Note! Following 156-915.80 Exam is Retired now. Please select the alternative replacement for your Exam Certification.

156-915.80 Exam Dumps - Check Point Certified Security Expert Update - R80.10

Go to page:

<< First
Prev
1
2
3
4
5
6
7
8
9
10
Next
Last >>

Question # 33

You want to generate a cpinfo file via CLI on a system running GAiA. This will take about 40 minutes since the log files are also needed. What action do you need to take regarding timeout?

No action is needed because cpshell has a timeout of one hour by default.

Full Access

Question # 34

Because of pre-existing design constraints, you set up manual NAT rules for your HTTP server. However, your FTP server and SMTP server are both using automatic NAT rules. All traffic from your FTP and SMTP servers are passing through the Security Gateway without a problem, but traffic from the Web server is dropped on rule 0 because of anti-spoofing settings. What is causing this?

Manual NAT rules are notconfigured correctly.

Allow bi-directional NAT is not checked in Global Properties.

Routing is not configured correctly.

Translate destination on client side is not checked in Global Properties under Manual NAT Rules.

Full Access

Question # 35

What happens if the identity of a user is known?

If the user credentials do not match an Access Role, the traffic is automatically dropped.

If the user credentials do not match an Access Role, the system displays a sandbox.

If the user credentialsdo not match an Access Role, the gateway moves onto the next rule.

If the user credentials do not match an Access Role, the system displays the Captive Portal.

Full Access

Question # 36

Your company is running Security Management Server R80 on GAiA, which has been migrated through each version starting from CheckPoint 4.1. How do you add a new administrator account?

Using SmartDashboard, under Users, select Add New Administrator

Using SmartDashboard or cpconfig

Using the Web console on GAiA under Product configuration, select Administrators

Using cpconfig on the Security Management Server, choose Administrators

Full Access

Question # 37

You are a Security Administrator who has installed Security Gateway R80 on your network. You need to allow a specific IP address range for a partner site to access your intranet Web server. To limit the partnerâ€™s access for HTTP and FTP only, you did the following:

1)Created manual Static NAT rules for the Web server.

2) Cleared the following settings in the Global Properties > Network Address Translation screen:

- Allow bi-directional NAT

- Translate destination on client side

Do the above settings limit the partnerâ€™s access?

Yes. This will ensure that traffic only matches the specific rule configured for this traffic, and that the Gateway translates the traffic after accepting the packet.

No. The first setting is not applicable. The second setting will reduce performance.

Yes. Both of these settings are only applicable to automatic NAT rules.

No. The first setting is only applicable to automatic NAT rules. The second setting will force translation by the kernel on the interface nearest to the client.

Full Access

Question # 38

Study the Rule base and Client Authentication Action properties screen -

After being authenticated by the Security Gateway, when a user starts an HTTP connection to a Web site, the user tries to FTP to another site using the command line. What happens to the user? The:

user is prompted for authentication by the Security Gateway again.

FTP data connection is dropped after the user is authenticated successfully.

user is prompted to authenticate from that FTP site only, and does notneed to enter his username and password for Client Authentication.

FTP connection is dropped by Rule 2.

Full Access

Question # 39

You are MegaCorpâ€™s Security Administrator. There are various network objects which must be NATed. Some ofthem use the Automatic Hide NAT method, while others use the Automatic Static NAT method. What is the rule order if both methods are used together? Give the BEST answer.

The Administrator decides the rule order by shifting the corresponding rules up and down.

The Static NAT rules have priority over the Hide NAT rules and the NAT on a node has priority over the NAT on a network or an address range.

The Hide NAT rules have priority over the Static NAT rules and the NAT on a node has priorityover the NAT on a network or an address range.

The rule position depends on the time of their creation. The rules created first are placed at the top; rules created later are placed successively below the others.

Full Access

Question # 40

How can you check whether IP forwarding is enabled on an IP Security Appliance?

clish-c show routing active enable

cat /proc/sys/net/ipv4/ip_forward

echo 1 > /proc/sys/net/ipv4/ip_forward

ipsofwd list

Full Access

Go to page: