Exam 1 - CCSA 156-215 v7

Frage 1 von 100

1

QUESTION 1
Which of the following authentication methods can be configured in the Identity Awareness setup wizard?

Wähle eine oder mehr der folgenden:

A. TACACS
B. Captive Portal
C. Check Point Password
D. Windows password

Erklärung

Frage 2 von 100

1

QUESTION 2
Which of the following authentication methods can be configured in the Identity Awareness setup wizard?

Wähle eine oder mehr der folgenden:

A. Check Point Password
B. TACACS
C. LDAP
D. Windows password

Erklärung

Frage 3 von 100

1

QUESTION 3
What gives administrators more flexibility when configuring Captive Portal instead of LDAP query for
Identity Awareness authentication?

Wähle eine oder mehr der folgenden:

A. Captive Portal is more secure than standard LDAP
B. Nothing, LDAP query is required when configuring Captive Portal
C. Captive Portal works with both configured users and guests
D. Captive Portal is more transparent to the user

Erklärung

Frage 4 von 100

1

QUESTION 4
How granular may an administrator filter an Access Role with identity awareness? Per:

Wähle eine oder mehr der folgenden:

A. Specific ICA Certificate
B. AD User
C. Radius Group
D. Windows Domain

Erklärung

Frage 5 von 100

1

QUESTION 5
Can you use Captive Portal with HTTPS?

Wähle eine oder mehr der folgenden:

A. No, it only works with FTP
B. No, it only works with FTP and HTTP
C. Yes
D. No, it only works with HTTP

Erklärung

Frage 6 von 100

1

QUESTION 6
Which of the following is NOT defined by an Access Role object?

Wähle eine oder mehr der folgenden:

A. Source Network
B. Source Machine
C. Source User
D. Source Server

Erklärung

Frage 7 von 100

1

QUESTION 7
In which Rule Base can you implement an Access Role?

Wähle eine oder mehr der folgenden:

A. DLP
B. Mobile Access
C. IPS
D. Firewall

Erklärung

Frage 8 von 100

1

QUESTION 8
Access Role objects define users, machines, and network locations as:

Wähle eine oder mehr der folgenden:

A. Credentialed objects
B. Linked objects
C. One object
D. Separate objects

Erklärung

Frage 9 von 100

1

QUESTION 9
Where do you verify that UserDirectory is enabled?

Wähle eine oder mehr der folgenden:

A. Verify that Security Gateway > General Properties > Authentication > Use UserDirectory (LDAP) for
Security Gateways is checked
B. Verify that Global Properties > Authentication > Use UserDirectory (LDAP) for Security Gateways is
checked
C. Verify that Security Gateway > General Properties > UserDirectory (LDAP) > Use UserDirectory (LDAP)
for Security Gateways is checked
D. Verify that Global Properties > UserDirectory (LDAP) > Use UserDirectory (LDAP) for Security
Gateways is checked

Erklärung

Frage 10 von 100

1

QUESTION 10
Which of the following statements is TRUE about management plug-ins?

Wähle eine oder mehr der folgenden:

A. A management plug-in interacts with a Security Management Server to provide new features and
support for new products
B. Installing a management plug-in is just like an upgrade process.
C. Using a plug-in offers full central management only if special licensing is applied to specific features of
the plug-in.
D. The plug-in is a package installed on the Security Gateway.

Erklärung

Frage 11 von 100

1

QUESTION 11
You are installing a Security Management Server. Your security plan calls for three administrators for this
particular server. How many can you create during installation?

Wähle eine oder mehr der folgenden:

A. One
B. Only one with full access and one with read-only access
C. As many as you want
D. Depends on the license installed on the Security Management Server

Erklärung

Frage 12 von 100

1

QUESTION 12
During which step in the installation process is it necessary to note the fingerprint for first-time verification?

Wähle eine oder mehr der folgenden:

A. When configuring the Gateway in the WebUI
B. When configuring the Security Management Server using cpconfig
C. When establishing SIC between the Security Management Server and the Gateway
D. When configuring the Security Gateway object in SmartDashboard

Erklärung

Frage 13 von 100

1

QUESTION 13
How can you most quickly reset Secure Internal Communications (SIC) between a Security Management
Server and Security Gateway?

Wähle eine oder mehr der folgenden:

A. From cpconfig on the Gateway, choose the Secure Internal Communication option and retype the
activation key. Next, retype the same key in the Gateway object in SmartDashboard and reinitialize
Secure Internal Communications (SIC).
B. Use SmartUpdate to retype the Security Gateway activation key. This will automatically sync SIC to both
the Security Management Server and Gateway.
C. From the Security Management Server's command line, type fw putkey -p <shared key> <IP Address of
Security Gateway>.
D. Run the command fwm sic_reset to reinitialize the Security Management Server Internal Certificate
Authority (ICA). Then retype the activation key on the Security Gateway from SmartDashboard.

Erklärung

Frage 14 von 100

1

QUESTION 14
How can you recreate the Security Administrator account, which was created during initial Management
Server installation on GAiA?

Wähle eine oder mehr der folgenden:

A. Export the user database into an ASCII file with fwm dbexport. Open this file with an editor, and delete
the Administrator Account portion of the file. You will be prompted to create a new account.
B. Type cpm -a, and provide the existing Administrator's account name. Reset the Security Administrator's
password.
C. Launch cpconfig and delete the Administrator's account. Recreate the account with the same name.
D. Launch SmartDashboard in the User Management screen, and delete the cpconfig administrator.

Erklärung

Frage 15 von 100

1

QUESTION 15
The London Security Gateway Administrator has just installed the Security Gateway and Management
Server. He has not changed any default settings. As he tries to configure the Gateway, he is unable to
connect.

Which troubleshooting suggestion will NOT help him?

Wähle eine oder mehr der folgenden:

A. Check if some intermediate network device has a wrong routing table entry, VLAN assignment, duplexmismatch,
or trunk issue.
B. Test the IP address assignment and routing settings of the Security Management Server, Gateway, and
console client.
C. Verify the SIC initialization.
D. Verify that the Rule Base explicitly allows management connections.

Erklärung

Frage 16 von 100

1

QUESTION 16
You need to completely reboot the Operating System after making which of the following changes on the
Security Gateway? (i.e. the command cprestart is not sufficient.)
1. Adding a hot-swappable NIC to the Operating System for the first time.
2. Uninstalling the R77 Power/UTM package.
3. Installing the R77 Power/UTM package.
4. Re-establishing SIC to the Security Management Server.
5. Doubling the maximum number of connections accepted by the Security Gateway.

Wähle eine oder mehr der folgenden:

A. 3 only
B. 1, 2, 3, 4, and 5
C. 2, 3 only
D. 3, 4, and 5 only

Erklärung

Frage 17 von 100

1

QUESTION 17
The Security Gateway is installed on GAiA R77 The default port for the Web User Interface is _______.

Wähle eine oder mehr der folgenden:

A. TCP 18211
B. TCP 443
C. TCP 4433
D. TCP 257

Erklärung

Frage 18 von 100

1

QUESTION 18
Over the weekend, an Administrator without access to SmartDashboard installed a new R77 Security
Gateway using GAiA. You want to confirm communication between the Gateway and the Management
Server by installing the Security Policy. What might prevent you from installing the Policy?

Wähle eine oder mehr der folgenden:

A. You have not established Secure Internal Communications (SIC) between the Security Gateway and
Management Server. You must initialize SIC on both the Security Gateway and the Management
Server.
B. You first need to run the command fw unloadlocal on the new Security Gateway.
C. You first need to initialize SIC in SmartUpdate.
D. You have not established Secure Internal Communications (SIC) between the Security Gateway and
Management Server. You must initialize SIC on the Security Management Server.

Erklärung

Frage 19 von 100

1

QUESTION 19
An Administrator without access to SmartDashboard installed a new IPSO-based R77 Security Gateway
over the weekend. He e-mailed you the SIC activation key. You want to confirm communication between
the Security Gateway and the Management Server by installing the Policy. What might prevent you from
installing the Policy?

Wähle eine oder mehr der folgenden:

A. An intermediate local Security Gateway does not allow a policy install through it to the remote new
Security Gateway appliance. Resolve by running the command fw unloadlocal on the local Security
Gateway.
B. You first need to run the command fw unloadlocal on the R77 Security Gateway appliance in order to
remove the restrictive default policy.
C. You first need to create a new Gateway object in SmartDashboard, establish SIC via the
Communication button, and define the Gateway's topology.
D. You have not established Secure Internal Communications (SIC) between the Security Gateway and
Management Server. You must initialize SIC on the Security Management Server.

Erklärung

Frage 20 von 100

1

QUESTION 20
How can you reset the Security Administrator password that was created during initial Security
Management Server installation on GAiA?

Wähle eine oder mehr der folgenden:

A. Launch SmartDashboard in the User Management screen, and edit the cpconfig administrator.
B. As expert user Type fwm -a, and provide the existing administrator's account name. Reset the Security
Administrator's password.
C. Type cpm -a, and provide the existing administrator's account name. Reset the Security Administrator's
password.
D. Export the user database into an ASCII file with fwm dbexport. Open this file with an editor, and delete
the Password portion of the file. Then log in to the account without a password. You will be prompted to
assign a new password.

Erklärung

Frage 21 von 100

1

QUESTION 21
You have configured SNX on the Security Gateway. The client connects to the Security Gateway and the
user enters the authentication credentials. What must happen after authentication that allows the client to
connect to the Security Gateway's VPN domain?

Wähle eine oder mehr der folgenden:

A. SNX modifies the routing table to forward VPN traffic to the Security Gateway.
B. An office mode address must be obtained by the client.
C. The SNX client application must be installed on the client.
D. Active-X must be allowed on the client.

Erklärung

Frage 22 von 100

1

QUESTION 22
The Tokyo Security Management Server Administrator cannot connect from his workstation in Osaka.
Which of the following lists the BEST sequence of steps to troubleshoot this issue?

Wähle eine oder mehr der folgenden:

A. Check for matching OS and product versions of the Security Management Server and the client. Then,
ping the Gateways to verify connectivity. If successful, scan the log files for any denied management
packets.
B. Verify basic network connectivity to the local Gateway, service provider, remote Gateway, remote
network and target machine. Then, test for firewall rules that deny management access to the target. If
successful, verify that pcosaka is a valid client IP address.
C. Check the allowed clients and users on the Security Management Server. If pcosaka and your user
account are valid, check for network problems. If there are no network related issues, this is likely to be
a problem with the server itself. Check for any patches and upgrades. If still unsuccessful, open a case
with Technical Support.
D. Call Tokyo to check if they can ping the Security Management Server locally. If so, login to sgtokyo,
verify management connectivity and Rule Base. If this looks okay, ask your provider if they have some
firewall rules that filters out your management traffic.

Erklärung

Frage 23 von 100

1

QUESTION 23
Where is the fingerprint generated, based on the output display?

Wähle eine oder mehr der folgenden:

A. SmartConsole
B. SmartUpdate
C. Security Management Server
D. SmartDashboard

Erklärung

Frage 24 von 100

1

QUESTION 24
Match the following commands to their correct function. Each command has one function only listed.
Exhibit:

Wähle eine oder mehr der folgenden:

A. C1>F6; C2>F4; C3>F2; C4>F5
B. C1>F2; C2>F1; C3>F6; C4>F4
C. C1>F2; C2>F4; C3>F1; C4>F5
D. C1>F4; C2>F6; C3>F3; C4>F2

Erklärung

Frage 25 von 100

1

QUESTION 25
Which command displays the installed Security Gateway version?

Wähle eine oder mehr der folgenden:

A. fw printver
B. fw ver
C. fw stat
D. cpstat -gw

Erklärung

Frage 26 von 100

1

QUESTION 26
Which command line interface utility allows the administrator to verify the Security Policy name and
timestamp currently installed on a firewall module?

Wähle eine oder mehr der folgenden:

A. cpstat fwd
B. fw ver
C. fw stat
D. fw ctl pstat

Erklärung

Frage 27 von 100

1

QUESTION 27
Suppose the Security Gateway hard drive fails and you are forced to rebuild it. You have a snapshot file
stored to a TFTP server and backups of your Security Management Server. What is the correct procedure
for rebuilding the Gateway quickly?

Wähle eine oder mehr der folgenden:

A. Reinstall the base operating system (i.e., GAiA). Configure the Gateway interface so that the Gateway
can communicate with the TFTP server. Revert to the stored snapshot image, and install the Security
Policy.
B. Run the command revert to restore the snapshot, establish SIC, and install the Policy.
C. Run the command revert to restore the snapshot. Reinstall any necessary Check Point products.
Establish SIC and install the Policy.
D. Reinstall the base operating system (i.e., GAia). Configure the Gateway interface so that the Gateway
can communicate with the TFTP server. Reinstall any necessary Check Point products and previously
applied hotfixes. Revert to the stored snapshot image, and install the Policy.

Erklärung

Frage 28 von 100

1

QUESTION 28
Which of the following statements accurately describes the command upgrade_export?

Wähle eine oder mehr der folgenden:

A. upgrade_export stores network-configuration data, objects, global properties, and the database
revisions prior to upgrading the Security Management Server.
B. Used primarily when upgrading the Security Management Server, upgrade_export stores all object
databases and the /conf directories for importing to a newer Security Gateway version.
C. upgrade_export is used when upgrading the Security Gateway, and allows certain files to be included or
excluded before exporting.
D. This command is no longer supported in GAiA.

Erklärung

Frage 29 von 100

1

QUESTION 29
What are you required to do before running the command upgrade_export?

Wähle eine oder mehr der folgenden:

A. Run a cpstop on the Security Gateway.
B. Run a cpstop on the Security Management Server.
C. Close all GUI clients.
D. Run cpconfig and set yourself up as a GUI client.

Erklärung

Frage 30 von 100

1

QUESTION 30
A snapshot delivers a complete GAiA backup. The resulting file can be stored on servers or as a local file in
/var/CPsnapshot/snapshots. How do you restore a local snapshot named MySnapshot.tgz?

Wähle eine oder mehr der folgenden:

A. Reboot the system and call the start menu. Select the option Snapshot Management, provide the Expert
password and select [L] for a restore from a local file. Then, provide the correct file name.
B. As expert user, type the command snapshot -r MySnapshot.tgz.
C. As expert user, type the command revert --file MySnapshot.tgz.
D. As expert user, type the command snapshot - R to restore from a local file. Then, provide the correct file
name.

Erklärung

Frage 31 von 100

1

QUESTION 31
What is the primary benefit of using the command upgrade_export over either backup or snapshot?

Wähle eine oder mehr der folgenden:

A. upgrade_export is operating system independent and can be used when backup or snapshot is not
available.
B. upgrade_export will back up routing tables, hosts files, and manual ARP configurations, where backup
and snapshot will not.
C. The commands backup and snapshot can take a long time to run whereas upgrade_export will take a
much shorter amount of time.
D. upgrade_export has an option to back up the system and SmartView Tracker logs while backup and
snapshot will not.

Erklärung

Frage 32 von 100

1

QUESTION 32
What is the syntax for uninstalling a package using newpkg?

Wähle eine oder mehr der folgenden:

A. -u <pathname of package>
B. -i <full pathname of package>
C. -S <pathname of package>
D. newpkg CANNOT be used to uninstall a package

Erklärung

Frage 33 von 100

1

QUESTION 33
Your primary Security Gateway runs on GAiA. What is the easiest way to back up your Security Gateway
R77 configuration, including routing and network configuration files?

Wähle eine oder mehr der folgenden:

A. Copying the directories $FWDIR/conf and $FWDIR/lib to another location.
B. Using the native GAiA backup utility from command line or in the Web based user interface.
C. Using the command upgrade_export.
D. Run the pre_upgrade_verifier and save the .tgz file to the directory /temp.

Erklärung

Frage 34 von 100

1

QUESTION 34
You need to back up the routing, interface, and DNS configuration information from your R77 GAiA Security
Gateway. Which backup-and-restore solution do you use?

Wähle eine oder mehr der folgenden:

A. Manual copies of the directory $FWDIR/conf
B. GAiA back up utilities
C. upgrade_export and upgrade_import commands
D. Database Revision Control

Erklärung

Frage 35 von 100

1

QUESTION 35
You are running a R77 Security Gateway on GAiA. In case of a hardware failure, you have a server with the
exact same hardware and firewall version installed. What back up method could be used to quickly put the
secondary firewall into production?

Wähle eine oder mehr der folgenden:

A. manual backup
B. upgrade_export
C. backup
D. snapshot

Erklärung

Frage 36 von 100

1

QUESTION 36
Before upgrading SecurePlatform to GAiA, you should create a backup. To save time, many administrators
use the command backup. This creates a backup of the Check Point configuration as well as the system
configuration.
An administrator has installed the latest HFA on the system for fixing traffic problem after creating a backup
file. There is a mistake in the very complex static routing configuration. The Check Point configuration has
not been changed. Can the administrator use a restore to fix the errors in static routing?

Wähle eine oder mehr der folgenden:

A. The restore is not possible because the backup file does not have the same build number (version).
B. The restore is done by selecting Snapshot Management from the boot menu of GAiA.
C. The restore can be done easily by the command restore and copying netconf.C from the production
environment.
D. A backup cannot be restored, because the binary files are missing.

Erklärung

Frage 37 von 100

1

QUESTION 37
Which operating systems are supported by a Check Point Security Gateway on an open server? Select
MOST complete list.

Wähle eine oder mehr der folgenden:

A. Sun Solaris, Red Hat Enterprise Linux, Check Point SecurePlatform, IPSO, Microsoft Windows
B. Check Point GAiA and SecurePlatform, and Microsoft Windows
C. Check Point GAiA, Microsoft Windows, Red Hat Enterprise Linux, Sun Solaris, IPSO
D. Check Point GAiA and SecurePlatform, IPSO, Sun Solaris, Microsoft Windows

Erklärung

Frage 38 von 100

1

QUESTION 38
You intend to upgrade a Check Point Gateway from R71 to R77. Prior to upgrading, you want to back up
the Gateway should there be any problems with the upgrade. Which of the following allows for the Gateway
configuration to be completely backed up into a manageable size in the least amount of time?

Wähle eine oder mehr der folgenden:

A. database revision
B. snapshot
C. upgrade_export
D. backup

Erklärung

Frage 39 von 100

1

QUESTION 39
An advantage of using central instead of local licensing is:

Wähle eine oder mehr der folgenden:

A. A license can be taken from one Security Management Server and given to another Security
Management Server.
B. Only one IP address is used for all licenses
C. The license must be renewed when changing the IP address of a Security Gateway. Each module's
license has a unique IP address.
D. Licenses are automatically attached to their respective Security Gateways.

Erklärung

Frage 40 von 100

1

QUESTION 40
You are running the license_upgrade tool on your GAiA Gateway. Which of the following can you NOT do
with the upgrade tool?

Wähle eine oder mehr der folgenden:

A. Perform the actual license-upgrade process
B. Simulate the license-upgrade process
C. View the licenses in the SmartUpdate License Repository
D. View the status of currently installed licenses

Erklärung

Frage 41 von 100

1

QUESTION 41
If a SmartUpdate upgrade or distribution operation fails on GAiA, how is the system recovered?

Wähle eine oder mehr der folgenden:

A. The Administrator can only revert to a previously created snapshot (if there is one) with the command
cprinstall snapshot <object name> <filename>.
B. The Administrator must reinstall the last version via the command cprinstall revert <object name> <file
name>.
C. The Administrator must remove the rpm packages manually, and re-attempt the upgrade.
D. GAiA will reboot and automatically revert to the last snapshot version prior to upgrade.

Erklärung

Frage 42 von 100

1

QUESTION 42
Why should the upgrade_export configuration file (.tgz) be deleted after you complete the import process?

Wähle eine oder mehr der folgenden:

A. SmartUpdate will start a new installation process if the machine is rebooted.
B. It will prevent a future successful upgrade_export since the .tgz file cannot be overwritten
C. It contains your security configuration, which could be exploited.
D. It will conflict with any future upgrades when using SmartUpdate.

Erklärung

Frage 43 von 100

1

QUESTION 43
Which of these components does NOT require a Security Gateway R77 license?

Wähle eine oder mehr der folgenden:

A. Security Management Server
B. Check Point Gateway
C. SmartConsole
D. SmartUpdate upgrading/patching

Erklärung

Frage 44 von 100

1

QUESTION 44
If a Security Gateway enforces three protections, LDAP Injection, Malicious Code Protector, and Header
Rejection, which Check Point license is required in SmartUpdate?

Wähle eine oder mehr der folgenden:

A. IPS
B. SSL: VPN
C. SmartEvent Intro
D. Data Loss Prevention

Erklärung

Frage 45 von 100

1

QUESTION 45
Central license management allows a Security Administrator to perform which of the following functions?
1. Check for expired licenses.
2. Sort licenses and view license properties.
3. Attach both R77 Central and Local licesnes to a remote module.
4. Delete both R77 Local Licenses and Central licenses from a remote module.
5. Add or remove a license to or from the license repository.
6. Attach and/or delete only R77 Central licenses to a remote module (not Local licenses).

Wähle eine oder mehr der folgenden:

A. 1, 2, 5, & 6
B. 2, 3, 4, & 5
C. 2, 5, & 6
D. 1, 2, 3, 4, & 5

Erklärung

Frage 46 von 100

1

QUESTION 46
Which command gives an overview of your installed licenses?

Wähle eine oder mehr der folgenden:

A. cplicense
B. showlic
C. fw lic print
D. cplic print

Erklärung

Frage 47 von 100

1

QUESTION 47
Where are SmartEvent licenses installed?

Wähle eine oder mehr der folgenden:

A. SmartEvent server
B. Log Server
C. Security Management Server
D. Security Gateway

Erklärung

Frage 48 von 100

1

QUESTION 48
ALL of the following options are provided by the GAiA sysconfig utility, EXCEPT:

Wähle eine oder mehr der folgenden:

A. Export setup
B. DHCP Server configuration
C. Time & Date
D. GUI Clients

Erklärung

Frage 49 von 100

1

QUESTION 49
Which of the following options is available with the GAiA cpconfig utility on a Management Server?

Wähle eine oder mehr der folgenden:

A. Export setup
B. DHCP Server configuration
C. GUI Clients
D. Time & Date

Erklärung

Frage 50 von 100

1

QUESTION 50
Which command would provide the most comprehensive diagnostic information to Check Point Technical
Support?

Wähle eine oder mehr der folgenden:

A. fw cpinfo
B. cpinfo -o date.cpinfo.txt
C. diag
D. cpstat - date.cpstat.txt

Erklärung

Frage 51 von 100

1

QUESTION 51
Which of the following statements accurately describes the command snapshot?

Wähle eine oder mehr der folgenden:

A. snapshot creates a full OS-level backup, including network-interface data, Check Point product
information, and configuration settings during an upgrade of a GAiA Security Gateway.
B. snapshot creates a Security Management Server full system-level backup on any OS.
C. snapshot stores only the system-configuration settings on the Gateway
D. A Gateway snapshot includes configuration settings and Check Point product information from the
remote Security Management Server.

Erklärung

Frage 52 von 100

1

QUESTION 52
How do you recover communications between your Security Management Server and Security Gateway if
you lock yourself out through a rule or policy mis-configuration?

Wähle eine oder mehr der folgenden:

A. fw unload policy
B. fw unloadlocal
C. fw delete all.all@localhost
D. fwm unloadlocal

Erklärung

Frage 53 von 100

1

QUESTION 53
How can you check whether IP forwarding is enabled on an IP Security Appliance?

Wähle eine oder mehr der folgenden:

A. clish -c show routing active enable
B. cat /proc/sys/net/ipv4/ip_forward
C. echo 1 > /proc/sys/net/ipv4/ip_forward
D. ipsofwd list

Erklärung

Frage 54 von 100

1

QUESTION 54
Which command allows you to view the contents of an R77 table?

Wähle eine oder mehr der folgenden:

A. fw tab -a <tablename>
B. fw tab -t <tablename>
C. fw tab -s <tablename>
D. fw tab -x <tablename>

Erklärung

Frage 55 von 100

1

QUESTION 55
Which of the following tools is used to generate a Security Gateway R77 configuration report?

Wähle eine oder mehr der folgenden:

A. fw cpinfo
B. infoCP
C. cpinfo
D. infoview

Erklärung

Frage 56 von 100

1

QUESTION 56
Which of the following is a CLI command for Security Gateway R77?

Wähle eine oder mehr der folgenden:

A. fw tab -u
B. fw shutdown
C. fw merge
D. fwm policy_print <policyname>

Erklärung

Frage 57 von 100

1

QUESTION 57
You are the Security Administrator for MegaCorp. A Check Point firewall is installed and in use on a
platform using GAiA. You have trouble configuring the speed and duplex settings of your Ethernet
interfaces. Which of the following commands can be used in CLISH to configure the speed and duplex
settings of an Ethernet interface and will survive a reboot? Give the BEST answer.

Wähle eine oder mehr der folgenden:

A. ethtool
B. set interface <options>
C. mii_tool
D. ifconfig -a

Erklärung

Frage 58 von 100

1

QUESTION 58
Which command enables IP forwarding on IPSO?

Wähle eine oder mehr der folgenden:

A. ipsofwd on admin
B. echo 0 > /proc/sys/net/ipv4/ip_forward
C. clish -c set routing active enable
D. echo 1 > /proc/sys/net/ipv4/ip_forward

Erklärung

Frage 59 von 100

1

QUESTION 59
Which of the following objects is a valid source in an authentication rule?

Wähle eine oder mehr der folgenden:

A. Host@Any
B. User@Network
C. User_group@Network
D. User@Any

Erklärung

Frage 60 von 100

1

QUESTION 60
You find that Users are not prompted for authentication when they access their Web servers, even though
you have created an HTTP rule via User Authentication. Choose the BEST reason why.

Wähle eine oder mehr der folgenden:

A. You checked the cache password on desktop option in Global Properties.
B. Another rule that accepts HTTP without authentication exists in the Rule Base.
C. You have forgotten to place the User Authentication Rule before the Stealth Rule
D. Users must use the SecuRemote Client, to use the User Authentication Rule

Erklärung

Frage 61 von 100

1

QUESTION 61
Which authentication type requires specifying a contact agent in the Rule Base?

Wähle eine oder mehr der folgenden:

A. Client Authentication with Partially Automatic Sign On
B. Client Authentication with Manual Sign On
C. User Authentication
D. Session Authentication

Erklärung

Frage 62 von 100

1

QUESTION 62
What is the difference between Standard and Specific Sign On methods?

Wähle eine oder mehr der folgenden:

A. Standard Sign On allows the user to be automatically authorized for all services that the rule allows.
Specific Sign On requires that the user re-authenticate for each service specifically defined in the
window Specific Action Properties.
B. Standard Sign On allows the user to be automatically authorized for all services that the rule allows, but
re-authenticate for each host to which he is trying to connect. Specific Sign On requires that the user reauthenticate
for each service.
C. Standard Sign On allows the user to be automatically authorized for all services that the rule allows.
Specific Sign On requires that the user re-authenticate for each service and each host to which he is
trying to connect
D. Standard Sign On requires the user to re-authenticate for each service and each host to which he is
trying to connect. Specific Sign On allows the user to sign on only to a specific IP address.

Erklärung

Frage 63 von 100

1

QUESTION 63
Which set of objects have an Authentication tab?

Wähle eine oder mehr der folgenden:

A. Templates, Users
B. Users, Networks
C. Users, User Groups
D. Networks, Hosts

Erklärung

Frage 64 von 100

1

QUESTION 64
How are cached usernames and passwords cleared from the memory of a R77 Security Gateway?

Wähle eine oder mehr der folgenden:

A. By using the Clear User Cache button in SmartDashboard.
B. Usernames and passwords only clear from memory after they time out.
C. By retrieving LDAP user information using the command fw fetchldap.
D. By installing a Security Policy.

Erklärung

Frage 65 von 100

1

QUESTION 65
Your users are defined in a Windows 2008 R2 Active Directory server. You must add LDAP users to a
Client Authentication rule. Which kind of user group do you need in the Client Authentication rule in R77?

Wähle eine oder mehr der folgenden:

A. External-user group
B. LDAP group
C. A group with a generic user
D. All Users

Erklärung

Frage 66 von 100

1

QUESTION 66
Assume you are a Security Administrator for ABCTech. You have allowed authenticated access to users
from Mkting_net to Finance_net. But in the user's properties, connections are only permitted within
Mkting_net. What is the BEST way to resolve this conflict?

Wähle eine oder mehr der folgenden:

A. Select Ignore Database in the Action Properties window.
B. Permit access to Finance_net.
C. Select Intersect with user database in the Action Properties window.
D. Select Intersect with user database or Ignore Database in the Action Properties window.

Erklärung

Frage 67 von 100

1

QUESTION 67
For remote user authentication, which authentication scheme is NOT supported?

Wähle eine oder mehr der folgenden:

A. Check Point Password
B. RADIUS
C. TACACS
D. SecurID

Erklärung

Frage 68 von 100

1

QUESTION 68
Review the rules.
Assume domain UDP is enabled in the impled rules.
What happens when a user from the internal network tries to browse to the internet using HTTP? The user:

Wähle eine oder mehr der folgenden:

A. can connect to the Internet successfully after being authenticated.
B. is prompted three times before connecting to the Internet successfully.
C. can go to the Internet after Telnetting to the client authentication daemon port 259.
D. can go to the Internet, without being prompted for authentication.

Erklärung

Frage 69 von 100

1

QUESTION 69
Study the Rule base and Client Authentication Action properties screen -
After being authenticated by the Security Gateway, when a user starts an HTTP connection to a Web site,
the user tries to FTP to another site using the command line. What happens to the user?

Wähle eine oder mehr der folgenden:

A. user is prompted for authentication by the Security Gateway again.
B. FTP data connection is dropped after the user is authenticated successfully.
C. user is prompted to authenticate from that FTP site only, and does not need to enter his username and
password for Client Authentication
D. FTP connection is dropped by Rule 2.

Erklärung

Frage 70 von 100

1

QUESTION 70
One of your remote Security Gateway's suddenly stops sending logs, and you cannot install the Security
Policy on the Gateway. All other remote Security Gateways are logging normally to the Security
Management Server, and Policy installation is not affected. When you click the Test SIC status button in the
problematic Gateway object, you receive an error message. What is the problem?

Wähle eine oder mehr der folgenden:

A. The remote Gateway's IP address has changed, which invalidates the SIC Certificate.
B. The time on the Security Management Server's clock has changed, which invalidates the remote
Gateway's Certificate.
C. The Internal Certificate Authority for the Security Management Server object has been removed from
objects_5_0.C.
D. There is no connection between the Security Management Server and the remote Gateway.
Rules or routing may block the connection.

Erklärung

Frage 71 von 100

1

QUESTION 71
What information is found in the SmartView Tracker Management log?

Wähle eine oder mehr der folgenden:

A. SIC revoke certificate event
B. Destination IP address
C. Most accessed Rule Base rule
D. Number of concurrent IKE negotiations

Erklärung

Frage 72 von 100

1

QUESTION 72
What information is found in the SmartView Tracker Management log?

Wähle eine oder mehr der folgenden:

A. Historical reports log
B. Policy rule modification date/time stamp
C. Destination IP address
D. Most accessed Rule Base rule

Erklärung

Frage 73 von 100

1

QUESTION 73
What information is found in the SmartView Tracker Management log?

Wähle eine oder mehr der folgenden:

A. Creation of an administrator using cpconfig
B. GAiA expert login event
C. FTP username authentication failure
D. Administrator SmartDashboard logout event

Erklärung

Frage 74 von 100

1

QUESTION 74
How do you use SmartView Monitor to compile traffic statistics for your company's Internet Web activity
during production hours?

Wähle eine oder mehr der folgenden:

A. Select Tunnels view, and generate a report on the statistics.
B. Configure a Suspicious Activity Rule which triggers an alert when HTTP traffic passes through the
Gateway.
C. Use Traffic settings and SmartView Monitor to generate a graph showing the total HTTP traffic for the
day.
D. View total packets passed through the Security Gateway.

Erklärung

Frage 75 von 100

1

QUESTION 75
What happens when you run the command. fw sam -J src [Source IP Address]?

Wähle eine oder mehr der folgenden:

A. Connections from the specified source are blocked without the need to change the Security Policy.
B. Connections to the specified target are blocked without the need to change the Security Policy.
C. Connections to and from the specified target are blocked without the need to change the Security
Policy.
D. Connections to and from the specified target are blocked with the need to change the Security Policy.

Erklärung

Frage 76 von 100

1

QUESTION 76
An internal router is sending UDP keep-alive packets that are being encapsulated with GRE and sent
through your R77 Security Gateway to a partner site. A rule for GRE traffic is configured for ACCEPT/LOG.
Although the keep-alive packets are being sent every minute, a search through the SmartView Tracker logs
for GRE traffic only shows one entry for the whole day (early in the morning after a Policy install).
Your partner site indicates they are successfully receiving the GRE encapsulated keep-alive packets on the
1-minute interval.
If GRE encapsulation is turned off on the router, SmartView Tracker shows a log entry for the UDP keepalive
packet every minute.
Which of the following is the BEST explanation for this behavior?

Wähle eine oder mehr der folgenden:

A. The setting Log does not capture this level of detail for GRE. Set the rule tracking action to Audit since
certain types of traffic can only be tracked this way.
B. The log unification process is using a LUUID (Log Unification Unique Identification) that has become
corrupt. Because it is encrypted, the R77 Security Gateway cannot distinguish between GRE sessions.
This is a known issue with GRE. Use IPSEC instead of the non-standard GRE protocol for
encapsulation.
C. The Log Server log unification process unifies all log entries from the Security Gateway on a specific
connection into only one log entry in the SmartView Tracker. GRE traffic has a 10 minute session
timeout, thus each keep-alive packet is considered part of the original logged connection at the
beginning of the day.
D. The Log Server is failing to log GRE traffic properly because it is VPN traffic. Disable all VPN
configuration to the partner site to enable proper logging.

Erklärung

Frage 77 von 100

1

QUESTION 77
Which port must be allowed to pass through enforcement points in order to allow packet logging to operate
correctly?

Wähle eine oder mehr der folgenden:

A. 514
B. 257
C. 256
D. 258

Erklärung

Frage 78 von 100

1

QUESTION 78
You are the Security Administrator for MegaCorp and would like to view network activity using
SmartReporter. You select a standard predefined report. As you can see here, you can select the london
Gateway.

Imag 01:

When you attempt to configure the Express Report, you are unable to select this Gateway.

imag02

What is the reason for this behavior? Give the BEST answer.

Wähle eine oder mehr der folgenden:

A. You must enable the Eventia Express Mode on the london Gateway.
B. You have the license for Eventia Reporter in Standard mode only.
C. You must enable the Express Mode inside Eventia Reporter.
D. You must enable Monitoring in the london Gateway object's General Properties.

Erklärung

Frage 79 von 100

1

QUESTION 79
In SmartView Tracker, which rule shows when a packet is dropped due to anti-spoofing?

Wähle eine oder mehr der folgenden:

A. Rule 0
B. Blank field under Rule Number
C. Rule 1
D. Cleanup Rule

Erklärung

Frage 80 von 100

1

QUESTION 80
A third-shift Security Administrator configured and installed a new Security Policy early this morning. When
you arrive, he tells you that he has been receiving complaints that Internet access is very slow. You suspect
the Security Gateway virtual memory might be the problem. Which SmartConsole component would you
use to verify this?

Wähle eine oder mehr der folgenden:

A. Eventia Analyzer
B. SmartView Tracker
C. SmartView Monitor
D. This information can only be viewed with the command fw ctl pstat from the CLI.

Erklärung

Frage 81 von 100

1

QUESTION 81
You find a suspicious connection from a problematic host. You decide that you want to block everything
from that whole network, not just the problematic host. You want to block this for an hour while you
investigate further, but you do not want to add any rules to the Rule Base. How do you achieve this?

Wähle eine oder mehr der folgenden:

A. Use dbedit to script the addition of a rule directly into the Rule Bases_5_0.fws configuration file.
B. Select Block intruder from the Tools menu in SmartView Tracker.
C. Create a Suspicious Activity Rule in SmartView Monitor.
D. Add a temporary rule using SmartDashboard and select hide rule.

Erklärung

Frage 82 von 100

1

QUESTION 82
In SmartDashboard, you configure 45 MB as the required free hard-disk space to accommodate logs. What
can you do to keep old log files, when free space falls below 45 MB?

Wähle eine oder mehr der folgenden:

A. Do nothing. Old logs are deleted, until free space is restored.
B. Use the command fwm logexport to export the old log files to another location.
C. Configure a script to run fw logswitch and SCP the output file to a separate file server.
D. Do nothing. The Security Management Server automatically copies old logs to a backup server before
purging.

Erklärung

Frage 83 von 100

1

QUESTION 83
How do you configure an alert in SmartView Monitor?

Wähle eine oder mehr der folgenden:

A. An alert cannot be configured in SmartView Monitor.
B. By choosing the Gateway, and Configure Thresholds.
C. By right-clicking on the Gateway, and selecting Properties.
D. By right-clicking on the Gateway, and selecting System Information

Erklärung

Frage 84 von 100

1

QUESTION 84
True or FalsE. SmartView Monitor can be used to create alerts on a specified Gateway.

Wähle eine oder mehr der folgenden:

A. True, by right-clicking on the Gateway and selecting Configure Thresholds.
B. True, by choosing the Gateway and selecting System Information.
C. False, an alert cannot be created for a specified Gateway.
D. False, alerts can only be set in SmartDashboard Global Properties.

Erklärung

Frage 85 von 100

1

QUESTION 85
Which R77 SmartConsole tool would you use to verify the installed Security Policy name on a Security
Gateway?

Wähle eine oder mehr der folgenden:

A. SmartView Monitor
B. SmartUpdate
C. SmartView Status
D. None, SmartConsole applications only communicate with the Security Management Server.

Erklärung

Frage 86 von 100

1

QUESTION 86
Which R77 GUI would you use to see the number of packets accepted since the last policy install?

Wähle eine oder mehr der folgenden:

A. SmartView Monitor
B. SmartView Tracker
C. SmartDashboard
D. SmartView Status

Erklärung

Frage 87 von 100

1

QUESTION 87
You are trying to save a custom log query in R77 SmartView Tracker, but getting the following error:
Could not save <query-name> (Error: Database is Read Only)
Which of the following is a likely explanation for this?

Wähle eine oder mehr der folgenden:

A. Another administrator is currently connected to the Security Management Server with read/write
permissions which impacts your ability to save custom log queries to the Security Management Server.
B. You do not have OS write permissions on the local SmartView Tracker PC in order to save the custom
query locally
C. You have read-only rights to the Security Management Server database.
D. You do not have the explicit right to save a custom query in your administrator permission profile under
SmartConsole customization.

Erklärung

Frage 88 von 100

1

QUESTION 88
The R77 fw monitor utility is used to troubleshoot which of the following problems?

Wähle eine oder mehr der folgenden:

A. Traffic issues
B. Log Consolidation Engine
C. User data base corruption
D. Phase two key negotiation

Erklärung

Frage 89 von 100

1

QUESTION 89
You are the Security Administrator for MegaCorp. In order to see how efficient your firewall Rule Base is,
you would like to see how often the particular rules match. Where can you see it? Give the BEST answer.

Wähle eine oder mehr der folgenden:

A. In the SmartView Tracker, if you activate the column Matching Rate.
B. In SmartReporter, in the section Firewall Blade - Activity > Network Activity with information concerning
Top Matched Logged Rules.
C. SmartReporter provides this information in the section Firewall Blade - Security > Rule Base Analysis
with information concerning Top Matched Logged Rules.
D. It is not possible to see it directly. You can open SmartDashboard and select UserDefined in the Track
column. Afterwards, you need to create your own program with an external counter.

Erklärung

Frage 90 von 100

1

QUESTION 90
A company has disabled logging for some of the most commonly used Policy rules. This was to decrease
load on the Security Management Server and to make tracking dropped connections
easier. What action would you recommend to get reliable statistics about the network traffic using
SmartReporter?

Wähle eine oder mehr der folgenden:

A. SmartReporter analyzes all network traffic, logged or not.
B. Network traffic cannot be analyzed when the Security Management Server has a high load.
C. Turn the field Track of each rule to LOG.
D. Configure Additional Logging on an additional log server.

Erklärung

Frage 91 von 100

1

QUESTION 91
What is a Consolidation Policy?

Wähle eine oder mehr der folgenden:

A. The collective name of the Security Policy, Address Translation, and IPS Policies.
B. The specific Policy written in SmartDashboard to configure which log data is stored in the
SmartReporter database.
C. The collective name of the logs generated by SmartReporter.
D. A global Policy used to share a common enforcement policy for multiple Security Gateways.

Erklärung

Frage 92 von 100

1

QUESTION 92
Which feature in R77 permits blocking specific IP addresses for a specified time period?

Wähle eine oder mehr der folgenden:

A. Suspicious Activity Monitoring
B. HTTP Methods
C. Local Interface Spoofing
D. Block Port Overflow

Erklärung

Frage 93 von 100

1

QUESTION 93
You find a suspicious FTP site trying to connect to one of your internal hosts. How do you block it in real
time and verify it is successfully blocked? Highlight the suspicious connection in SmartView Tracker:

Wähle eine oder mehr der folgenden:

A. Log mode. Block it using Tools > Block Intruder menu. Observe in the Log mode that the suspicious
connection does not appear again in this SmartView Tracker view.
B. Log mode. Block it using Tools > Block Intruder menu. Observe in the Log mode that the suspicious
connection is listed in this SmartView Tracker view as "dropped?.
C. Active mode. Block it using Tools > Block Intruder menu. Observe in the Active mode that the
suspicious connection does not appear again in this SmartView Tracker view.
D. Active mode. Block it using Tools > Block Intruder menu. Observe in the Active mode that the
suspicious connection is listed in this SmartView Tracker view as "dropped?.

Erklärung

Frage 94 von 100

1

QUESTION 94
Your Security Gateways are running near performance capacity and will get upgraded hardware next week.
Which of the following would be MOST effective for quickly dropping all connections from a specific
attacker's IP at a peak time of day?

Wähle eine oder mehr der folgenden:

A. Intrusion Detection System (IDS) Policy install
B. Change the Rule Base and install the Policy to all Security Gateways
C. SAM - Block Intruder feature of SmartView Tracker
D. SAM - Suspicious Activity Rules feature of SmartView Monitor

Erklärung

Frage 95 von 100

1

QUESTION 95
Your company enforces a strict change control policy. Which of the following would be MOST effective for
quickly dropping an attacker's specific active connection?

Wähle eine oder mehr der folgenden:

A. Change the Rule Base and install the Policy to all Security Gateways
B. Block Intruder feature of SmartView Tracker
C. Intrusion Detection System (IDS) Policy install
D. SAM - Suspicious Activity Rules feature of SmartView Monitor

Erklärung

Frage 96 von 100

1

QUESTION 96
______________ is an R77 component that displays the number of packets accepted, rejected, and
dropped on a specific Security Gateway, in real time.

Wähle eine oder mehr der folgenden:

A. SmartEvent
B. SmartView Status
C. SmartUpdate
D. SmartView Monitor

Erklärung

Frage 97 von 100

1

QUESTION 97
You have just installed your Gateway and want to analyze the packet size distribution of your traffic with
SmartView Monitor.

"There are no machines that contain Firewall Blade and SmartView Monitor."
What should you do to analyze the packet size distribution of your traffic? Give the BEST answer.

Wähle eine oder mehr der folgenden:

A. Purchase the SmartView Monitor license for your Security Management Server.
B. Enable Monitoring on your Security Management Server.
C. Purchase the SmartView Monitor license for your Security Gateway.
D. Enable Monitoring on your Security Gateway.

Erklärung

Frage 98 von 100

1

QUESTION 98
You want to configure a mail alert for every time the policy is installed to a specific Gateway.
Where would you configure this alert?

Wähle eine oder mehr der folgenden:

A. In SmartView Monitor, select Gateway > Configure Thresholds and in SmartDashboard select Global
Properties > Log and Alerts > Alert Commands
B. In SmartDashboard, select Global Properties > Log and Alerts > Alert Commands.
C. You cannot create a mail alert for Policy installation
D. In SmartView Monitor, select Gateway > Configure Thresholds.

Erklärung

Frage 99 von 100

1

QUESTION 99
Your boss wants you to closely monitor an employee suspected of transferring company secrets to the
competition. The IT department discovered the suspect installed a WinSCP client in order to use encrypted
communication. Which of the following methods is BEST to accomplish this task?

Wähle eine oder mehr der folgenden:

A. Use SmartView Tracker to follow his actions by filtering log entries that feature the WinSCP destination
port. Then, export the corresponding entries to a separate log file for documentation.
B. Use SmartDashboard to add a rule in the firewall Rule Base that matches his IP address, and those of
potential targets and suspicious protocols. Apply the alert action or customized messaging.
C. Watch his IP in SmartView Monitor by setting an alert action to any packet that matches your Rule Base
and his IP address for inbound and outbound traffic.
D. Send the suspect an email with a keylogging Trojan attached, to get direct information about his
wrongdoings.

Erklärung

Frage 100 von 100

1

QUESTION 100
You install and deploy GAiA with default settings. You allow Visitor Mode in the Gateway object's Remote
Access properties and install policy. What additional steps are required for this to function correctly?

Wähle eine oder mehr der folgenden:

A. You need to start SSL Network Extender first, then use Visitor Mode.
B. Set Visitor Mode in Policy > Global Properties > Remote-Access > VPN - Advanced.
C. Office mode is not configured.
D. The WebUI on GAiA runs on port 443 (HTTPS). When you configure Visitor Mode it cannot bind to
default port 443, because it's used by another program (WebUI). With multi-port no additional changes
are necessary.

	Erstellt von Gustavo Gonçalves vor fast 7 Jahre

Checkpoint

Exam 1 - CCSA 156-215 v7

Frage 1 von 100

QUESTION 1 Which of the following authentication methods can be configured in the Identity Awareness setup wizard?

Wähle eine oder mehr der folgenden:

Erklärung

Frage 2 von 100

QUESTION 2 Which of the following authentication methods can be configured in the Identity Awareness setup wizard?

Wähle eine oder mehr der folgenden:

Erklärung

Frage 3 von 100

QUESTION 3 What gives administrators more flexibility when configuring Captive Portal instead of LDAP query for Identity Awareness authentication?

Wähle eine oder mehr der folgenden:

Erklärung

Frage 4 von 100

QUESTION 4 How granular may an administrator filter an Access Role with identity awareness? Per:

Wähle eine oder mehr der folgenden:

Erklärung

Frage 5 von 100

QUESTION 5 Can you use Captive Portal with HTTPS?

Wähle eine oder mehr der folgenden:

Erklärung

Frage 6 von 100

QUESTION 6 Which of the following is NOT defined by an Access Role object?

Wähle eine oder mehr der folgenden:

Erklärung

Frage 7 von 100

QUESTION 7 In which Rule Base can you implement an Access Role?

Wähle eine oder mehr der folgenden:

Erklärung

Frage 8 von 100

QUESTION 8 Access Role objects define users, machines, and network locations as:

Wähle eine oder mehr der folgenden:

Erklärung

Frage 9 von 100

QUESTION 9 Where do you verify that UserDirectory is enabled?

Wähle eine oder mehr der folgenden:

Erklärung

Frage 10 von 100

QUESTION 10 Which of the following statements is TRUE about management plug-ins?

Wähle eine oder mehr der folgenden:

Erklärung

Frage 11 von 100

QUESTION 11 You are installing a Security Management Server. Your security plan calls for three administrators for this particular server. How many can you create during installation?

Wähle eine oder mehr der folgenden:

Erklärung

Frage 12 von 100

QUESTION 12 During which step in the installation process is it necessary to note the fingerprint for first-time verification?

Wähle eine oder mehr der folgenden:

Erklärung

Frage 13 von 100

QUESTION 13 How can you most quickly reset Secure Internal Communications (SIC) between a Security Management Server and Security Gateway?

Wähle eine oder mehr der folgenden:

Erklärung

Frage 14 von 100

QUESTION 14 How can you recreate the Security Administrator account, which was created during initial Management Server installation on GAiA?

Wähle eine oder mehr der folgenden:

Erklärung

Frage 15 von 100

QUESTION 15 The London Security Gateway Administrator has just installed the Security Gateway and Management Server. He has not changed any default settings. As he tries to configure the Gateway, he is unable to connect. Which troubleshooting suggestion will NOT help him?

Wähle eine oder mehr der folgenden:

Erklärung

Frage 16 von 100

Wähle eine oder mehr der folgenden:

Erklärung

Frage 17 von 100

QUESTION 17 The Security Gateway is installed on GAiA R77 The default port for the Web User Interface is _______.

Wähle eine oder mehr der folgenden:

Erklärung

Frage 18 von 100

QUESTION 18 Over the weekend, an Administrator without access to SmartDashboard installed a new R77 Security Gateway using GAiA. You want to confirm communication between the Gateway and the Management Server by installing the Security Policy. What might prevent you from installing the Policy?

Wähle eine oder mehr der folgenden:

Erklärung

Frage 19 von 100

Wähle eine oder mehr der folgenden:

Erklärung

Frage 20 von 100

QUESTION 20 How can you reset the Security Administrator password that was created during initial Security Management Server installation on GAiA?

Wähle eine oder mehr der folgenden:

Erklärung

QUESTION 1
Which of the following authentication methods can be configured in the Identity Awareness setup wizard?

QUESTION 2
Which of the following authentication methods can be configured in the Identity Awareness setup wizard?

QUESTION 3
What gives administrators more flexibility when configuring Captive Portal instead of LDAP query for
Identity Awareness authentication?

QUESTION 4
How granular may an administrator filter an Access Role with identity awareness? Per:

QUESTION 5
Can you use Captive Portal with HTTPS?

QUESTION 6
Which of the following is NOT defined by an Access Role object?

QUESTION 7
In which Rule Base can you implement an Access Role?

QUESTION 8
Access Role objects define users, machines, and network locations as:

QUESTION 9
Where do you verify that UserDirectory is enabled?

QUESTION 10
Which of the following statements is TRUE about management plug-ins?

QUESTION 11
You are installing a Security Management Server. Your security plan calls for three administrators for this
particular server. How many can you create during installation?

QUESTION 12
During which step in the installation process is it necessary to note the fingerprint for first-time verification?

QUESTION 13
How can you most quickly reset Secure Internal Communications (SIC) between a Security Management
Server and Security Gateway?

QUESTION 14
How can you recreate the Security Administrator account, which was created during initial Management
Server installation on GAiA?

QUESTION 15
The London Security Gateway Administrator has just installed the Security Gateway and Management
Server. He has not changed any default settings. As he tries to configure the Gateway, he is unable to
connect.

Which troubleshooting suggestion will NOT help him?

QUESTION 17
The Security Gateway is installed on GAiA R77 The default port for the Web User Interface is _______.

QUESTION 18
Over the weekend, an Administrator without access to SmartDashboard installed a new R77 Security
Gateway using GAiA. You want to confirm communication between the Gateway and the Management
Server by installing the Security Policy. What might prevent you from installing the Policy?

QUESTION 20
How can you reset the Security Administrator password that was created during initial Security
Management Server installation on GAiA?

QUESTION 21
You have configured SNX on the Security Gateway. The client connects to the Security Gateway and the
user enters the authentication credentials. What must happen after authentication that allows the client to
connect to the Security Gateway's VPN domain?

QUESTION 22
The Tokyo Security Management Server Administrator cannot connect from his workstation in Osaka.
Which of the following lists the BEST sequence of steps to troubleshoot this issue?

QUESTION 23
Where is the fingerprint generated, based on the output display?

QUESTION 24
Match the following commands to their correct function. Each command has one function only listed.
Exhibit:

QUESTION 25
Which command displays the installed Security Gateway version?

QUESTION 26
Which command line interface utility allows the administrator to verify the Security Policy name and
timestamp currently installed on a firewall module?

QUESTION 27
Suppose the Security Gateway hard drive fails and you are forced to rebuild it. You have a snapshot file
stored to a TFTP server and backups of your Security Management Server. What is the correct procedure
for rebuilding the Gateway quickly?

QUESTION 28
Which of the following statements accurately describes the command upgrade_export?

QUESTION 29
What are you required to do before running the command upgrade_export?

QUESTION 30
A snapshot delivers a complete GAiA backup. The resulting file can be stored on servers or as a local file in
/var/CPsnapshot/snapshots. How do you restore a local snapshot named MySnapshot.tgz?

QUESTION 31
What is the primary benefit of using the command upgrade_export over either backup or snapshot?

QUESTION 32
What is the syntax for uninstalling a package using newpkg?

QUESTION 33
Your primary Security Gateway runs on GAiA. What is the easiest way to back up your Security Gateway
R77 configuration, including routing and network configuration files?

QUESTION 34
You need to back up the routing, interface, and DNS configuration information from your R77 GAiA Security
Gateway. Which backup-and-restore solution do you use?

QUESTION 35
You are running a R77 Security Gateway on GAiA. In case of a hardware failure, you have a server with the
exact same hardware and firewall version installed. What back up method could be used to quickly put the
secondary firewall into production?

QUESTION 37
Which operating systems are supported by a Check Point Security Gateway on an open server? Select
MOST complete list.