Get real 156-215-71 exam questions for better preparation

CheckPoint 156-215-71 Exam Overview:

CheckPoint 156-215-71 Exam Syllabus Topics:

CheckPoint Check Point Certified Security Administrator R71 Sample Questions:

Question 1

You intend to upgrade a Check Point Gateway from R65 to R71. Prior to upgrading, you want to backup the Gateway should there be any problems with the upgrade. Which of the following allows for the Gateway configuration to be completely backed up into a manageable size in the least amount of time?

A. Snapshot
B. Database_revision
C. Backup
D. Upgrade_export

Question 2

Your company enforces a strict change control policy. Which of the following would be MOST effective for quickly dropping an attacker's specific active connection?

A. Intrusion Detection System (IDS) Policy install
B. Block Intruder feature of SmartView Tracker
C. Change the Rule Base and install the Policy to all Security Gateways
D. SAM - Suspicious Activity Rules feature of SmartView Monitor

Question 3

Which command line interface utility allows the administrator to verify the name and timestamp of the Security Policy currently installed on a firewall module?

A. fw ver
B. fw ctl pstat
C. fw stat
D. cpstat fwd

Question 4

John currently administers a network using NGX R65.4 on the Security Management Server and NGX R65.2.100 (the VOIP release with the VOIP plug-ins enabled). He wants to upgrade to R71 to get the benefits of Check Point's Software Blades. What would be the best way of doing this?

A. This can not be done yet as R71 can not manage NGX R65 Gateways due to SmartDefense and IPS mismatch problems.
B. Just insert the R71 CD-ROM and run the in-place upgrade.
C. Run upgrade_export on R65 management, then install R71 on this machine and run upgrade_import and re-license the systems to use software blades.
D. This is not supported today as currently the VOIP Software Blade and VOIP plug-in is not available in R71.

Question 5

An internal router is sending UDP keep-alive packets that are being encapsulated with GRE and sent through your R70 Security Gateway to a partner site. A rule for GRE traffic is configured for ACCEPT/LOG. Although the keep-alive packets are being sent every 1 minute, a search through the SmartView Tracker logs for GRE traffic only shows one entry for the whole day (early in the morning after a Policy install).
Your partner site indicates they are successfully receiving the GRE encapsulated keep-alive packets on the 1-minute interval.
If GRE encapsulation is turned off on the router, SmartView Tracker shows a log entry for the UDP keep-alive packet every minute.
Which of the following is the BEST explanation for this behavior?

A. The Log Server is failing to log GRE traffic property because it is VPN traffic. Disable all VPN configurations to the partner site to enable proper logging.
B. The Log Server log unification process unifies all log entries from the Security Gateway on a specific connection into only one log entry in the SmartView Tracker. GRE traffic has a 10 minute session timeout, thus each keep-alive packet is considered part of the original logged connection at the beginning of the day.
C. The setting Log does not capture this level of details for GRE Set the rule tracking a action to audit since certain types of traffic can only tracked this way.
D. The log unification process is using a LUUID (Log Unification Unique Identification) that has become corrupt. Because it is encrypted, the R71 Security Gateway cannot distinguish between GRE sessions. This is a known issue with the GRE. Use IPSEC instead of the non GRE protocol for encapsulation.

Solutions: