the following would you choose to do?

You have just been hired as the Security Administrator for the Insure-It-All insurance company. Your manager gives you the following requirements for controlling DNS traffic: Requi...

MegaCorp's security infrastructure separates Security Gateways geographically. You must request a central license for one remote Security Gateway. How do you apply the license?

You have detected a possible intruder listed in SmartViews Transfer's active pane. What is the fastest method to block this intruder from accessing your network indefinitely? Check...

When a user selects to allow Hot-spot, SecureClient modifies the Desktop Security Policy and/or Hub Mode routing to enable Hot-spot registration. Which of the following is NOT true...

As a Security Administrator, you must refresh the Client Authentication authorization time-out every time a new user connection is authorized. How do you do this? Enable the Refres...

When using SecurePlatform, it might be necessary to temporarily change the MAC address of the interface eth 0 to 00:0C:29:12:34:56. After restarting the network the old MAC address...

vpn co. Which option must choose if you only want to clear phase 2 for a specific IP (gateway)?

Which of the following commands will completely remove the Security Policy from being enforced on a Security Gateway?

What happens when you select File / Export from the SmartView Tracker menu?

In which directory do you install the R71 pre-upgrade verifier on a SecurePlatform Security Management Server?

Which utility allows you to configure the DHCP service on SecurePlatform from the command line? Check Point 156-215.71 Exam

Each grocery store in a regional chain is protected by a Security Gateway. The information- technology audit department wants a report including: The name of the Security Policy in...

You are a Security Administrator who has installed Security Gateway R71 on your network. You need to allow a specific IP address ranger for a partner site to access your intranet W...

You are MegaCorp's Security Administrator. There are various network objects which must be NATed. Some of them use Automatic Hide NAT method, while others use the Automatic Static...

Your internal network is configured to be 10.1.1.0/24. This network is behind your perimeter R71 Gateway, which connections to your ISP provider. How do you configure the Gateway t...

A snapshot delivers a complete backup of SecurePlatform. The resulting file can be stored on servers or as a local file in /var/cpsnapshot/snapshots. How do you restore a local sna...

Which utility is necessary for reestablishing SIC?

A marketing firm's networking team is trying to troubleshoot user complaints regarding access to Check Point 156-215.71 Exam audio-streaming material from the Internet. The network...

Tom has been tasked to install Check Point R71 in a distributed deployment. Before Tom installs the systems this way, how many machines will he need if he does not include a SmartC...

You want to configure a mail alert for every time the policy is installed to a specific Gateway. Where would you configure this alert?

How do you control the maximum number of mail messages in a spool directory?

How can you view cpinfo on a SecurePlatform machine?

A Secure Policy has several databases. What configuration remains the same no matter which version is used?

Which of the following is NOT useful to verify whether or NOT a Security Policy is active on a Gateway?

You are the Security Administrator for Mega Corp. A Check Point firewall is installed and in use on s SecurePlatform. You have trouble configuring the Speed and duplex settings of...

Of the three mechanics CheckPoint uses for controlling traffic, which enables firewalls to incorporate layers 4 awareness in packet inspection?