156-215.77 Questions Bank

Check Point Certified Security Administrator Questions and Answers

Question 37

Which of the following actions take place in IKE Phase 2 with Perfect Forward Secrecy disabled?

Symmetric IPsec keys are generated.

Each Security Gateway generates a private Diffie-Hellman (DH) key from random pools.

The DH public keys are exchanged.

Peers authenticate using certificates or preshared secrets.

Question 38

How many packets does the IKE exchange use for Phase 1 Main Mode?

Question 39

Which of the following is a viable consideration when determining Rule Base order?

Grouping IPS rules with dynamic drop rules

Placing more restrictive rules before more permissive rules

Grouping authentication rules with QOS rules

Grouping reject and drop rules after the Cleanup Rule

Question 40

Certificates for Security Gateways are created during a simple initialization from _____________.

sysconfig

The ICA management tool

SmartUpdate

SmartDashboard