156-215.75 Online Practice Questions and Answers

You have configured SNX on the Security Gateway. The client connects to the Security Gateway and the user enters the authentication credentials. What must happen after authentication that allows the client to connect to the Security Gateway's VPN domain?

A. Active-X must be allowed on the client.

B. An office mode address must be obtained by the client.

C. SNX modifies the routing table to forward VPN traffic to the Security Gateway.

D. The SNX client application must be installed on the client.

Where is the IPSO Boot Manager physically located on an IP Appliance?

A. In the / nvram directory

B. On an external jump drive

C. On the platform's BIOS

D. On built-in compact Flash memory

Which operating systems are supported by a Check Point Security Gateway on an open server?

A. Check Point SecurePlatform and Microsoft Windows

B. Sun Solaris, Red Hat Enterprise Linux, Check Point SecurePlatform, IPSO, Microsoft Windows

C. Check Point SecurePlatform, IPSO, Sun Solaris, Microsoft Windows

D. Microsoft Windows, Red Hat Enterprise Linux, Sun Solaris, IPSO

Sally has a Hot Fix Accumulator (HFA) she wants to install on her Security Gateway which operates with SecurePlatform, but she cannot SCP the HFA to the system. She can SSH into the Security Gateway, but she has never been able to SCP files to it. What would be the most likely reason she cannot do so?

A. She needs to run cpconfig to enable the ability to SCP files.

B. She needs to edit /etc/scpusers and add the Standard Mode account.

C. She needs to run sysconfig and restart the SSH process.

D. She needs to edit /etc/SSHd/SSHd_config and add the Standard Mode account.

In which directory do you install the R75 pre-upgrade verifier on a SecurePlatform Security Management Server?

A. It does not matter since the dynamic information entered by the Administrator will cause it to retrieve the proper configurations.

B. In $PWDIR/ conf.

C. It does not matter as long as the Administrator uses chmod to permit the file to execute.

D. in $PWDIR/ bin

Can you upgrade a clustered deployment with zero downtime?

A. No, this is not possible.

B. Yes, if you select the option zero downtime, it will keep one member active

C. No, you must bring all gateways down.

D. Yes, this is the default setting.

What is the bit size of a DES key?

A. 112

B. 168

C. 56

D. 64

In which IKE phase are IPsec SA's negotiated?

A. Phase 3

B. Phase 1

C. Phase 2

D. Phase 4

The SIC certificate is stored in the directory _______________.

A. $CPDIR/conf

B. $FWDIR/database

C. $CPDIR/registry

D. $FWDIR/conf

In the Security Policy shown here, which rule inhibits Rule 4?

A. Rule 3

B. Rule 1

C. Rule 2

D. No rule inhibits Rule 4.