CheckPoint 156-215.75 Exam Syllabus Topics:
| Section | Weight | Objectives |
|---|---|---|
| Topic 1: Security Policy Management | 25% | - Object management and configuration - Policy installation and verification - Rule base creation and editing |
| Topic 2: Deployment Platforms & Management | 20% | - Security Gateway and Management Server configuration - SmartConsole and management clients - SecurePlatform / GAiA installation |
| Topic 3: Monitoring & Troubleshooting | 15% | - SmartView Tracker / SmartLog usage - Basic connectivity and policy troubleshooting - Traffic monitoring and logging |
| Topic 4: Virtual Private Networks (VPN) | 7% | - Site-to-site VPN concepts - VPN community configuration |
| Topic 5: Introduction to Check Point Technology | 15% | - Security architecture and components - Software Blades overview |
| Topic 6: User Management & Authentication | 8% | - Authentication methods - User databases and user groups |
| Topic 7: Network Address Translation (NAT) | 10% | - Automatic vs manual NAT rules - NAT configuration and verification |
CheckPoint Check Point Certified Security Administrator R75 Sample Questions:
Question 1
For VPN routing to succeed, what must be configured?
A. A single rule in the Rule Base must cover all traffic on the central (HUB) Security Gateway for the VPN domain.
B. At least two rules in the Rule Base must be created, one to cover traffic inbound and the other to cover traffic outbound on the central (HUB) Security Gateway.
C. VPN routing is not configured in the Rule Base or Community objects. Only the native-routing mechanism on each Gateway can direct the traffic via its VTI configured interfaces.
D. No rules need to be created; implied rules that cover inbound and outbound traffic on the central (HUB) Gateway are already in place from Policy > Properties > Accept VPN-1 Control Connections.
Question 2
An internal host initiates a session to and is set for Hide NAT behind the Security Gateway. The initiating traffic is an example of __________.
A. destination NAT
B. client side NAT
C. None of these
D. source NAT
Question 3
Whitfield Diffie and martin Hellman gave their names to what standard?
A. An algorithm that is used in IPsec QuickMode and as an additional option in IPsec QuickMode (PFS)
B. A Key Agreement / Derivation Protocol that constructs secure keys over an insecure channel.
C. A Key Exchange Protocol for the advanced Encryption Standard
D. An encryption scheme that makes pre-shared keys obsolete
Question 4
A client has created a new Gateway object that will be managed at a remote location. When the client attempts to install the Security Policy to the new Gateway object, the object does not appear in the Install On check box. What should you look for?
A. Anti-spoofing not configured on the interfaces on the Gateway object.
B. Secure Internal Communications (SIC) not configured for the object.
C. A Gateway object created using the Check Point > Security Gateway option in the network objects, dialog box, but still needs to configure the interfaces for the Security Gateway object.
D. A Gateway object created using the Check Point > Externally Managed VPN Gateway option from the Network Objects dialog box.
Question 5
Which feature in R75 permits blocking specific IP addresses for a specified time period?
A. HTTP Methods
B. Block Port Overflow
C. Local Interface Spoofing
D. Suspicious Activity Monitoring
Solutions:
| Question 1 Answer: A | Question 2 Answer: D | Question 3 Answer: B | Question 4 Answer: D | Question 5 Answer: D |
853 Customer Reviews
Quality and ValueITCertKing Practice Exams are written to the highest standards of technical accuracy, using only certified subject matter experts and published authors for development - no all study materials.
Tested and ApprovedWe are committed to the process of vendor and third party approvals. We believe professionals and executives alike deserve the confidence of quality coverage these authorizations provide.
Easy to PassIf you prepare for the exams using our ITCertKing testing engine, It is easy to succeed for all certifications in the first attempt. You don't have to deal with all dumps or any free torrent / rapidshare all stuff.
Try Before BuyITCertKing offers free demo of each product. You can check out the interface, question quality and usability of our practice exams before you decide to buy.
