Online Access Free 156-215-75 Practice Test

The technical-support department has a requirement to access an intranet server. When configuring a User Authentication rule to achieve this, which of the following should you remember?

• A.The Security Gateway first checks if there is any rule that does not require authentication for this type of connection before invoking the Authentication Security Server.
• B.You can limit the authentication attempts in the Authentication tab of the User Properties screen.
• C.You can only use the rule for Telnet, FTP, SMTP, and rlogin services.
• D.Once a user is first authenticated, the user will not be prompted for authentication again until logging out.

Certificates for Security Gateways are created during a simple initialization from ___________.

• A.SmartDashboard
• B.The ICA management tool
• C.SmartUpdate
• D.Sysconfig

Examine the following Security Policy. What, if any, changes could be made to accommodate Rule 4?

Checkpoint 156-215.75 : Practice Test

• A.Nothing at all
• B.Remove the service HTTPS from the Service column in Rule A
• C.Modify the VPN column in Rule 2 to limit access to specific traffic
• D.Modify the Source or Destination columns in Rule 4

What port is used for communication to the User Center with SmartUpdate?

• A.HTTP 80
• B.CPMI 200
• C.HTTPS 443
• D.TCP 8080

Your perimeter Security Gateway's external IP is 200.200.200.3. Your network diagram shows:

RequireD. Allow only network 192.168.10.0 and 192.168.20.0 to go out to the Internet, using 200. 200.200.5.
The local network 192.168.1.0/24 needs to use 200.200.200.3 to go out to the Internet.
Assuming you enable all the settings in the NAT page of Global Properties, how could you achieve these requirements?

• A.Create a network object 192.168.0.0/16. Enable Hide NAT on the NAT page. Enter
  200.200.200.5 as the hiding IP address. Add and ARP entry for 200.200.200.5 for the MAC address of 200.200.200.3.
• B.Create network objects for 192.168.10.0/24 and 192.168.20.0/24. Enable Hide NAT on both network objects, using 200.200.200.5 as hiding IP address Add an ARP entry for
  200.200.200.3 for the MAC address of 200.200.200.5.
• C.Create an Address Range object, starting from 192.168.10.1 to 192.168.20.254. Enable Hide NAT on the NAT page of the address range object. Enter Hiding IP address
  200.200.200.5. Add an ARP entry for 200.200.200.5 for the MAC address of
  200.200.200.3.
• D.Create two network objects: 192.168.10.0/24. and 192.168.20.0/24. Add the two network objects. Create a manual NAT rule like the following Original source -group object; Destination - any Service - any, Translated source - 200.200.200.5; Destination - original, Service - original.