Note! Following 156-215.77 Exam is Retired now. Please select the alternative replacement for your Exam Certification.

156-215.77 Exam Dumps - Check Point Certified Security Administrator

Go to page:

<< First
Prev
1
2
3
4
5
6
7
8
Next
Last >>

Question # 17

The INSPECT engine inserts itself into the kernel between which two OSI model layers?

Session and Transport

Physical and Data

Presentation and Application

Datalink and Network

Full Access

Question # 18

You are a Security Administrator using one Security Management Server managing three different firewalls. One firewall does NOT show up in the dialog box when attempting to install a Security Policy. Which of the following is a possible cause?

The firewall has failed to sync with the Security Management Server for 60 minutes.

The firewall object has been created but SIC has not yet been established.

The firewall is not listed in the Policy Installation Targets screen for this policy package.

The license for this specific firewall has expired.

Full Access

Question # 19

Which rule is responsible for the installation failure?

Exhibit:

Rule 3

Rule 4

Rule 6

Rule 5

Full Access

Question # 20

The Identity Agent is a lightweight endpoint agent that authenticates securely with Single Sign-On (SSO). What is not a recommended usage of this method?

When accuracy in detecting identity is crucial

Leveraging identity for Data Center protection

Protecting highly sensitive servers

Identity based enforcement for non-AD users (non-Windows and guest users)

Full Access

Question # 21

According to Check Point Best Practice, when adding a non-managed Check Point Gateway to a Check Point security solution what object SHOULD be added? A(n):

Gateway

Interoperable Device

Externally managed gateway

Network Node

Full Access

Question # 22

Review the rules.

Assume domain UDP is enabled in the impled rules.

What happens when a user from the internal network tries to browse to the internet using HTTP? The user:

can connect to the Internet successfully after being authenticated.

is prompted three times before connecting to the Internet successfully.

can go to the Internet after Telnetting to the client authentication daemon port 259.

can go to the Internet, without being prompted for authentication.

Full Access

Question # 23

How do you configure an alert in SmartView Monitor?

An alert cannot be configured in SmartView Monitor.

By choosing the Gateway, and Configure Thresholds.

By right-clicking on the Gateway, and selecting Properties.

By right-clicking on the Gateway, and selecting System Information.

Full Access

Question # 24

Study the Rule base and Client Authentication Action properties screen -

After being authenticated by the Security Gateway, when a user starts an HTTP connection to a Web site, the user tries to FTP to another site using the command line. What happens to the user?

user is prompted for authentication by the Security Gateway again.

FTP data connection is dropped after the user is authenticated successfully.

user is prompted to authenticate from that FTP site only, and does not need to enter his username and password for Client Authentication.

FTP connection is dropped by Rule 2.

Full Access