You enable Automatic Static NAT on an internal host node object with a private IP address of
10.10.10.5, which is NATed into 216.216.216.5. (You use the default settings in Global Properties
/ NAT.)
When you run fw monitor on the R77 Security Gateway and then start a new HTTP connection
from host 10.10.10.5 to browse the Internet, at what point in the monitor output will you observe
the HTTP SYN-ACK packet translated from 216.216.216.5 back into 10.10.10.5?

You have configured Automatic Static NAT on an internal host-node object. You clear the box
Translate destination on client site from Global Properties > NAT. Assuming all other NAT settings
in Global Properties are selected, what else must be configured so that a host on the Internet can
initiate an inbound connection to this host?

You just installed a new Web server in the DMZ that must be reachable from the Internet. You
create a manual Static NAT rule as follows:
SourcE. Any || Destination: web_public_IP || ServicE. Any || Translated SourcE. original ||
Translated Destination: web_private_IP || ServicE. Original
“web_public_IP? is the node object that represents the new Web server’s public IP address.
“web_private_IP? is the node object that represents the new Web site’s private IP address. You
enable all settings from Global Properties > NAT.
When you try to browse the Web server from the Internet you see the error “page cannot be
displayed?. Which of the following is NOT a possible reason?

You are responsible for the configuration of MegaCorp’s Check Point Firewall. You need to allow
two NAT rules to match a connection. Is it possible? Give the BEST answer.

You have created a Rule Base for firewall, websydney. Now you are going to create a new policy
package with security and address translation rules for a second Gateway. What is TRUE about
the new package’s NAT rules?
Exhibit:

What is the default setting when you use NAT?

Which rule is responsible for the client authentication failure?
Exhibit:

Select the TRUE statements about the Rule Base shown?
Exhibit:
1) HTTP traffic from webrome to websingapore will be encrypted.
2) HTTP traffic from websingapore to webrome will be encrypted.
3) HTTP traffic from webrome to websingapore will be authenticated.
4) HTTP traffic from websingapore to webrome will be blocked.

You receive a notification that long-lasting Telnet connections to a mainframe are dropped after an
hour of inactivity. Reviewing SmartView Tracker shows the packet is dropped with the error:
Unknown established connection
How do you resolve this problem without causing other security issues? Choose the BEST
answer.

Which SmartConsole tool would you use to see the last policy pushed in the audit log?