156-215.77 Free Practice Test

Several Security Policies can be used for different installation targets. The Firewall protecting Human Resources’ servers should have its own Policy Package. These rules must be installed on this machine and not on the Internet Firewall.
How can this be accomplished?

1. A. A Rule Base is always installed on all possible target
2. B. The rules to be installed on a Firewall are defined by the selection in the Rule Base row Install On.
3. C. When selecting the correct Firewall in each line of the Rule Base row Install On, only this Firewall is shown in the list of possible installation targets after selecting Policy > Install on Target.
4. D. In the menu of SmartDashboard, go to Policy > Policy Installation Targets and select the correct firewall via Specific Targets.
5. E. A Rule Base can always be installed on any Check Point Firewall objec
6. F. It is necessary to select the appropriate target directly after selecting Policy > Install on Target.

Correct Answer: C

In the Rule Base displayed, user authentication in Rule 4 is configured as fully automatic.
Eric is a member of the LDAP group, MSD_Group.

What happens when Eric tries to connect to a server on the Internet?

1. A. None of these things will happen.
2. B. Eric will be authenticated and get access to the requested server.
3. C. Eric will be blocked because LDAP is not allowed in the Rule Base.
4. D. Eric will be dropped by the Stealth Rule.

Correct Answer: B

What happens if the identity of a user is known?

1. A. If the user credentials do not match an Access Role, the system displays the Captive Portal.
2. B. If the user credentials do not match an Access Role, the system displays a sandbox.
3. C. If the user credentials do not match an Access Role, the traffic is automatically dropped.
4. D. If the user credentials match an Access Role, the rule is applied and traffic is accepted or dropped based on the defined action.

Correct Answer: D

Which of the following statements is TRUE about management plug-ins?

1. A. A management plug-in interacts with a Security Management Server to provide new features and support for new products.
2. B. Installing a management plug-in is just like an upgrade process.
3. C. Using a plug-in offers full central management only if special licensing is applied to specific features of the plug-in.
4. D. The plug-in is a package installed on the Security Gateway.

Correct Answer: A

Access Role objects define users, machines, and network locations as:

1. A. Credentialed objects
2. B. Linked objects
3. C. One object
4. D. Separate objects

Correct Answer: C