nerdexam
Check_Point

156-215.80 · Question #279

As a Security Administrator, you must refresh the Client Authentication authorized time-out every time a new user connection is authorized. How do you do this? Enable the Refreshable Timeout setting:

The correct answer is C. in the Limit tab of the Client Authentication Action Properties screen. The Refreshable Timeout for Client Authentication is located in the Limit tab of the Client Authentication Action Properties, not in user or gateway objects.

User Management and Authentication

Question

As a Security Administrator, you must refresh the Client Authentication authorized time-out every time a new user connection is authorized. How do you do this? Enable the Refreshable Timeout setting:

Options

  • Ain the user object's Authentication screen.
  • Bin the Gateway object's Authentication screen.
  • Cin the Limit tab of the Client Authentication Action Properties screen.
  • Din the Global Properties Authentication screen.

How the community answered

(28 responses)
  • A
    4% (1)
  • B
    7% (2)
  • C
    86% (24)
  • D
    4% (1)

Why each option

The Refreshable Timeout for Client Authentication is located in the Limit tab of the Client Authentication Action Properties, not in user or gateway objects.

Ain the user object's Authentication screen.

The user object's Authentication screen configures the authentication scheme (e.g., Check Point Password, RADIUS) for a specific user, not session timeout refresh behavior.

Bin the Gateway object's Authentication screen.

The Gateway object's Authentication screen controls gateway-level authentication parameters and does not expose a Refreshable Timeout option specific to Client Authentication rules.

Cin the Limit tab of the Client Authentication Action Properties screen.Correct

The Refreshable Timeout option is specifically found in the Limit tab within the Client Authentication Action Properties screen of the rule. Enabling it causes the authorized timeout timer to reset each time a new connection from that user is authorized, effectively extending the session as long as the user remains active.

Din the Global Properties Authentication screen.

Global Properties Authentication screen defines system-wide default timeout values but does not contain the per-rule Refreshable Timeout toggle available in Client Authentication Action Properties.

Concept tested: Client Authentication refreshable timeout setting location

Source: https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_SecurityManagement_AdminGuide/Topics-SMAG/Client-Authentication.htm

Topics

#Client Authentication#refreshable timeout#authentication action#configuration

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 156-215.80 Practice