CheckPoint Check Point Certified Security Administrator R75 Sample Questions:

1. Which of the following is an authentication method used by Identity Awareness?

A) PKI
B) SSL
C) LDAP
D) RSA

2. You are responsible for the configuration of MegaCorp's Check Point Firewall. You need to allow two NAT rules to match a connection. Is it possible? Give the BEST answer.

A) No, it is not possible to have more one NAT rule matching a connection. When the firewall receives a packet belonging to a concentration, it compares it against the first rule in the Rule Base, then the second rule, and so on When it finds a rule that matches, it stops checking and applies that rule.
B) Yes, it is possible to have two NAT rules which match a connection, but only when using Automatic NAT (bidirectional NAT).
C) Yes, there are always as many active NAT rules as there are connections.
D) Yes, it is possible to have two NAT rules which match a connection, but only in using Manual NAT (bidirectional NAT)

3. You are Security Administrator for a large call center. The management team is concerned that employees may be installing and attempting to use peer-to-peer file-sharing utilities, during their lunch breaks. The call center's network is protected by an internal Security Gateway, configured to drop peer-to-peer file-sharing traffic. Which option do you use to determine the number of packets dropped by each Gateway?

A) SmartView Status
B) SmartView Tracker
C) SmartView Monitor
D) SmartDashboard

4. Your company has two headquarters, one in London, and one in New York. Each office includes several branch offices. The branch offices need to communicate with the headquarters in their country, not with each other, and only the headquarters need to communicate directly. What is the BEST configuration for establishing VPN Communities for this company? VPN Communities comprised of:

A) Three mesh Communities: One for London headquarters and its branches, one for New York headquarters and its branches, and one f;or London and New York headquarters.
B) Two star and one mesh Community: One star Community is set up for each site, with headquarters as the center of the Community and its branches as satellites. The mesh Community includes only New York and London Gateways.
C) Two mesh and one star Community One mesh Community is set up for each of the headquarters and its branch offices The star Community is configured with London as the center of the Community and New York is the satellite.
D) One star Community with the option to "mesh" the center of the star: New York and London Gateways added to the center of the star with the mesh canter Gateways option checked, all London branch offices defined m one satellite window, but all New York branch offices defined m another satellite window.

5. What happens if Web Server is checked?

A) An implied rule will be added allowing HTTP request from and to the host.
B) Anti-virus settings will be applied to the host.
C) An implied rule will be added allowing HTTP requests to the host.
D) Web Intelligence will be applied to the host.

Solutions: