PrepAway - Latest Free Exam Questions & Answers

Category: 156-215.71

Exam 156-215.71: Check Point Certified Security Administrator (CCSA) R71

how could you achieve these requirements?

Your perimeter Security Gateway’s external IP is 200 200.200.3. Your network diagram shows:(Exhibit)

Required: Allow only network 192.168.10.0 and 192.168.20.0 to go out to the Internet, using 200.200.200.5.
The local network 192.168.1.0/24 needs to use 200.200.200.3 to go out to the Internet.

Assuming you enable all the settings in the NAT page of Global Properties, how could you achieve these requirements?

Upon evaluation, your plan:

Your organization’s disaster recovery plan needs an update to the backup and restore section to reap the benefits of the new distributed R71 installation. Your plan must meet the following required and desired objectives:

Required Objective: The Security Policy repository must be backed up no less frequently than every 24 hours.
Desired Objective: The R71 components that enforce the Security Polices should be blocked up at least once a week.
Desired Objective: Back up R71 logs at least once a week

Your disaster recovery plan is as follows:

Use the cron utility to run the upgrade_ export command each night on the Security Management Servers.
Configure the organization’s routine backup software to back up the files created by the upgrade_ export command.
Configure the SecurePlatform backup utility to back up the Security Gateways every Saturday night
Use the cron utility to run the upgrade export: command each Saturday niqht on the log servers
Configure an automatic, nightly loq switch
Configure the organization’s routine backup software to back up the switched logs every night

Upon evaluation, your plan:

The TotallyCoolSecurity Company has a large security staff. Bob configured a new IPS Chicago_Profile for fw-ch

The TotallyCoolSecurity Company has a large security staff. Bob configured a new IPS Chicago_Profile for fw-chicago using Detect mode. After reviewing logs, Matt noticed that fw- chicago is not detecting any of the IPS protections that Bob had previously setup. Analyze the output below and determine how can correct the problem.

Which of the following is NOT a possible reason?

You just installed a new Web server in the DMZ that must be reachable from the Internet You create a manual Static NAT rule as follows:

"web_publicIP" is the node Object that represents the public IP address of the new Web server. "web_privateIP" is the node object that represents the new Web site’s private P address You enable all settings from Global Properties > NAT.When you try to browse the Web server from the Internet, you see the error ‘page cannot be displayed" Which of the following is NOT a possible reason?(Exhibit)


Page 28 of 34« First...1020...2627282930...Last »