Get real exam questions for 156-215.77 Check Point Certified Security Administrator – GAiA. 100% Free.
Q1. - (Topic 3) What action can be performed from SmartUpdate R77? A. cpinfo B. fw stat -l C. upgrade_export D. remote_uninstall_verifier View AnswerAnswer: A Q2. - (Topic 1) Which of the following methods will provide the most complete backup of an R75 configuration? A. Execute command upgrade_export B. Database Revision Control C. Policy Package Management D. Copying the directori
Q1. - (Topic 3) You have just installed your Gateway and want to analyze the packet size distribution of your traffic with SmartView Monitor. Unfortunately, you get the message. "There are no machines that contain Firewall Blade and SmartView Monitor." What should you do to analyze the packet size distribution of your traffic? Give the BEST answer. A. Enable Monitoring on your Security Manage
Q1. - (Topic 1) Which command enables IP forwarding on IPSO? A. echo 1 > /proc/sys/net/ipv4/ip_forward B. ipsofwd on admin C. echo 0 > /proc/sys/net/ipv4/ip_forward D. clish -c set routing active enable View AnswerAnswer: B Q2. - (Topic 2) Which of the following is NOT useful to verify whether or not a Security Policy is active on a Gateway? A. fw ctl get string active_secpol B.
Q1. - (Topic 1) You want to generate a cpinfo file via CLI on a system running GAiA. This will take about 40 minutes since the log files are also needed. What action do you need to take regarding timeout? A. Log in as Administrator, set the timeout to one hour with the command idle 60 and start cpinfo. B. Log in as the default user expert and start cpinfo. C. No action is needed because cpshe
Q1. - (Topic 3) Identity Awareness is implemented to manage access to protected resources based on a user’s _____________. A. Application requirement B. Computer MAC address C. Identity D. Time of connection View AnswerAnswer: C Q2. - (Topic 3) What action CANNOT be run from SmartUpdate R77? A. Reboot Gateway B. Fetch sync status C. Get all Gateway Data D. Preinstall verifier Vie
Q1. - (Topic 3) How can you recreate the Security Administrator account, which was created during initial Management Server installation on GAiA? A. Export the user database into an ASCII file with fwm dbexport. Open this file with an editor, and delete the Administrator Account portion of the file. You will be prompted to create a new account. B. Type cpm -a, and provide the existing Administ
Q1. - (Topic 1) How does the button Get Address, found on the Host Node Object > General Properties page retrieve the address? A. Route Table B. Address resolution (ARP, RARP) C. Name resolution (hosts file, DNS, cache) D. SNMP Get View AnswerAnswer: C Q2. - (Topic 3) What command with appropriate switches would you use to test Identity Awareness connectivity? A. test_ad B. test_ld
Q1. - (Topic 3) Which of the following is NOT a valid option when configuring access for Captive Portal? A. According to the Firewall Policy B. From the Internet C. Through internal interfaces D. Through all interfaces View AnswerAnswer: B Q2. - (Topic 3) Which tool CANNOT be launched from SmartUpdate R77? A. SecurePlatform WebUI B. cpinfo C. IP Appliance Voyager D. snapshot View An
Q1. - (Topic 3) Which of the following items should be configured for the Security Management Server to authenticate using LDAP? A. Domain Admin password B. Check Point Password C. Windows logon password D. WMI object View AnswerAnswer: A Q2. - (Topic 3) When using vpn tu, which option must you choose if you want to rebuild your VPN for a specific IP (gateway)? A. (6) Delete all IPsec
Q1. - (Topic 3) Study the Rule base and Client Authentication Action properties screen -After being authenticated by the Security Gateway, when a user starts an HTTP connection to a Web site, the user tries to FTP to another site using the command line. What happens to the user? The: A. FTP connection is dropped by Rule 2. B. user is prompted from that FTP site only, and does not need to enter
Q1. - (Topic 1) Which of the following is a CLI command for Security Gateway R77? A. fw merge B. fw tab -u C. fw shutdown D. fwm policy_print <policyname> View AnswerAnswer: B Q2. - (Topic 1) Peter is your new Security Administrator. On his first working day, he is very nervous and enters the wrong password three times. His account is locked. What can be done to unlock Peter's
Q1. - (Topic 3) John Adams is an HR partner in the ACME organization. ACME IT wants to limit access to HR servers to designated IP addresses to minimize malware infection and unauthorized access risks. Thus, the gateway policy permits access only from John's desktop which is assigned a static IP address 10.0.0.19. John received a laptop and wants to access the HR Web Server from anywhere in
Q1. - (Topic 1) What is the primary benefit of using the command upgrade_export over either backup or snapshot? A. The commands backup and snapshot can take a long time to run whereas upgrade_export will take a much shorter amount of time. B. upgrade_export will back up routing tables, hosts files, and manual ARP configurations, where backup and snapshot will not. C. upgrade_export has an opt
Q1. - (Topic 2) You are a Security Administrator who has installed Security Gateway R77 on your network. You need to allow a specific IP address range for a partner site to access your intranet Web server. To limit the partner's access for HTTP and FTP only, you did the following: 1) Created manual Static NAT rules for the Web server. 2) Cleared the following settings in the Global Propert
Q1. - (Topic 3) John Adams is an HR partner in the ACME organization. ACME IT wants to limit access to HR servers to designated IP addresses to minimize malware infection and unauthorized access risks. Thus, the gateway policy permits access only from John's desktop which is assigned a static IP address 10.0.0.19. John received a laptop and wants to access the HR Web Server from anywhere in
Q1. - (Topic 2) You are responsible for the configuration of MegaCorp's Check Point Firewall. You need to allow two NAT rules to match a connection. Is it possible? Give the BEST answer. A. Yes, it is possible to have two NAT rules which match a connection, but only when using Automatic NAT (bidirectional NAT). B. Yes, it is possible to have two NAT rules which match a connection, but only