156-215.76 Exam Questions

Your company has two headquarters, one in London, and one in New York. Each office includes several branch offices. The branch offices need to communicate with the headquarters in...

Your company has two headquarters, one in London, one in New York. Each of the headquarters includes several branch offices. The branch offices only need to communicate with the he...

Match the terms with their definitions:

Which of these attributes would be critical for a site-to-site VPN?

Which of the following is NOT true for Clientless VPN?

You want to establish a VPN, using certificates. Your VPN will exchange certificates with an external partner. Which of the following activities should you do first?

Your company is still using traditional mode VPN configuration on all Gateways and policies. Your manager now requires you to migrate to a simplified VPN policy to benefit from the...

Your manager requires you to setup a VPN to a new business partner site. The administrator from the partner site gives you his VPN settings and you notice that he setup AES 128 for...

Why are certificates preferred over pre-shared keys in an IPsec VPN?

What is a possible reason for the IKE failure shown in this screenshot?

When using an encryption algorithm, which is generally considered the best encryption method?

Which do you configure to give remote access VPN users a local IP address?

You install and deploy GAiA with default settings. You allow Visitor Mode in the Gateway object's Remote Access properties and install policy; but SecureClient refuses to connect....

With deployment of SecureClient, you have defined in the policy that you allow traffic only to an encrypted domain. But when your mobile users move outside of your company, they of...

What statement is true regarding Visitor Mode?

When attempting to connect with SecureClient Mobile you get the following error message: The certificate provided is invalid. Please provide the username and password. What is the...

If you were NOT using IKE aggressive mode for your IPsec tunnel, how many packets would you see for normal Phase 1 exchange?

How many packets does the IKE exchange use for Phase 1 Main Mode?

How many packets does the IKE exchange use for Phase 1 Aggressive Mode?

Which of the following actions take place in IKE Phase 2 with Perfect Forward Secrecy disabled?

Which of the following commands can be used to remove site-to-site IPsec Security Association (SA)?

How many packets are required for IKE Phase 2?

Which of the following actions do NOT take place in IKE Phase 1?

When using vpn tu, which option must you choose if you only want to clear phase 2 for a specific IP (gateway)?

When using vpn tu, which option must you choose if you want to rebuild your VPN for a specific IP (gateway)?

Where is the fingerprint generated, based on the output display?

What happens if you select Web Server in the dialog box?

When configuring the Check Point Gateway network interfaces, you can define the direction as Internal or External. What does the option Interface leads to DMZ mean?

What happens when you open the Gateway object window Trusted Communication and press and confirm Reset?

As you review this Security Policy, what changes could you make to accommodate Rule 4?

You review this Security Policy because Rule 4 is inhibited. Which Rule is responsible?

Reviewing the Rule Base, you see that ________ is responsible for the installation failure.

Select the TRUE statements about the Rule Base shown? (1) HTTP traffic from webrome to websingapore will be encrypted. (2) HTTP traffic from websingapore to webrome will be encrypt...

Which rule is responsible for the installation failure?

Which rule is responsible for the installation failure?

You are troubleshooting NAT entries in SmartView Tracker. Which column do you check to view the new source IP?

You start to use SmartView Monitor to analyze the packet size distribution of your traffic. Unfortunately, you get the message: "There are no machines that contain Firewall Blade a...

Your customer, Mr. Smith needs access to other networks and should be able to use all services. Session authentication is not suitable. You select Client Authentication with HTTP....

Charles requests a Website while using a computer not in the net_singapore network. What is TRUE about his location restriction?

In the Rule Base displayed, user authentication in Rule 4 is configured as fully automatic. Eric is a member of the LDAP group, MSD_Group. What happens when Eric tries to connect t...

Review the rules. Assume domain UDP is enabled in the impled rules. What happens when a user from the internal network tries to browse to the internet using HTTP? The user:

Study the Rule base and Client Authentication Action properties screen - After being authenticated by the Security Gateway, when a user starts an HTTP connection to a Web site, the...

You have a mesh VPN Community configured to create a site-to-site VPN. Given the displayed VPN properties, what can you conclude about this community?

Which of the following are available SmartConsole clients which can be installed from the R76 Windows CD? Read all answers and select the most complete and valid list.

You manage a global network extending from your base in Chicago to Tokyo, Calcutta and Dallas. Management wants a report detailing the current software level of each Enterprise cla...

Your bank's distributed R76 installation has Security Gateways up for renewal. Which SmartConsole application will tell you which Security Gateways have licenses that will expire w...

When launching SmartDashboard, what information is required to log into R76?

Message digests use which of the following?

Which of the following is a hash algorithm?

Which of the following uses the same key to decrypt as it does to encrypt?