CheckPoint 156-215.71 Exam Syllabus Topics:
| Section | Weight | Objectives |
|---|---|---|
| IPSec VPN Implementation | 15% | - VPN communities and encryption - Remote access VPN - Site-to-site VPN |
| User Management and Authentication | 10% | - Authentication methods - User databases - User groups and permissions |
| Check Point R71 Architecture | 15% | - Software Blades overview - Security Gateway - Security Management Server - SmartConsole components |
| Installation and Deployment | 15% | - Initial setup and communication - Licensing and contracts - Management Server configuration - Security Gateway installation |
| Security Policy Management | 25% | - Rule base creation and editing - Object management - Policy installation - Global properties |
| Monitoring and Troubleshooting | 10% | - SmartView Monitor - Log analysis and debugging - SmartView Tracker |
| Network Address Translation (NAT) | 10% | - Automatic and manual NAT rules - NAT configuration and troubleshooting |
CheckPoint Check Point Certified Security Administrator R71 Sample Questions:
Question #1
A Stealth rule is used to:
A. Use the Security Gateway to hide the border router from internal attacks.
B. Cloak the type of Web server in use behind the Security Gateway.
C. Prevent communication to the Security Gateway itself.
D. Prevent tracking of hosts behind the Security Gateway.
Question #2
As a Security Administrator, you must refresh the Client Authentication authorization time-out every time a new user connection is authorized. How do you do this? Enable the Refreshable Timeout setting:
A. in the user object's Authentication screen
B. in the Gateway object's Authentication screen
C. in the Limit tab of the Client Authentication Action Properties screen
D. in the Global Properties Authentication screen
Question #3
You are the Security Administrator in a large company called ABC. A Check Point Firewall is installed and in use on SecurePlatform. You are concerned that the system might not be retaining your entries for the interfaces and routing configuration. You would like to verify your entries in the corresponding file(s) on SecurePlatform. Where can you view them? Give the BEST answer.
A. /etc/conf/route.C
B. /etc/sysconfig/network-scripts/ifcfg-ethx
C. /etc/sysconfig/network
D. /etc/sysconfig/netconf.C
Question #4
What is the command to upgrade a SecurePlatform NG with Application Intelligence R55 Management Server to R71?
A. fwm upgrade_tool
B. patch add cd
C. fw install_mgmt
D. upgrade_mgmt
Question #5
You want to generate a cpinfo file via CLI on a system running SecurePlatform. This will take about 40 minutes since the log files are also needed. What action do you need to take regarding timeout?
A. No action is needed because cpshell has a timeout of one hour by default.
B. Log in as the default user expert and start cpinfo.
C. Log in as admin, switch to expert mode, set the timeout to one hour with the command, idle 60, then start cpinto.
D. Log in as Administrator, set the timeout to one hour with the command idle 60 and start cpinfo.
Solutions:
| Question #1 Correct Answer: C | Question #2 Correct Answer: C | Question #3 Correct Answer: D | Question #4 Correct Answer: B | Question #5 Correct Answer: D |
792 Customer Reviews
Quality and ValueITCertKing Practice Exams are written to the highest standards of technical accuracy, using only certified subject matter experts and published authors for development - no all study materials.
Tested and ApprovedWe are committed to the process of vendor and third party approvals. We believe professionals and executives alike deserve the confidence of quality coverage these authorizations provide.
Easy to PassIf you prepare for the exams using our ITCertKing testing engine, It is easy to succeed for all certifications in the first attempt. You don't have to deal with all dumps or any free torrent / rapidshare all stuff.
Try Before BuyITCertKing offers free demo of each product. You can check out the interface, question quality and usability of our practice exams before you decide to buy.
