CheckPoint 156-215.71 Exam Syllabus Topics:
| Section | Weight | Objectives |
|---|---|---|
| Topic 1: Security Policy Management | 20% | - Network objects and groups - Access control rule base - Policy installation and verification - SmartDashboard interface |
| Topic 2: System Maintenance and Administration | 10% | - Backup and restore procedures - User management and authentication - Software updates and upgrades |
| Topic 3: Monitoring and Troubleshooting | 15% | - Packet inspection and traffic analysis - SmartView Monitor for system status - SmartView Tracker for logs |
| Topic 4: Introduction to Check Point Technology | 10% | - Software blades and licensing - Check Point architecture and components |
| Topic 5: Network Address Translation (NAT) | 15% | - Automatic and manual NAT - Global properties for NAT - NAT rule configuration |
| Topic 6: Deployment and Installation | 15% | - Security Gateway installation and configuration - Distributed and standalone deployment - Security Management Server setup |
| Topic 7: IPSec VPN Configuration | 15% | - Site-to-site VPN tunnels - Remote access VPN - VPN authentication and encryption |
CheckPoint Check Point Certified Security Administrator R71 Sample Questions:
Question #1
Tom has been tasked to install Check Point R71 in a distributed deployment. Before Tom installs the systems this way, how many machines will he need if he does not include a SmartConsole machine in his calculations?
A. One machine
B. One machine, but it needs to be installed using SecurePlatform for compatibility purposes
C. Three machines
D. Two machines
Question #2
Which of the following are authentication methods that Security Gateway R71 uses to validate connection attempts? Select the response below that includes the MOST complete list of valid authentication methods.
A. Connection, Proxied, Session
B. User, Client, Session
C. Connection, User, Client
D. Proxied, User, Dynamic, Session
Question #3
Which of the following is a viable consideration when determining Rule Base order?
A. Grouping rules by date of creation
B. Grouping functionally related rules together
C. Grouping reject and drop rules after the cleanup rule
D. Grouping authentication rules with address translation rules
Question #4
Which command line interface utility allows the administrator to verify the name and timestamp of the Security Policy currently installed on a firewall module?
A. fw ctl pstat
B. cpstat fwd
C. fw ver
D. fw stat
Question #5
When using SecurePlatform, it might be necessary to temporarily change the MAC address of the interface eth 0 to 00:0C:29:12:34:56. After restarting the network the old MAC address should be active. How do you configure this change?
A. As expert user, issue the command: # IP link set eth0 addr 00:0C:29:12:34:56
B. As expert user, issue these commands: # IP link set eth0 down # IP link set eth0 addr 00:0C:29:12:34:56 # IP link set eth0 up
C. Edit the file /etc/sysconfig/netconf.c and put the new MAC address in the field (conf : (conns
:( conn :hwaddr ("00:0C:29:12:34:56")
D. Open the WebUI, select Network > Connections > eth0. Place the new MAC address in the field Physical Address, and press Apply to save the settings.
Solutions:
| Question #1 Answer: D | Question #2 Answer: B | Question #3 Answer: B | Question #4 Answer: D | Question #5 Answer: B |
1182 Customer Reviews
Quality and ValueITCertKing Practice Exams are written to the highest standards of technical accuracy, using only certified subject matter experts and published authors for development - no all study materials.
Tested and ApprovedWe are committed to the process of vendor and third party approvals. We believe professionals and executives alike deserve the confidence of quality coverage these authorizations provide.
Easy to PassIf you prepare for the exams using our ITCertKing testing engine, It is easy to succeed for all certifications in the first attempt. You don't have to deal with all dumps or any free torrent / rapidshare all stuff.
Try Before BuyITCertKing offers free demo of each product. You can check out the interface, question quality and usability of our practice exams before you decide to buy.
