156-215.77 Free Practice Test

You have included the Cleanup Rule in your Rule Base. Where in the Rule Base should the Accept ICMP Requests implied rule have no effect?

1. A. Last
2. B. After Stealth Rule
3. C. First
4. D. Before Last

Correct Answer: A

Which of the following items should be configured for the Security Management Server to authenticate using LDAP?

1. A. Check Point Password
2. B. WMI object
3. C. Domain Admin username
4. D. Windows logon password

Correct Answer: A

Why should the upgrade_export configuration file (.tgz) be deleted after you complete the import process?

1. A. SmartUpdate will start a new installation process if the machine is rebooted.
2. B. It will prevent a future successful upgrade_export since the .tgz file cannot be overwritten.
3. C. It contains your security configuration, which could be exploited.
4. D. It will conflict with any future upgrades when using SmartUpdate.

Correct Answer: C

Reviewing the Rule Base, you see that is responsible for the client authentication failure.
Exhibit:

1. A. Rule 4
2. B. Rule 7
3. C. Rule 8
4. D. Rule 5

Correct Answer: A

Your perimeter Security Gateway’s external IP is 200.200.200.3. Your network diagram shows:

Required. Allow only network 192.168.10.0 and 192.168.20.0 to go out to the Internet, using 200.200.200.5.
The local network 192.168.1.0/24 needs to use 200.200.200.3 to go out to the Internet. Assuming you enable all the settings in the NAT page of Global Properties, how could you
achieve these requirements?

1. A. Create network objects for 192.168.10.0/24 and 192.168.20.0/24. Enable Hide NAT on both network objects, using 200.200.200.5 as hiding IP addres
2. B. Add an ARP entry for 200.200.200.3 for the MAC address of 200.200.200.5.
3. C. Create an Address Range object, starting from 192.168.10.1 to 192.168.20.254. Enable Hide NAT on the NAT page of the address range objec
4. D. Enter Hiding IP address 200.200.200.5. Add an ARP entry for 200.200.200.5 for the MAC address of 200.200.200.3.
5. E. Create a network object 192.168.0.0/16. Enable Hide NAT on the NAT pag
6. F. Enter 200.200.200.5 as the hiding IP addres
7. G. Add an ARP entry for 200.200.200.5 for the MAC address of 200.200.200.3.
8. H. Create two network objects: 192.168.10.0/24 and 192.168.20.0/24. Add the two network objects to a group objec
9. I. Create a manual NAT rule like the following: Original source - group object; Destination - any; Service - any; Translated source - 200.200.200.5; Destination - original; Service - original.

Correct Answer: B