CheckPoint Check Point Certified Security Administrator R75 - 156-215-75 FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

A security audit has determined that your unpatched Web application server is accessing a SQL server. Which IPS setting will allow the Security Gateway to prevent this error page from displaying information about the SQL server in your DMZ?

A. In web intelligence / HTTP Protocol Inspection, select the box Enforce Strict HTTP response parsing. B. In Web Intelligence / General / HTTP Protocol Inspection, enables ASCII only response headers. C. In Web Intelligence / Information Disclosure / Error Concealment D. In application intelligence / FingerPrint Scrambling / WEB Apps, Select the Scramble error message checkbox.

Discussion 0

Correct Answer: C Vote an answer

Question 2

If you experience unwanted traffic from a specific IP address, how can you stop it most quickly?

A. Create a SAM rule B. Configure a rule to block the address C. Activate an IPS protection D. Check anti-spoofing settings

Discussion 0

Correct Answer: A Vote an answer

Question 3

Which of the following objects is a valid source in an authentication rule?

A. Host@Any B. User@Network C. User_group@Network D. User@Any

Discussion 0

Correct Answer: C Vote an answer

Question 4

Which command is used to uninstall the Security Policy directly from the Security Gateway?

A. fw unloadlocal B. cpstop C. fwm unload.local D. fwm load <gtwynames-IP> NULL

Discussion 0

Correct Answer: A Vote an answer

Question 5

All R75 Security Servers can perform authentication with the exception of one. Which of the Security Servers cannot perform authentication?

A. RLOGIN B. HTTP C. FTP D. SMTP

Discussion 0

Correct Answer: D Vote an answer

Question 6

Public keys and digital certificates do NOT provide which of the following?

A. Nonrepudiation B. Availability C. Data integrity D. Authentication

Discussion 0

Correct Answer: B Vote an answer

Question 7

When you change an implicit rule's order from last to first in global properties, how do you make the change take effect?

A. Run fw fetch from the security gateway B. Reinstall the security policy C. Select install database from the policy menu D. Select save from the file menu

Discussion 0

Correct Answer: B Vote an answer

Question 8

Your company has two headquarters, one in London, and one in New York. Each office includes several branch offices. The branch offices need to communicate with the headquarters in their country, not with each other, and only the headquarters need to communicate directly. What is the BEST configuration for establishing VPN Communities for this company? VPN Communities comprised of:

A. Two star and one mesh Community: One star Community is set up for each site, with headquarters as the center of the Community and its branches as satellites. The mesh Community includes only New York and London Gateways. B. Three mesh Communities: One for London headquarters and its branches, one for New York headquarters and its branches, and one f;or London and New York headquarters. C. One star Community with the option to "mesh" the center of the star: New York and London Gateways added to the center of the star with the mesh canter Gateways option checked, all London branch offices defined m one satellite window, but all New York branch offices defined m another satellite window. D. Two mesh and one star Community One mesh Community is set up for each of the headquarters and its branch offices The star Community is configured with London as the center of the Community and New York is the satellite.

Discussion 0

Correct Answer: A Vote an answer

Question 9

You are the Security Administrator for MegaCorp. In order to see how efficient your firewall Rule Base is, you would like to see how often the particular rules match. Where can you see it? Give the BEST answer.

A. SmartReporter provides this information in the section Firewall Blade - Security / Rule Base Analysis with information concerning Top Matched Logged Rules. B. In the SmartView Tracker, if you activate the column Matching Rate. C. In SmartReporter, in the section Firewall Blade - Activity / Network Activity with information concerning Top Matched Logged Rules. D. It is not possible to see it directly. You can open SmartDashboard and select UserDefined in the Track column. Afterwards, you need to create your own program with an external counter.

Discussion 0

Correct Answer: A Vote an answer

Question 10

Which Client Authentication sign-on method requires the user to first authenticate via the User Authentication mechanism when logging in to a remote server with Telnet?

A. Manual Sign On B. Agent Automatic Sign On C. Standard Sign On D. Partially Automatic Sign On

Discussion 0

Correct Answer: D Vote an answer

Question 11

You want to configure a mail alert for every time the policy is installed to a specific Gateway. Where would you configure this alert?

A. In SmartView Monitor, select Gateway > Configure Thresholds. B. In SmartView Monitor, select Gateway > Configure Thresholds and in SmartDashboard Select Global Properties > Log and alerts > Alert Commands. C. In SmartDashboard, select Global Properties > Log and Alerts > Alert Commands. D. You cannot create a mail alert for Policy installation

Discussion 0

Correct Answer: B Vote an answer

Question 12

Phase 2 uses ___________, if not using Perfect Forward Secrecy.

A. Asymmetric B. Conditional C. Sequential D. Symmetric

Discussion 0

Correct Answer: D Vote an answer

Question 13

Certificates for Security Gateways are created during a simple initialization from ___________.

A. SmartUpdate B. The ICA management tool C. SmartDashboard D. Sysconfig

Discussion 0

Correct Answer: B Vote an answer