CheckPoint VPN-1/FireWall-1 Management I NG.

Transcription

1 CheckPoint VPN-1/FireWall-1 Management I NG

2 QUESTION: 228 In Log Viewer GUI what option do you select to delete all entries in the log file, regardless of which entries are selected? A. Kill B. Delete C. Purge D. Cut E. Remove Answer: C QUESTION: 229 rules, defined in a firewall object's properties, are enforced before any rule in the Security Policy's Rule Base. A. Anti-spoofing B. Explicit C. Implicit D. Implicit drop E. None of the above QUESTION: 230 What happens to current log file when you create a new log file? A. New Log file cannot be created when current file is opened. B. The current file is appended to the new file. C. The current Log file is opened in addition to the new Log file. D. The current Log file is closed and written to disk with a name that contains the current 140

3 date and time, as only one Log file can be opened in the Log Viewer at a time. E. The current file is lost. Answer: D QUESTION: 231 The rules that you define in the Rule Base are known as rules. A. Implicit B. Explicit C. Properties setup D. Stealth E. Cleanup QUESTION: 232 The maintains the VPN-1/Firewall-1 NG database. The database includes network object definitions, user definitions, security policy, and the log files. A. Firewall Module B. Management Server C. Client Module D. Server Module E. None of the above QUESTION: 233 What command uninstalls the currently loaded Inspection Code from selected targets? A. cp load B. cp putkey C. cp unload 141

4 D. cp install E. cp uninstall Answer: C QUESTION: 234 Why would an administrator want to negate a selected object in the Rule Base? A. To include all objects or users and exclude a specific object or user B. To include a specific object or user C. To nest a specific object or user D. To connect to any destination using TCP/IP service. E. To connect to any destination using ftp service. QUESTION: 235 What NAT type translates valid IP addresses to invalid IP addresses for connections initiated by external clients? A. Static Source NAT B. Static Destination NAT C. Hide Mode D. Static NAT E. None of the above QUESTION: 236 Check Point Registry, cpstart/cpstop, cpshared Daemon, Watch Dog for critical Services, and cpconfig are components of what? A. CPShared B. Enforcement Module 142

5 C. sic D. SecureUpdate E. Management Module QUESTION: 237 What two services or protocols can Client Authentication uses to initiate connection to the firewall? (Select two.) A. TELNET and HTTP B. TELNET and RPC C. HTTP and HTTPS D. HTTP and UDP E. HTTP and TCP QUESTION: 238 Why must Client Authentication rule be placed above Stealth rule in the Rule Base? A. In order that they can have access to the local Management Server B. In order that they can have access to the Management Server C. In order that they can have access to the local firewall D. In order that they can have access to the Policy Editor E. In order that they can have access to the OS Answer: C QUESTION: 239 Which of the following ports would TELNET service use for communications? A. 21 B

6 C. 25 D. 29 E. 30 QUESTION: 240 What is the advantage of a VPN-1/ Firewall-1 NG password authentication scheme over the OS password authentication scheme? A. The user does not require an OS account on the gateway to use a VPN-l/ Firewall-1 password. B. The user does require an OS account on the gateway to use a VPN-l/ Firewall-I password. C. The VPN-I/ Firewall-I password has no advantage over OS password. D. Using VPN-I/ Firewall-I password will allow the authenticating user to bypass the gateway. QUESTION: 241 SecureUpdateLicense Manager supports which two types of licenses for Check Point products? (Select two.) A. PE-bound B. Firewall-I bound C. OS-bound D. Management-bound E. Module-bound Answer: D, E 144

7 For More exams visit Kill your exam at First Attempt...Guaranteed!