Free CheckPoint 156-215-75 Exam Dumps Questions & Answers

What is true about the Rule Base shown?

Checkpoint 156-215.75 : Practice Test
(i). HTTP traffic from webrome to websingapore will be encrypted (ii). HTTP traffic from websingapore to webrome will be encrypted (iii). HTTP traffic from webrome ro websingapore will be encrypted (iv). HTTP traffic from websingapore to webromw will be blocked

• A.  (iii) only
• B.  (ii) and (iii)
• C.  (iii) and (iv)
• D.  (i), (ii) and (iii)

Your manager requires you to setup a VPN to a new business partner site. The administrator from the partner site gives you his VPN settings and you notice that he setup AES 128 for IKE phase 1 and AES 256 for IKE phase 2. Why is this a problematic setup?

• A.  The 2 algorithms do not have the same key length and so don't work together. You will get the error ".... No proposal chosen...."
• B.  Only 128 bit keys are used for phase 1 keys which are protecting phase 2, so the longer key length in phase 2 only costs performance and does not add security due to a shorter key in phase 1.
• C.  All is fine as the longest key length has been chosen for encrypting the data and a shorter key length for higher performance for setting up the tunnel.
• D.  All is fine and can be used as is.

Which of the following statements accurately describes the upgrade_export command?

• A.  Upgrade_export stores network-configuration data, objects, global properties, and the data base revisions prior to upgrading the security Management Server.
• B.  Used primarily when upgrading the Security Management Server, upgrade_export stores all object databases and the conf directories for importing to a newer version of the Security Gateway.
• C.  Used when upgrading the Security Gateway, upgrade_export includes modified files directory.
• D.  Upgrade_export is used when upgrading the Security Gateway, and allows certain files to be included before exporting.

A security audit has determined that your unpatched Web application server is accessing a SQL server. Which IPS setting will allow the Security Gateway to prevent this error page from displaying information about the SQL server in your DMZ?

• A.  In web intelligence / HTTP Protocol Inspection, select the box Enforce Strict HTTP response parsing.
• B.  In application intelligence / FingerPrint Scrambling / WEB Apps, Select the Scramble error message checkbox.
• C.  In Web Intelligence / Information Disclosure / Error Concealment
• D.  In Web Intelligence / General / HTTP Protocol Inspection, enables ASCII only response headers.

Your network includes a SecurePlatform machine running NG with Application Intelligence (AI) R55. This configuration acts as both the primary Security Management Server and VPN-1 Pro Gateway. You add one machine, so you can implement Security Gateway R75 in a distributed environment. The new machine is an Intel CoreDuo processor, with 2 GB RAM and a 500-GB hard drive. How do you use these two machines to successfully migrate the NG with AI R55 configuration?

• A.  1. Export the configuration on the existing machine to a network share
  2.Uninstall the Security Gateway from the existing machine, using sysconfig
  3.Insert the R75 CD ROM. and run the patch add CD-HGM command to upgrade the Security Management Server to Security Gateway R 70
  4.Select upgrade with imported file, and reboot
  5.Install a new R75 Security Gateway as the only module on the new machine, and reset SIC to the new Gateway
• B.  1. Export the configuration on the existing machine as a backup only
  2.Edit $FWDIR\product. conf on the existing machine, to disable the VPN-1 Pro Gateway package
  3.Reboot the existing machine
  4.Perform an in place upgrade on the Security Management Server using the command "patch odd cd"
  5.On the new machine, install SecurePlatform as the R75 Security Gateway only
  6.Run sysconfig to complete the configuration
  7.From SmartDashboard, reconfigure the Gateway object to the new version, and reset SIC
• C.  1. On the existing machine, export the NG with AJ R55 configuration to a network share.
  2.Insert the R75 CD-ROM in the old machine Install the R7D Security Gateway only while reinstalling the SecurePlatform OS over the top of the existing installation. Complete sysconfig.
  3.On the new machine, install SecurePlatform as the primary Security Management Server only.
  4.Transfer the exported. tgz file into the new machine, import the configuration, and then reboot
  5.Open SmartDashboard, change the Gateway object to the new version, and reset SIC for the Gateway object.
• D.  1. Export the configuration on the existing machine to a tape drive
  2.Uninstall the Security Management Server from the existing machine, using sysconfig.
  3.Insert the R75 CD-ROM. run the patch add CD-ROM command to upgrade the existing machine to the R75 Security Gateway, and reboot
  4.Install a new primary Security Management Server on the new machine
  5.Change the Gateway object to the new version, and reset SIC