CheckPoint Check Point Certified Security Administrator R71 - 156-215-71 FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

With deployment of SecureClient, you have defined in the policy that you allow traffic only to an encrypted domain. But when your mobile users move outside of your company, they often cannot use SecureClient because they have to register first (i.e. in Hotel or Conference rooms). How do you solve this problem?

A. Allow for unencrypted traffic B. Allow your users to turn off SecureClient C. Enable Hot Spot/Hotel Registration D. Allow traffic outside the encrypted domain

Discussion 0

Correct Answer: C Vote an answer

Question 2

External commands can be included in SmartView Tracker via the menu Tools / Custom Commands. The Security Management Server is running under SecurePlatform, and the GUI is on a system running Microsoft Windows. How do you run the command, traceroute on an IP address?

A. Go to the menu Tools / Custom Commands and configure the Windows command tracert.exe to the list. B. There is no possibility to expand the three pre-defined options Ping, Whois, and Nslookup. C. Go to the menu, Tools / Custom Commands and configure the Linux command traceroute to the list. D. Use the program GUIdbedit to add the command traceroute to the properties of the Security Management Server.

Discussion 0

Correct Answer: A Vote an answer

Question 3

The Check Point Security Gateway's virtual machine (kernel) exists between which two layers of the OSI model?

A. Application and Presentation layers B. Network and Datalink layers C. Session and Network layers D. Physical and Datalink layers

Discussion 0

Correct Answer: B Vote an answer

Question 4

What is the size of a hash produced by SHA-1?

A. 128 B. 160 C. 40 D. 56

Discussion 0

Correct Answer: B Vote an answer

Question 5

You want to establish a VPN, using certificates. Your VPN will exchange certificates with an external partner. Which of the following activities should you do first?

A. Create a new logical-server object to represent your partner's CA B. Manually import your partner's Certificate Revocation List. C. Exchange exported CA keys and use them to create a new server object to represent your partner's Certificate Authority (CA). D. Manually import your partner's Control List.

Discussion 0

Correct Answer: C Vote an answer

Question 6

If you run fw monitor without any parameters, what does the output display?

A. In /tmp/log/monitor - out B. In / var/log/monitor. out C. On the console D. In /var/adm/monitor. Out

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 7

Which R71 SmartConsole tool would you use to verify the installed Security Policy name on a Security Gateway?

A. SmartUpdate B. SmartView Monitor C. None, SmartConsole applications only communicate with the Security Management Server. D. SmartView Status

Discussion 0

Correct Answer: B Vote an answer

Question 8

Can you upgrade a clustered deployment with zero downtime?

A. Yes, this is the default setting. B. No, this is not possible. C. Yes, if you select the option zero downtime, it will keep one member active D. No, you must bring all gateways down.

Discussion 0

Correct Answer: C Vote an answer

Question 9

You have traveling salesmen connecting to your VPN community from all over the world. Which technology would you choose?

A. IPsec: It offers encryption, authentication, replay protection and all algorithms that are state of the art (AES) or that perform very well. It is native to many client operating systems, so setup can easily be scripted. B. IPsec: It allows complex setups that match any network situation available to the client, i.e. connection from a private customer network or various hotel networks. C. SSL VPN: It only requires HTTPS connections between client and server. These are most likely open from all networks, unlike IPsec, which uses protocols and ports which are blocked by many sites. D. SSL VPN: It has more secure and robust encryption schemes than IPsec.

Discussion 0

Correct Answer: C Vote an answer

Question 10

A company has disabled logging for some of the most commonly used Policy rules. This was to decrease load on the Security Management Server and to make tracking dropped connections easier. What action would you recommend to get reliable statistics about the network traffic using SmartReporter?

A. Configure Additional Logging on a separate log server. B. Network traffic cannot be analyzed when the Security Management Server has a high load. C. SmartReporter analyzes all network traffic, logged or not. D. Turn the field Track of each rule to LOG.

Discussion 0

Correct Answer: A Vote an answer

Question 11

Which OPSEC server can be used to prevent users from accessing certain Web sites?

A. UFP B. AMON C. CVP D. LEA

Discussion 0

Correct Answer: A Vote an answer

Question 12

Which operating systems are supported by a Check Point Security Gateway on an open server?

A. Microsoft Windows, Red Hat Enterprise Linux, Sun Solaris, IPSO B. Check Point SecurePlatform and Microsoft Windows C. Check Point SecurePlatform, IPSO, Sun Solaris, Microsoft Windows D. Sun Solaris, Red Hat Enterprise Linux, Check Point SecurePlatform, IPSO, Microsoft Windows

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 13

Which command displays the installed Security Gateway version?

A. tw printver B. cpstat -gw C. fw stat D. fw ver

Discussion 0

Correct Answer: D Vote an answer