Online Access Free 156-215.76 Exam Questions

Charles requests a Website while using a computer not in the net_singapore network.

What is TRUE about his location restriction?

• A.Source setting in User Properties always takes precedence.
• B.Source setting in Source column always takes precedence.
• C.It depends on how the User Auth object is configured; whether User Properties or Source Restriction takes precedence.
• D.As location restrictions add up, he would be allowed from net_singapore and net_sydney.

The customer has a small Check Point installation which includes one Windows 2008 server as the SmartConsole and a second server running SecurePlatform as both Security Management Server and the Security Gateway. This is an example of a(n):

• A.Stand-Alone Installation
• B.Hybrid Installation
• C.Distributed Installation
• D.Unsupported configuration

An internal router is sending UDP keep-alive packets that are being encapsulated with GRE and sent through your R76 Security Gateway to a partner site. A rule for GRE traffic is configured for ACCEPT/LOG. Although the keep-alive packets are being sent every minute, a search through the SmartView Tracker logs for GRE traffic only shows one entry for the whole day (early in the morning after a Policy install).
Your partner site indicates they are successfully receiving the GRE encapsulated keep-alive packets on the 1-minute interval.
If GRE encapsulation is turned off on the router, SmartView Tracker shows a log entry for the UDP keep-alive packet every minute.
Which of the following is the BEST explanation for this behavior?

• A.The setting Log does not capture this level of detail for GRE. Set the rule tracking action to Audit since certain types of traffic can only be tracked this way.
• B.The Log Server is failing to log GRE traffic properly because it is VPN traffic. Disable all VPN configuration to the partner site to enable proper logging.
• C.The Log Server log unification process unifies all log entries from the Security Gateway on a specific connection into only one log entry in the SmartView Tracker. GRE traffic has a 10 minute session timeout, thus each keep-alive packet is considered part of the original logged connection at the beginning of the day.
• D.The log unification process is using a LUUID (Log Unification Unique Identification) that has become corrupt. Because it is encrypted, the R75 Security Gateway cannot distinguish between GRE sessions. This is a known issue with GRE. Use IPSEC instead of the nonstandard GRE protocol for encapsulation.

To qualify as an Identity Awareness enabled rule, which column MAY include an Access Role?

• A.Action
• B.Track
• C.User
• D.Destination

Which port must be allowed to pass through enforcement points in order to allow packet logging to operate correctly?

• A.258
• B.514
• C.256
• D.257