Free CheckPoint 156-210 Exam Dumps Questions & Answers

Static Source NAT translates public internal source IP addresses to private external source IP addresses.

• A.  True
• B.  False.

Implementing Dynamic NAT would enable an internal machine behind the firewall to act as an FTP Server for external clients.

• A.  True
• B.  False

User Authentication can be used to authenticate which services? (Select all that apply.) Explanation: With Session Authentication you can authenticate 4 services: HTTP, FTP, Telnet and RLogin. See Page 282 of Syngress Book "Check Point NG - Next Generation Security Administration".
Incorrect Answers
B:HTTPS is not supported by user authentication. See Page 282 of Syngress Book "Check Point NG - Next Generation Security Administration".
QUESTION200
To block an active connection with Block Intruder, select the connection you want to block, and then select Block Intruder from the Select mune. The following default options are available from the Block Intruder window (Select all that apply.)

You are a Security Administrator preparing to implement Hide NAT. You must justify your decision. Which of the following statements justifies implementing a Hide NAT solution? Choose two.

• A.  Your organization does not allow internal hosts to access Internet resources
• B.  Your organization requires internal hosts, with RFC 1918-compliant addresses to be assessable from the Internet.
• C.  You have more internal hosts than public IP addresses
• D.  Internally, you have more public IP addresses than hosts.
• E.  Internally, your organization uses an RFC 1918-compliant addressing scheme.

Choose the two responses that BEST describe a VPN-1/Firewall-1 Rule Base.
A Rule Base is:

• A.  A set of explicitly and implicitly defined rules used to define network security.
• B.  A repository of DLL files, each provides a specific security function.
• C.  A collection of system settings that make up implicit rules defining network security.
• D.  The process by which secure communications are established between different VPN-
  1/Firewall-1 Modules, operating within an enterprise security environment.
• E.  A collection of corporate guidelines used to structure the network Security Policies for users operating behind the firewall.