Winter Special - Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: top65certs

CCSE Update 156-915.80 Syllabus Exam Questions Answers

Page: 11 / 19
Total 502 questions

Check Point Certified Security Expert Update - R80.10 Questions and Answers

Question 41

A Web server behind the Security Gateway is set to Automatic Static NAT. Client side NAT is not checked in the Global Properties. A client on the Internet initiates a session to the Web Server. Assuming there is a rule allowing this traffic, what other configuration must be done to allow the traffic to reach the Web server?

Options:

A.

Automatic ARP must be uncheckedin the Global Properties.

B.

Nothing else must be configured.

C.

A static route must be added on the Security Gateway to the internal host.

D.

A static route for the NAT IP must be added to the Gateway’s upstream router.

Question 42

Which command would provide the most comprehensive diagnostic information to Check Point Technical Support?

Options:

A.

fw cpinfo

B.

cpinfo -o date.cpinfo.txt

C.

diag

D.

cpstat - date.cpstat.txt

Question 43

Where can you find the Check Point’s SNMP MIB file?

Options:

A.

$CPDIR/lib/snmp/chkpt.mib

B.

$FWDIR/conf/snmp.mib

C.

It is obtained only by request from the TAC.

D.

There is no specific MIB file for Check Point products.

Question 44

Select the correct statement about Secure Internal Communications (SIC) Certificates. SIC Certificates:

Options:

A.

Are used for securing internal network communications between the SmartDashboard and the Security Management Server.

B.

For R75 Security Gateways are created during the Security Management Server installation.

C.

Decrease network security by securing administrative communication among the Security Management Servers and the Security Gateway.

D.

Uniquely identify Check Point enabled machines; they have the same function as VPN Certificates.

Page: 11 / 19
Total 502 questions