New Questions 2

Which of the following items should be configured for the Security Management Server to authenticate using LDAP?

A. Check Point Password

B. WMI object

C. Domain Admin username

D. Windows logon password

View Answer

New Questions 3

To run GAiA in 64bit mode, which of the following is true?

1) Run set edition default 64-bit.

2) Install more than 4 GB RAM.

3) Install more than 4 TB of Hard Disk.

A. 1 and 3

B. 1 and 2

C. 2 and 3

D. 1, 2, and 3

View Answer

New Questions 4

Several Security Policies can be used for different installation targets. The Firewall protecting Human Resourcesu2021 servers should have its own Policy Package. These rules must be installed on this machine and not on the Internet Firewall. How can this be accomplished?

A. A Rule Base is always installed on all possible targets. The rules to be installed on a Firewall are defined by the selection in the Rule Base row Install On.

B. When selecting the correct Firewall in each line of the Rule Base row Install On, only this Firewall is shown in the list of possible installation targets after selecting Policy > Install on Target.

C. In the menu of SmartDashboard, go to Policy > Policy Installation Targets and select the correct firewall via Specific Targets.

D. A Rule Base can always be installed on any Check Point Firewall object. It is necessary to select the appropriate target directly after selecting Policy > Install on Target.

View Answer

New Questions 5

Your main internal network 10.10.10.0/24 allows all traffic to the Internet using Hide NAT. You also have a small network 10.10.20.0/24 behind the internal router. You want to configure the kernel to translate the source address only when network 10.10.20.0 tries to access the Internet for HTTP, SMTP, and FTP services. Which of the following configurations will allow this network to access the Internet?

A. Configure three Manual Static NAT rules for network 10.10.20.0/24, one for each service.

B. Configure Automatic Static NAT on network 10.10.20.0/24.

C. Configure one Manual Hide NAT rule for HTTP, FTP, and SMTP services for network 10.10.20.0/24.

D. Configure Automatic Hide NAT on network 10.10.20.0/24 and then edit the Service column in the NAT Rule Base on the automatic rule.

View Answer

New Questions 6

You are a Security Administrator who has installed Security Gateway R80 on your network. You need to allow a specific IP address range for a partner site to access your intranet Web server. To limit the partneru2021s access for HTTP and FTP only, you did the following:

1) Created manual Static NAT rules for the Web server.

2) Cleared the following settings in the Global Properties > Network Address Translation screen:

- Allow bi-directional NAT

- Translate destination on client side

Do the above settings limit the partneru2021s access?

A. Yes. This will ensure that traffic only matches the specific rule configured for this traffic, and that the Gateway translates the traffic after accepting the packet.

B. No. The first setting is not applicable. The second setting will reduce performance.

C. Yes. Both of these settings are only applicable to automatic NAT rules.

D. No. The first setting is only applicable to automatic NAT rules. The second setting will force translation by the kernel on the interface nearest to the client.

View Answer

New Questions 7

Which command will only show the number of entries in the connection table?

A. fw tab -t connections -s

B. fw tab -t connections -u

C. fw tab -t connections

D. fw tab

View Answer

New Questions 8

You just installed a new Web server in the DMZ that must be reachable from the Internet. You create a manual Static NAT rule as follows:

Source: Any || Destination: web_public_IP || Service: Any || Translated Source: original || Translated Destination: web_private_IP || Service: Original

u201cweb_public_IPu201d is the node object that represents the new Web serveru2021s public IP address. u201cweb_private_IPu201d is the node object that represents the new Web siteu2021s private IP address. You enable all settings from Global Properties > NAT.

When you try to browse the Web server from the Internet you see the error u201cpage cannot be displayedu201d. Which of the following is NOT a possible reason?

A. There is no Security Policy defined that allows HTTP traffic to the protected Web server.

B. There is no ARP table entry for the protected Web serveru2021s public IP address.

C. There is no route defined on the Security Gateway for the public IP address to the Web serveru2021s private IP address.

D. There is no NAT rule translating the source IP address of packets coming from the protected Web server.

View Answer

New Questions 9

When deploying multiple clustered firewalls on the same subnet, what does the firewall administrator need to configure to prevent CCP broadcasts being sent to the wrong cluster?

A. Set the fwha_mac_magic_forward parameter in the $CPDIR/boot/modules/ha_boot. conf

B. Set the fwha_mac_magic parameter in the $FWDIR/boot/fwkern.conf file

C. Set the cluster global ID using the command u201ccphaconf cluster_id set <value>u201d

D. Set the cluster global ID using the command u201cfw ctt set cluster_id <value>u201d

View Answer

New Questions 10

Fill in the blank.

In Load Sharing Unicast mode, the internal cluster IP address is 10.4.8.3. The internal interfaces on two members are 10.4.8.1 and 10.4.8.2. Internal host 10.4.8.108 Pings 10.4.8.3, and receives replies. The following is the ARP table from the internal Windows host 10.4.8.108. Review the exhibit and type the IP address of the member serving as the pivot machine in the space below.

View Answer

New Questions 11

Fill in the blank. The user wants to replace a failed Windows-based firewall with a new server running GAiA.

For the most complete restore of an GAiA configuration, he or she will use the command

View Answer