CheckPoint Check Point Certified Security Administrator

QUESTION NO: 1
Which of the following tools is used to generate a Security Gateway R77 configuration report?

A. fw cpinfo B. cpinfo C. infoview D. infoCP

Correct Answer: B

QUESTION NO: 2
You intend to upgrade a Check Point Gateway from R71 to R77. Prior to upgrading, you want to back up the Gateway should there be any problems with the upgrade. Which of the following allows for the Gateway configuration to be completely backed up into a manageable size in the least amount of time?

A. database revision B. snapshot C. upgrade_export D. backup

Correct Answer: D

QUESTION NO: 3
Which of the following commands can provide the most complete restoration of a R77 configuration?

A. cpconfig B. fwm dbimport -p <export file> C. upgrade_import D. cpinfo -recover

Correct Answer: C

QUESTION NO: 4
You find that Users are not prompted for authentication when they access their Web servers, even though you have created an HTTP rule via User Authentication. Choose the BEST reason why.

A. You checked the cache password on desktop option in Global Properties. B. You have forgotten to place the User Authentication Rule before the Stealth Rule. C. Users must use the SecuRemote Client, to use the User Authentication Rule. D. Another rule that accepts HTTP without authentication exists in the Rule Base.

Correct Answer: D

QUESTION NO: 5
Lilly has completed the initial setup of her Management Server with an IP address of
192.168.12.12. She must now run the First Time Configuration Wizard via the Gaia Portal to finish the setup. Lilly knows she must use a browser to access the device, but is unsure of the correct URL to enter, which one below will she need to use?

A. https://192.168.12.12:4433 B. http://192.168.12.12 C. http://192.168.12.12:8080 D. https://192.168.12.12

Correct Answer: D

QUESTION NO: 6
You have a diskless appliance platform. How do you keep swap file wear to a minimum?

A. The external PCMCIA-based flash extension has the swap file mapped to it, allowing easy replacement. B. Issue FW-1 bases its package structure on the Security Management Server, dynamically loading when the firewall is booted. C. A RAM drive reduces the swap file thrashing which causes fast wear on the device. D. Use PRAM flash devices, eliminating the longevity.

Correct Answer: C

QUESTION NO: 7
SmartUpdate is mainly for which kind of work -
1 . Monitoring Performance and traffic
2 . Provision Package
3 . Managing licenses
4. Creating a Rule Base

A. 1, 3 B. 1, 2 C. 2, 4 D. 2, 3

Correct Answer: D

QUESTION NO: 8
Which SmartConsole component can Administrators use to track changes to the Rule Base?

A. SmartView Monitor B. SmartReporter C. WebUI D. SmartView Tracker

Correct Answer: D

QUESTION NO: 9
In the Rule Base displayed for fwsingapore, user authentication in Rule 4 is configured as fully automatic. Eric is a member of the LDAP group, MSD_Group.
What happens when Eric tries to connect to a server on the Internet?

A. Eric will be blocked because LDAP is not allowed in the Rule Base. B. None of these things will happen. C. Eric will be authenticated and get access to the requested server. D. Eric will be dropped by the Stealth Rule.

Correct Answer: D

QUESTION NO: 10
Several Security Policies can be used for different installation targets. The Firewall protecting Human Resources' servers should have its own Policy Package. These rules must be installed on this machine and not on the Internet Firewall.
How can this be accomplished?

A. A Rule Base can always be installed on any Check Point Firewall object. It is necessary to select the appropriate target directly after selecting Policy > Install on Target. B. A Rule Base is always installed on all possible targets. The rules to be installed on a Firewall are defined by the selection in the Rule Base row Install On. C. When selecting the correct Firewall in each line of the Rule Base row Install On, only this Firewall is shown in the list of possible installation targets after selecting Policy > Install on Target. D. In the menu of SmartDashboard, go to Policy > Policy Installation Targets and select the correct firewall via Specific Targets.

Correct Answer: D

QUESTION NO: 11
You enable Hide NAT on the network object, 10.1.1.0 behind the Security Gateway's external interface.
You browse to the Google Website from host, 10.1.1.10 successfully.
You enable a log on the rule that allows 10.1.1.0 to exit the network.
How many log entries do you see for that connection in SmartView Tracker?

A. Two, both outbound, one for the real IP connection and one for the NAT IP connection B. Only one, outbound C. Two, one for outbound, one for inbound D. Only one, inbound

Correct Answer: B

QUESTION NO: 12
Which of the following allows administrators to allow or deny traffic to or from a specific network based on the user's credentials?

A. Access Policy B. Access Rule C. Access Role D. Access Certificate

Correct Answer: C

QUESTION NO: 13
Which of the following statements BEST describes Check Point's Hide Network Address Translation method?

A. Translates many source IP addresses into one source IP address B. Many-to-one NAT which implements PAT (Port Address Translation) for accomplishing both Source and Destination IP address translation C. One-to-one NAT which implements PAT (Port Address Translation) for accomplishing both Source and Destination IP address translation D. Translates many destination IP addresses into one destination IP address

Correct Answer: A

CheckPoint Check Point Certified Security Administrator - 156-215.77 Exam Questions