CheckPoint Check Point Certified Security Administrator R71

QUESTION NO: 1
Identify the correct step performed by SmartUpdate to upgrade a remote Security Gateway. After selecting Packages Select / Add from CD, the:

A. selected package is copied to the Package Repository on the Security Management Server. B. entire contents of the CD-ROM are copied to the Package Repository on the Security Management Server C. selected package is copied to the packages directory on the selected remote Security Gateway D. entire contents of the CD-ROM arc copied to the packages directory on the selected remote Security Gateway

Correct Answer: A

QUESTION NO: 2
Antivirus protection on a Check Point Gateway is available for all of the following protocols, EXCEPT:

A. SMTP B. TELNET C. FTP D. HTTP

Correct Answer: B

QUESTION NO: 3
MegaCorp's security infrastructure separates Security Gateways geographically. You must request a central license for one remote Security Gateway. How do you apply the license?

A. Using the remote Gateway's IP address and applying the license locally with the cplic put command. B. Using your Security Management Server's IP address, and attaching the license to the remote Gateway via SmartUpdate. C. Using each of the Gateways' IP addresses, and applying the license on the Security Management Server with the cprlic put command. D. Using the remote Gateway's IP address, and attaching the license to the remote Gateway via SmartUpdate.

Correct Answer: B

QUESTION NO: 4
Which of the following statements about file-type recognition in Content Inspection is TRUE?

A. A scan failure will only occur if the antivirus engine fails to initialize. B. Antivirus status is monitored using SmartView Tracker. C. The antivirus engine acts as a proxy, caching the scanned file before delivering it to the client. D. All file types are considered "at risk", and are not configurable by the Administrator or the Security Policy.

Correct Answer: C

QUESTION NO: 5
The R71 fw monitor utility is used to troubleshoot which of the following problems?

A. Phase two key negotiation B. Log Consolidation Engine C. Traffic issues D. User data base corruption

Correct Answer: C

QUESTION NO: 6
You issue the fw monitor command with no arguments. Which of the following inspection points will be displayed?

A. After the virtual machine, in the outbound direction B. Before the virtual machine, in the inbound direction C. All inspection points D. Before the virtual machine, in the outbound direction

Correct Answer: C

QUESTION NO: 7
Where can you view anti-spam status?

A. SmartView Monitor B. SmartUpdate C. SmartDashboard D. SmartView Tracker

Correct Answer: A

QUESTION NO: 8
You wish to view the current state of the customer's VPN tunnels, including those that are down and destroyed. Which SmartConsole application will provide you with this information?

A. SmartView Monitor B. SmartUpdate C. SmartView Tracker D. SmartView Status

Correct Answer: A

QUESTION NO: 9
You are the Security Administrator for MegaCorp. In order to see how efficient your firewall Rule Base is, you would like to see how often the particular rules match. Where can you see it? Give the BEST answer.

A. In SmartReporter, in the section Firewall Blade - Activity / Network Activity with information concerning Top Matched Logged Rules. B. It is not possible to see it directly. You can open SmartDashboard and select UserDefined in the Track column. Afterwards, you need to create your own program with an external counter. C. SmartReporter provides this information in the section Firewall Blade - Security / Rule Base Analysis with information concerning Top Matched Logged Rules. D. In the SmartView Tracker, if you activate the column Matching Rate.

Correct Answer: C

QUESTION NO: 10
Your organization has many Edge Gateways at various branch offices allowing users to access company resources. For security reasons, your organization's Security Policy requires all Internet traffic initiated behind the Edge Gateways first be inspected by your headquarters' R71 Security Gateway. How do you configure VPN routing in this star VPN Community?

A. To center or through the center to other satellites, to Internet and other VPN targets B. To center and other satellites, through center C. To center only D. To Internet and other targets only

Correct Answer: A

QUESTION NO: 11
Which Check Point address translation method allows an administrator to use fewer ISP-assigned IP addresses than the number of internal hosts requiring Internet connectivity?

A. Hide B. Static Source C. Static Destination D. Dynamic Destination

Correct Answer: A

QUESTION NO: 12
Assume you are a Security Administrator for ABCTech. You have allowed authenticated access to
users from Mkting_net to Finance_net. But in the user's properties, connections are only permitted within Mkting_net. What is the BEST way to resolve this conflict?

A. Select Intersect with user database or Ignore Database in the Action Properties window. B. Select ignore database in action properties window C. Select intersect with user database in the action properties window D. Permit access to Finance_net

Correct Answer: A

CheckPoint Check Point Certified Security Administrator R71 - 156-215.71 Exam Questions