156-215.71 Check Point Certified Security Administrator Exam

Sample Questions

Q) A marketing firms networking team is typing to troubleshoot user complaints regarding access audio-streaming material from the internet. The networking team asks you to check the object and rule configuration settings for perimatre security Gateway. Which SmartConsole application should you use to check these object and rules?

a) Smart View Tracker

b) SmartView Status

c) SmartView Monitor

d) Smart Dashboard

Q) For information to pass securely between a Security Management Server and another Check Point component, what would NOT be required?

a) The communication must be authenticated

b) The communication must use two-factor or biometric authentication.

c) The communication must be encrypted

d) The component must be time-and-date synchronized with the security management server

Q) The security gateway is installed on Secure Platform R71. The default port for the web user Interface is _______.

a) TCP 18211

b) TCP 257

c) TCP 4433

d) TCP 443

Q) You are creating an out put file with the following command: Fw monitor  accept (src=10.20.30.40 or dst=10.20.30.40); output Which tool do you use to analyze this file?

a) You can analyze it with Wireshark or Ethernet

b) You can analyze the output file with any ASCII editor

c) The output file format is CSV, so you can use MS Excel to analyze it

d) You cannot analyze it with any tool as the syntax should be:fw monitor -e accept ([12,b]=10.20.30.40 or [16,b]=10.20.30.40);output.

Q) How do you define a service object for a TCP port range?

a) Manage services>New TCP, provide name and define port x-y

b) Manage services>New group, provide name and add all services ports for range individually to the group object

c) Manage services>New other, provide name and define protocol: 17, Range: x-y

d) Manage services>New other, provide name and define protocol: x-y