Free CheckPoint 156-215-71 Exam Dumps Questions & Answers

You are creating an output file with the following command: fw monitor -e "accept (src=10.20.30.40 or dst=10.20.30.40);" -o ~/output
Which tool do you use to analyze this file?

• A.You can analyze it with Wireshark or Ethereal.
• B.The output file format is CSV, so you can use MS Excel to analyze it.
• C.You cannot analyze it with any tool as the syntax should be:fw monitor -e accept ([12,b]=10.20.30.40 or [16,b]=10.20.30.40); -o ~/output.
• D.You can analyze the output file with any ASCI editor.

You wish to view the current state of the customer's VPN tunnels, including those that are down and destroyed. Which SmartConsole application will provide you with this information?

• A.SmartView Status
• B.SmartUpdate
• C.SmartView Tracker
• D.SmartView Monitor

You install and deploy SecurePlatform with default settings. You allow Visitor Mode in the Remote Access properties of the Gateway object and install policy, but SecureClient refuses to connect. What is the cause of this?

• A.The WebUI on SecurePlatform runs on port 443 (HTTPS). When you configure Visitor Mode it cannot bind to default port 443, because it's used by another program (WebUI). You need to change the WebUI port, or run Visitor Mode on a different port.
• B.Office mode is not configured.
• C.You need to start SSL Network Extender first, than use Visitor Mode.
• D.Set Visitor Mode in Policy > Global Properties / Remote-Access / VPN - Advanced.

For VPN routing to succeed, what must be configured?

• A.A single rule in the Rule Base must cover all traffic on the central (HUB) Security Gateway for the VPN domain.
• B.At least two rules in the Rule Base must be created, one to cover traffic inbound and the other to cover traffic outbound on the central (HUB) Security Gateway.
• C.No rules need to be created; implied rules that cover inbound and outbound traffic on the central (HUB) Gateway are already in place from Policy > Properties > Accept VPN-1 Control Connections.
• D.VPN routing is not configured in the Rule Base or Community objects. Only the native-routing mechanism on each Gateway can direct the traffic via its VTI configured interfaces.

Which of the following statements about Bridge mode is TRUE?

• A.Assuming a new installation, bridge mode requires changing the existing IP routing of the network.
• B.All ClusterXL modes are supported.
• C.A bridge must be configured with a pair of interfaces.
• D.When managing a Security Gateway in Bridge mode, it is possible to use a bridge interface for Network Address Translation.