156-215.75 Exam Questions

Which Check Point address translation method is necessary if you want to connect from a host on the Internet via HTTP to a server with a reserved (RFC 1918) IP address on your DMZ?

You want to implement Static Destination NAT in order to provide external, Internet users access to an internal Web Server that has a reserved (RFC 1918) IP address. You have an un...

After implementing Static Address Translation to allow Internet traffic to an internal Web Server on your DMZ, you notice that any NATed connections to that machine are being dropp...

Which NAT option applicable for Automatic NAT applies to Manual NAT as well?

Your main internal network 10.10.10.0/24 allows all traffic to the Internet using Hide NAT. You also have a small network 10.10.20.0/24 behind the internal router. You want to conf...

You have three servers located in a DMZ, using private IP addresses. You want internal users from 10.10.10.x to access the DMZ servers by public IP addresses. Internal_net 10.10.10...

Gateway. The initiating traffic is an example of __________.

A host on the Internet initiates traffic to the Static NAT IP of your Web server behind the Security Gateway. With the default settings in place for NAT, the initiating packet will...

A Web server behind the Security Gateway is set to Automatic Static NAT. Client side NAT is not checked in the Global Properties. A client on the Internet initiates a session to th...

When translation occurs using automatic Hide NAT, what also happens?

The fw monitor utility is used to troubleshoot which of the following problems?

Check Point 156-215.75 Exam The fw monitor utility would be best to troubleshoot which of the following problems?

Looking at the SYN packets in the Wireshark output, select the statement that is true about NAT.

In SmartDashboard, Translate destination on client side is checked in Global Properties. When Network Address Translation is used:

Secure Internal Communications (SIC) is completely NAT-tolerant because it is based on:

Static NAT connections, by default, translate on which inspection point of the firewall kernel?

In a Hide NAT connection outbound, which portion of the packet is modified?

You are MegaCorp's Security Administrator. There are various network objects which must be NATed. Some of them use the Automatic Hide NAT method, while others use the Automatic Sta...

Which answers are TRUE? Automatic Static NAT CANNOT be used when:

In order to have full control, you decide to use Manual NAT entries instead of Automatic NAT rules. Which is of the following is NOT true?

After filtering a fw monitor trace by port and IP, a packet is displayed three times; in the i, I, and o inspection points, but not in the O inspection point. Which is the likely s...

A marketing firm's networking team is trying to troubleshoot user complaints regarding access to audio-streaming material from the Internet. The networking team asks you to check t...

Which statement below describes the most correct strategy for implementing a Rule Base?

Which of the following is a viable consideration when determining Rule Base order?

Which of the following is a viable consideration when determining Rule Base order?

Which of the following is a viable consideration when determining Rule Base order?

You would use the Hide Rule feature to:

When you add a resource object to a rule, which of the following occurs?

You are a Security Administrator using one Security Management Server managing three different firewalls. One of the firewalls does NOT show up in the dialog box when attempting to...

Your shipping company uses a custom application to update the shipping distribution database. The custom application includes a service used only to notify remote sites that the di...

The fw stat -l command includes all of the following except:

Which command allows verification of the Security Policy name and install date on a Security Gateway?

You have two rules, ten users, and two user groups in a Security Policy. You create database version 1 for this configuration. You then delete two existing users and add a new user...

Which feature or command provides the easiest path for Security Administrators to revert to earlier versions of the same Security Policy and objects configuration?

Your Security Management Server fails and does not reboot. One of your remote Security Gateways managed by the Security Management Server reboots. What occurs with the remote Gatew...

How can you configure an application to automatically launch on the Security Management Server when traffic is dropped or accepted by a rule in the Security Policy?

Which of the following is NOT useful to verify whether or NOT a Security Policy is active on a Gateway?

Of the following, what parameters will not be preserved when using Database Revision Control? 1) Simplified mode Rule Bases 2) Traditional mode Rule Bases 3) Secure Platform WebUI...

Which of the following describes the default behavior of an R75 Security Gateway?

When you use the Global Properties' default settings on R75, which type of traffic will be dropped if no explicit rule allows the traffic?

You have installed a R75 Security Gateway on SecurePlatform. To manage the Gateway from the enterprise Security Management Server, you create a new Gateway object and Security Poli...

Select the correct statement about Secure Internal Communications (SIC) Certificates. SIC Certificates:

John is the Security Administrator in his company. He installs a new R75 Security Management Server and a new R75 Gateway. He now wants to establish SIC between them. After enterin...

A _______ rule is used to prevent all traffic going to the R75 Security Gateway.

In a distributed management environment, the administrator has removed the default check from Accept Control Connections under the Policy / Global Properties / FireWall tab. In ord...

Your internal network is configured to be 10.1.1.0/24. This network is behind your perimeter R75 Gateway, which connections to your ISP provider. How do you configure the Gateway t...

Which specific R75 GUI would you use to add an address translation rule?

You are a Security Administrator who has installed Security Gateway R75 on your network. You need to allow a specific IP address range for a partner site to access your intranet We...

You enable Automatic Static NAT on an internal host node object with a private IP address of 10.10.10.5, which is NATed into 216.216.216.5. (You use the default settings in Global...

You have configured a remote site Gateway that supports your boss's access from his home office using a DSL dialup connection. Everything worked fine yesterday, but today all conne...