Free CheckPoint 156-215-75 Exam Dumps Questions & Answers

The fw monitor utility is used to troubleshoot which of the following problems?

• A.  Address translation
• B.  User data base corruption
• C.  Log Consolidation Engine
• D.  Phase two key negotiation

Spoofing is a method of:

• A.  Hiding your firewall from unauthorized users.
• B.  Disguising an illegal IP address behind an authorized IP address through port address Translation.
• C.  Making packets appear as if they come from an authorized IP address
• D.  Detecting people using false or wrong authentication logins.

What is the primary benefit of using upgrade_export over either backup of snapshot?

• A.  upgrade_export is operating system independent and can be used when backup or snapshot is not available.
• B.  The backup and snapshot commands can take long time to run whereas upgrade_export will take a much shorter amount of time.
• C.  upgrade_export has an option to backup the system and SmartView tracker logs while back and snapshot will not.
• D.  upgrade_export will back up routing tables, hosts files, and manual ARP configurations, where backup and snapshot will not.

Secure Internal Communications (SIC) is completely NAT-tolerant because it is based on:

• A.  SIC names.
• B.  SIC is not NAT-tolerant.
• C.  MAC addresses.
• D.  IP addresses.

Your main internal network 10.10.10.0/24 allows all traffic to the Internet using Hide NAT. You also have a small network 10.10.20.0/24 behind the internal router. You want to configure the kernel to translate the source address only when network 10.10.20.0 tries to access the Internet for HTTP, SMTP, and FTP services. Which of the following configurations will allow this network to access the Internet?

• A.  Configure Automatic Static NAT on network 10.10.20.0/24
• B.  Configure Automatic Hide NAT on network 10.10.20.0/24 and then edit the Service column in the NAT Rule Base on the automatic rule
• C.  Configure one Manual Hide NAT rule for HTTP, FTP, and SMTP services for network 10.10.20.0/24
• D.  Configure three Manual Static NAT rules for network 10.10.20.0/24, one for each service