156-215.71 Preparation Material For Best Results

Questions And Answers PDF

CheckPoint 156-215.71 Check Point Certified Security Administrator R71

Version: DEMO

http://www.TestWarrior.com/156-215.71-practice-exam.html

FOR 156-215.71 Candidates: We offer Two Products:  1st - We have Practice Tests Software with Actual Exam Questions  2nd - Questions and Answers in PDF Format.

Try a Free DEMO of these Exam Products via below Link:

http://www.TestWarrior.com/156-215.71-practice-exam.html

TestWarrior.com

1

Questions And Answers PDF

Question 1 Of the three mechanisms Check Point uses for controlling trafci which enables frewalls to incorporate layer 4 awareness in packet inspectonn A. IPS B. Packet fltering C. Stateful Inspecton D. Applicaton Intelligence

Aoswern C Question 2 Which of the following statements about Bridge mode is TRUEn A. When managing a Security Gateway in Bridge modei it is possible to use a bridge interface for Network Address Translaton.

B. Assuming a new installatoni bridge mode requires changing the existng IP routng of the network.

C. All ClusterXL modes are supported.

D. A bridge must be confgured with a pair of interfaces.

Aoswern D Question 3 Which SmartConsole component can Administrators use to track remote administratie actiitesn A. WebUI B. Eienta Reporter C. SmartView Monitor D. SmartView Tracker

Aoswern D Question 4 Which of the following statements is TRUE about management plug-insn A. The plug-in is a package installed on the Security Gateway.

B. A management plug-in interacts with a Security Management Serier to proiide new features and support for new products.

C. Using a plug-in ofers full central management only if special licensing is applied to specifc features of the plug-in.

D. Installing a management plug-in is just like an upgrade process. (It oierwrites existng components.)

TestWarrior.com

2

Questions And Answers PDF

Aoswern B Question 5 UDP packets are deliiered if they are _________.

A. A legal response to an allowed request on the inierse UDP ports and IP B. A Stateful ACK to a ialid SYN-SYN-/ACK on the inierse UDP ports and IP C. Reference in the SAM related Dynamic tables D. Bypassing the Kernel by the “forwarding layer� of clusterXL

Aoswern A Question 6 The Check Point Security Gateway's iirtual machine (kernel) exists between which two layers of the OSI modeln A. Session and Network layers B. Applicaton and Presentaton layers C. Physical and Datalink layers D. Network and Datalink layers

Aoswern D Question 7 The customer has a small Check Point installatoni which includes one Linux Enterprise 3.0 serier working as the SmartConsolei and a second serier running Windows 2003 as both Security Management Serier and Security Gateway. This is an example of a(n): A. Stand-Alone Installaton B. Distributed Installaton C. Hybrid Installaton D. Unsupported confguraton

Aoswern D Question 8 The customer has a small Check Point installaton which includes one Windows 2003 serier as the SmartConsole and a second serier running SecurePlatorm as both Security Management Serier and the Security Gateway. This is an example of a(n): A. Unsupported confguraton.

B. Hybrid Installaton.

C. Distributed Installaton.

D. Stand-Alone Installaton.

TestWarrior.com

3

Questions And Answers PDF

Aoswern D Question 9 The customer has a small Check Point installaton which includes one Windows XP workstaton as the SmartConsolei one Solaris serier working as Security Management Serieri and a third serier running SecurePlatorm as Security Gateway. This is an example of a(n): A. Stand-Alone Installaton.

B. Unsupported confguraton C. Distributed Installaton.

D. Hybrid Installaton.

Aoswern C Question 10 The customer has a small Check Point installaton which includes one Windows 2003 serier as SmartConsole and Security Management Serier with a second serier running SecurePlatorm as Security Gateway. This is an example of a(n): A. Hybrid Installaton.

B. Unsupported confguraton.

C. Distributed Installaton.

D. Stand-Alone Installaton.

Aoswern C Question 11 When doing a Stand-Alone Installatoni you would install the Security Management Serier with which other Check Point architecture componentn A. SecureClient B. Security Gateway C. SmartConsole D. Nonei Security Management Serier would be installed by itself

Aoswern B Question 12 You are a security architect and need to design a secure frewalli VPN and IPS soluton. Where would be the best place to install IPS in the topology if the internal network is already protectedn A. On the frewall itself to protect all connected networks centrally.

B. On each network segment separately.

C. On the LAN is enoughi the DMZ does not need to be protected.

TestWarrior.com

4

Questions And Answers PDF

D. In front of the frewall is enough.

Aoswern A Question 13 You are installing a Security Management Serier. Your security plan calls for three administrators for this partcular serier. How many can you create during installatonn A. Depends on the license installed on the Security Management Serier B. Only one with full access and one with read-only access C. One D. As many as you want

Aoswern C Question 14 During which step in the installaton process is it necessary to note the fngerprint for frst-tme ierifcatonn A. When establishing SIC between the Security Management Serier and the Gateway B. When confguring the Security Management Serier using cpconfg C. When confguring the Security Gateway object in SmartDashboard D. When confguring the Gateway in the WebUl

Aoswern B Question 15 How can you most quickly reset Secure Internal Communicatons (SIC) between a Security Management Serier and Security Gatewayn A. Run the command fwm sic-reset to initaliie the Internal Certfcate Authority (ICA) of the Security Management Serier. Then retype the actiaton key on the Security Gateway from SmartDashboard.

B. Use SmartDashboard to retype the actiaton key on the Security Gateway. This will automatcally Sync SIC to both the Security Management Serier and Gateway.

C. From cpconfg on the Gatewayi choose the Secure Internal Communicaton opton and retype the actiaton key. Nexti retype the same key in the Gateway object in SmartDashboard and reinitaliie Secure Internal Communicatons (SIC).

D. From the Security Management Serierâ&#x20AC;&#x2122;s command linei Type fw putkey â&#x20AC;&#x201C;p <shared key> < IP Address of security Gateway>.

Aoswern C Question 16 How can you recreate the account of the Security Administratori which was created during inital installaton of the Management Serier on SecurePlatormn

TestWarrior.com

5

Questions And Answers PDF

A. Launch cpconfg and delete the Administrator's account. Recreate the account with the same name.

B. Export the user database into an ASCII fle with fwm dbexport. Open this fle with an editori and delete the Administrator Account porton of the fle. You will be prompted to create a new account.

C. Type cpm -ai and proiide the existng Administrator's account name. Reset the Security Administrator's password.

D. Launch SmartDashboard in the User Management screeni and delete the cpconfg administrator.

Aoswern A Question 17 You are running the Security Gateway on SecurePlatorm and confgure SNX with default setngs.

The client fails to connect to the Security Gateway. What is wrongn A. The routng table on the client does not get modifed.

B. The client has Actie-X blocked.

C. The client is confgured incorrectly.

D. The SecurePlatorm Web User Interface is listening on port 443.

Aoswern D Question 18 When Jon frst installed the systemi he forgot to confgure DNS seriers on his Security Gateway. How could Jon confgure DNS seriers now that his Security Gateway is in productonn A. Login to the frewall using SSH and run cpconfgi then select Domain Name Seriers.

B. Login to the frewall using SSH and run fwmi then select System Confguraton and Domain Name Seriers.

C. Login to the SmartDashboardi edit the frewall Gateway objecti select the tab Interfacesi then Domain Name Seriers.

D. Login to the frewall using SSH and run sysconfgi then select Domain Name Seriers.

Aoswern D Question 19 Once installedi the R71 kernel resides directly below which layer of the OSI modeln Note: Applicaton is the top and Physical is the botom of the IP stack.

A. Network B. Transport C. Data Link D. Session

Aoswern A

TestWarrior.com

6

Questions And Answers PDF

Question 20 R71's INSPECT Engine inserts itself into the kernel between which two layers of the OSI modeln A. Presentaton and Applicaton B. Physical and Data C. Session and Transport D. Data and Network

Aoswern D Question 21 What would be the beneft of upgrading from SmartDefense to IPS R71n A. The SmartDefense is replaced by the technology of IPS-1.

B. The SmartDefense technology expands IPS-1 to IPS R71.

C. Completely rewriten engine proiides improied security performance and reportng.

D. There is no diference - IPS R71 is the new name.

Aoswern C Question 22 You need to completely reboot the Operatng System afer making which of the following changes on the Security Gatewayn i.e. the command cprestart is not sufcient.

A. 3 only B. 1i 2i 3i 4i and 5 C. 2i 3 only D. 3i 4i and 5 only

Aoswern C Question 23 The Security Gateway is installed on SecurePlatorm R71. The default port for the Web User Interface is _______.

A. TCP 18211 B. TCP 257 C. TCP 4433 D. TCP 443

Aoswern D Question 24

TestWarrior.com

7

Questions And Answers PDF

Your customer wishes to install the SmartConsole on a Windows system. What are the minimum hardware requirements for R71n Giie the BEST answer.

A. 500 MB Free disk space and 512 MB RAM B. 1 GB Free disk space and 512 MB RAM C. 1 GB Free disk space and 1 GB RAM D. 512 MB Free disk space and 1 GB RAM

Aoswern A

TestWarrior.com

8

Questions And Answers PDF

Thank You for Trying Our Product Visit Our Site to Purchase the Full Set of Actual 156-215.71 Exam Questions With Answers.

http://www.TestWarrior.com/156-215.71-practice-exam.html We Also Provide Practice Exam Software That Simulates Real Exam Environment And Has Many Self-Assessment Features. Download Free Product Demo From:

Download Free Product Demo from: http://www.TestWarrior.com/156-215.71-practice-exam.html

Check Out Our Customer Testimonials

TestWarrior.com

9