Check Point-Certified Security Administrator NGX Set 12

Question - 15 Maximum mark : - 28

Home
All Exams
Check Point-Certified Security Administrator NGX Online Practice Exams
Check Point-Certified Security Administrator NGX Set 12

Which feature or command provides the easiest path for Security Administrators to revert to earlier versions of the same Security Policy and objects configuration?

upgrade_export/upgrade_import ✘ dbexport/dbimport ✘ Database Revision Control ✘ Policy Package management ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

Your Security Management Server fails and does not reboot. One of your remote Security Gateways managed by the Security Management Server reboots. What occurs with the remote Gateway after reboot?

Since the Security Management Server is not available, the remote Gateway cannot fetch the Security Policy. Therefore, all traffic is allowed through the Gateway. ✘ Since the Security Management Server is not available, the remote Gateway cannot fetch the SecurityPolicy. Therefore, no traffic is allowed through the Gateway. ✘ The remote Gateway fetches the last installed Security Policy locally and passes traffic normally. TheGateway will log locally, since the Security Management Server is not available. ✘ Since the Security Management Server is not available, the remote Gateway uses the local SecurityPolicy, but does not log traffic. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

How can you configure an application to automatically launch on the Security Management Server when traffic is dropped or accepted by a rule in the Security Policy?

Custom scripts cannot be executed through alert scripts. ✘ Pop-up alert script ✘ SNMP trap alert script ✘ User-defined alert script ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

Of the following, what parameters will not be preserved when using Database Revision Control?

3, 4, 5, 6, 9, 12, 13 ✘ 1, 2, 8, 10, 11 ✘ 5, 6, 9, 12, 13 ✘ 2, 4, 7, 10, 11 ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

You are about to test some rule and object changes suggested in an R76 news group. Which backup solution should you use to ensure the easiest restoration of your Security Policy to its previous configuration after testing the changes?

Database Revision Control ✘ Manual copies of the directory $FWDIR/conf ✘ upgrade_export command ✘ SecurePlatform backup utilities ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

Which R76 feature or command allows Security Administrators to revert to earlier Security Policy versions without changing object configurations?

Policy Package management ✘ Database Revision Control ✘ upgrade_export/upgrade_import ✘ fwm dbexport/fwm dbimport ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

What must a Security Administrator do to comply with a management requirement to log all traffic accepted through the perimeter Security Gateway?

Install the View Implicit Rules package using SmartUpdate. ✘ Define two log servers on the R76 Gateway object. Enable Log Implied Rules on the first log server.Enable Log Rule Base on the second log server. Use SmartReporter to merge the two log server records into the same database for HIPPA log audits. ✘ In Global Properties > Reporting Tools check the box Enable tracking all rules (including rules markedas None in the Track column). Send these logs to a secondary log server for a complete logging history. Use your normal log server for standard logging for troubleshooting. ✘ Check the Log Implied Rules Globally box on the R76 Gateway object. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

An internal router is sending UDP keep-alive packets that are being encapsulated with GRE and sent through your R76 Security Gateway to a partner site. A rule for GRE traffic is configured for ACCEPT/LOG. Although the keep-alive packets are being sent every minute, a search through the SmartView Tracker logs for GRE traffic only shows one entry for the whole day (early in the morning after a Policy install). Your partner site indicates they are successfully receiving the GRE encapsulated keep-alive packets on the 1-minute interval. If GRE encapsulation is turned off on the router, SmartView Tracker shows a log entry for the UDP keep- alive packet every minute. Which of the following is the BEST explanation for this behavior?

The Log Server log unification process unifies all log entries from the Security Gateway on a specific connection into only one log entry in the SmartView Tracker. GRE traffic has a 10 minute session timeout, thus each keep-alive packet is considered part of the original logged connection at the beginning of the day. ✘ The log unification process is using a LUUID (Log Unification Unique Identification) that has becomecorrupt. Because it is encrypted, the R75 Security Gateway cannot distinguish between GRE sessions. This is a known issue with GRE. Use IPSEC instead of the non-standard GRE protocol for encapsulation. ✘ The setting Log does not capture this level of detail for GRE. Set the rule tracking action to Audit sincecertain types of traffic can only be tracked this way. ✘ The Log Server is failing to log GRE traffic properly because it is VPN traffic. Disable all VPNconfiguration to the partner site to enable proper logging. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

Which port must be allowed to pass through enforcement points in order to allow packet logging to operate correctly?

256 ✘ 514 ✘ 258 ✘ 257 ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

10.

You are the Security Administrator for MegaCorp and would like to view network activity using SmartReporter. You select a standard predefined report. As you can see here, you can select the london Gateway. When you attempt to configure the Express Report, you are unable to select this Gateway. What is the reason for this behavior? Give the BEST answer.

You must enable the Eventia Express Mode on the london Gateway. ✘ You must enable Monitoring in the london Gateway object's General Properties. ✘ You have the license for Eventia Reporter in Standard mode only. ✘ You must enable the Express Mode inside Eventia Reporter. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

Prev Next

Congratulations

you have successfully completed the test

Back to Question View Result

Detail Form

We will send your result on your email id and phone no. please fill detail

Name

Email ID Note: Report will be send to the above Email ID

Phone No

Check Point-Certified Security Administrator NGX Set 12

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

COMPANY

Products

OTHERS

Partner