Online Access Free 156-215-75 Practice Test

Select the correct statement about Secure Internal Communications (SIC) Certificates. SIC
Certificates:

• A.Increase network security by securing administrative communication with a two-factor challenge response authentication.
• B.Are for Security Gateways created during the Security Management Server installation.
• C.Can be used for securing internal network communications between the Security Gateway and an OPSEC device.
• D.Uniquely identify machines installed with Check Point software only. They have the same function as RSA Authentication Certificates.

Where is the IPSO Boot Manager physically located on an IP Appliance?

• A.On the platform's BIOS
• B.On an external jump drive
• C.On built-in compact Flash memory
• D.In the / nvram directory

Spoofing is a method of:

• A.Disguising an illegal IP address behind an authorized IP address through port address Translation.
• B.Hiding your firewall from unauthorized users.
• C.Detecting people using false or wrong authentication logins.
• D.Making packets appear as if they come from an authorized IP address

Your boss wants you to closely monitor an employee suspected of transferring company secrets to the competition. The IT department discovered the suspect installed a WinSCP client in order to use encrypted communication. Which of the following methods is best to accomplish this task?

• A.Use SmartView Tracker to follow his actions by filtering log entries that feature the WinSCP source or destination port. Then, export the corresponding entries to a separate log file for documentation.
• B.Use SmartDashboard to add a rule in the firewall rule Base that matches his IP address and those of potential target and suspucious9 protocols. Apply the alert action or customized messaging.
• C.Send the suspect an email with a key logging Trojan attached, to get direct information about his wrong doing
• D.Watch his IP in SmartView monitor by setting an alert action to any packet that matches your Rule base and his IP Address for inbound and outbound traffic.

Your company's Security Policy forces users to authenticate to the Gateway explicitly, before they can use any services. The Gateway does not allow the Telnet service to itself from any location. How would you configure authentication on the Gateway? With a:

• A.Client Authentication for fully automatic sign on
• B.Client Authentication rule, using partially automatic sign on
• C.Session Authentication rule
• D.Client Authentication rule using the manual sign-on method, using HTTP on port 900