Online Access Free 156-215.13 Exam Questions

What physical machine must have access to the User Center public IP address when checking for new packages with SmartUpdate?

• A.A Security Gateway retrieving the new upgrade package
• B.SmartUpdate installed Security Management Server PC
• C.SmartUpdate Repository SQL database Server
• D.SmartUpdate GUI PC

The technical-support department has a requirement to access an intranet server. When configuring a User Authentication rule to achieve this, which of the following should you remember?

• A.You can only use the rule for Telnet, FTP, SMTP, and rlogin services.
• B.Once a user is first authenticated, the user will not be prompted for authentication again until logging out.
• C.You can limit the authentication attempts in the User Properties' Authentication tab.
• D.The Security Gateway first checks if there is any rule that does not require authentication for this type of connection before invoking the Authentication Security Server.

Your shipping company uses a custom application to update the shipping distribution database. The custom application includes a service used only to notify remote sites that the distribution database is malfunctioning. The perimeter Security Gateway's Rule Base includes a rule to accept this traffic. Since you are responsible for multiple sites, you want notification by a text message to your cellular phone, whenever traffic is accepted on this rule. Which of the following would work BEST for your purpose?

• A.SNMP trap
• B.SmartView Monitor Threshold
• C.User-defined alert script
• D.Logging implied rules

Which of the following is a viable consideration when determining Rule Base order?

• A.Grouping functionally related rules together
• B.Grouping reject and drop rules after the Cleanup Rule
• C.Grouping authentication rules with address-translation rules
• D.Grouping rules by date of creation

A client has created a new Gateway object that will be managed at a remote location. When the client attempts to install the Security Policy to the new Gateway object, the object does not appear in the Install On check box. What should you look for?

• A.A Gateway object created using the Check Point > Security Gateway option in the network objects, dialog box, but still needs to configure the interfaces for the Security Gateway object.
• B.Secure Internal Communications (SIC) not configured for the object.
• C.Anti-spoofing not configured on the interfaces on the Gateway object.
• D.A Gateway object created using the Check Point > Externally Managed VPN Gateway option from the Network Objects dialog box.