Question 1

Which statement describes what Identity Sharing is in Identity Awareness?

Options :

A : Management servers can acquire and share identities with Security Gateways

B : Users can share identities with other users

C : Security Gateways can acquire and share identities with other Security Gateways

D : Administrators can share identifies with other administrators

Answer: C

Question 2

In large organizations where there are a number of managed Check Point firewalls that generate a lot of logs it is recommended to install the Log Server on a dedicated computer. Which statement is FALSE?

Options :

A : The dedicated Log Server must be the same version as the Security Management Server.

B :

A Log Server has a SIC certificate which allows secure communication with the SMS and Security Gateways.

C : More than one Log Server can be installed.

D :

A dedicated SmartEvent server is required for a separate Log Server to be deployed in the SmartEvent server.

Answer: D

Question 3

You are going to perform a major upgrade. Which back up solution should you use to ensure your database can be restored on that device?

Options :

A : backup

B : logswitch

C : Database Revision

D : snapshot

Answer: D

Question 4

John is the administrator of a R80 Security Management server managing r R77.30 Check Point Security Gateway. John is currently updating the network objects and amending the rules using SmartConsole. To make John's changes available to other administrators, and to save the database before installing a policy, what must John do?

Options :

A : Logout of the session

B : File > Save

C : Install database

D : Publish the session

Answer: D

Question 5

If an administrator wants to restrict access to a network resource only allowing certain users to access it, and only when they are on a specific network what is the best way to accomplish this?

Options :

A :

Create an inline layer where the destination is the target network resource Define sub-rules allowing only specific sources to access the target resource

B :

Use a "New Legacy User at Location", specifying the LDAP user group that the users belong to, at the desired location

C : Create a rule allowing only specific source IP addresses access to the target network resource.

D :

Create an Access Role object, with specific users or user groups specified, and specific networks defined Use this access role as the "Source" of an Access Control rule

Answer: D

Free 156-215.81.20 Mock Exam – Practice Online Confidently

Buying Options: