156-215.71試験無料問題集「CheckPoint Check Point Certified Security Administrator R71 認定」

ページ: 1 / 25
トータル 465 問
完全版を入手する
When using SecurePlatform, it might be necessary to temporarily change the MAC address of the interface eth 0 to 00:0C:29:12:34:56. After restarting the network the old MAC address should be active. How do you configure this change?

SmartView Tracker R71 consists of three different modes. They are:

What are the two basic rules which should be used by all Security Administrators?

Of the following VPN Community options, which is most likely to provide a balance between IKE compatibility to VPN-capable devices (Check Point and non-Check Point) and preserving resources on the R71 Gateway? VPN tunnel sharing per:

When configuring the network interfaces of a Check Point Gateway, the direction can be defined
as Internal or External. What is the meaning of Interface leads to DMZ?

Checkpoint 156-215-71 Exam

NAT can NOT be configured on which of the following objects?

Peter is your new Security Administrator. On his first working day, he is very nervous and sets the wrong password three times. His account is locked. What can be done to unlock Peter's account? Give the BEST answer.

In a distributed management environment, the administrator has removed the default check from Accept Control Connections under the Policy / Global Properties / FireWall tab. In order for the Security Management Server to install a policy to the Firewall, an explicit rule must be created to allow the server to communicate to the Security Gateway on port ______.

An internal host initiates a session to www.google.com and is set for Hide NAT behind the Security Gateway. The initiating traffic is an example of __________.

A Hide NAT rule has been created which includes a source address group of ten (10) networks and three (3) other group objects (containing 4, 5, and 6 host objects respectively). Assuming all addresses are non-repetitive, how many effective rules have you created?

For remote user authentication, which authentication scheme is NOT supported?

You currently do not have a Check Point software subscription for one of your products. What will happen if you attempt to upgrade the license for this product?

Which of the following is NOT supported with office mode?

A rule _______ is designed to log and drop all other communication that does not match another rule?

You installed Security Management Server on a computer using SecurePlatform in the MegaCorp home office. You use IP address 10.1.1.1. You also installed the Security Gateway on a second SecurePlatform computer, which you plan to ship to another Administrator at a MegaCorp hub office. What is the correct order for pushing SIC certificates to the Gateway before shipping it?
1) Run cpconfig on the gateway, set secure internal communication, enter the activation key and reconfirm.
2) Initialize internal certificate authority (ICA) on the security Management server.
3) Confirm the gateway object with the host name and IP address for the remote site.
4) Click the communication button in the gateway object's general screen, enter the activation key, and click initialize and ok.
5) Install the security policy.

You are running a R71 Security Gateway on SecurePlatform. In case of a hardware failure, you have a server with the exact same hardware and firewall version installed. What backup method could be used to quickly put the secondary firewall into production?

The Security Gateway is installed on SecurePlatform R71. The default port for the Web User Interface is _______.

How does the Get Address button, found on the Host Node Object / General Properties page retrieve the address?

Which of the following is a viable consideration when determining Rule Base order?

ページ: 1 / 25
トータル 465 問