Check Point-Certified Security Administrator NGX Set 3

Question - 15 Maximum mark : - 29

Home
All Exams
Check Point-Certified Security Administrator NGX Online Practice Exams
Check Point-Certified Security Administrator NGX Set 3

You find a suspicious connection from a problematic host. You decide that you want to block everything from that whole network, not just the problematic host. You want to block this for an hour while you investigate further, but you do not want to add any rules to the Rule Base. How do you achieve this?

Create a Suspicious Activity Rule in SmartView Monitor. ✘ Select Block intruder from the Tools menu in SmartView Tracker. ✘ Use dbedit to script the addition of a rule directly into the Rule Bases_5_0.fws configuration file. ✘ Add a temporary rule using SmartDashboard and select hide rule. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

You are trying to save a custom log query in R76 SmartView Tracker, but getting the following error: Could not save (Error: Database is Read Only) Which of the following is a likely explanation for this?

You do not have OS write permissions on the local SmartView Tracker PC in order to save the custom query locally. ✘ You do not have the explicit right to save a custom query in your administrator permission profile underSmartConsole customization. ✘ Another administrator is currently connected to the Security Management Server with read/writepermissions which impacts your ability to save custom log queries to the Security Management Server. ✘ You have read-only rights to the Security Management Server database. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

Which SmartConsole tool would you use to see the last policy pushed in the audit log?

SmartView Tracker ✘ SmartView Status ✘ None, SmartConsole applications only communicate with the Security Management Server. ✘ SmartView Server ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

SmartView Tracker logs the following Security Administrator activities, EXCEPT:

Object creation, deletion, and editing ✘ Rule Base changes ✘ Administrator login and logout ✘ Tracking SLA compliance ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

Your company enforces a strict change control policy. Which of the following would be MOST effective for quickly dropping an attacker's specific active connection?

Intrusion Detection System (IDS) Policy install ✘ SAM - Suspicious Activity Rules feature of SmartView Monitor ✘ Block Intruder feature of SmartView Tracker ✘ Change the Rule Base and install the Policy to all Security Gateways ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

Which of the following are available SmartConsole clients which can be installed from the R76 Windows CD? Read all answers and select the most complete and valid list.

SmartView Tracker, CPINFO, SmartUpdate ✘ SmartView Tracker, SmartDashboard, SmartLSM, SmartView Monitor ✘ SmartView Tracker, SmartDashboard, CPINFO, SmartUpdate, SmartView Status ✘ Security Policy Editor, Log Viewer, Real Time Monitor GUI ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

Your boss wants you to closely monitor an employee suspected of transferring company secrets to the competition. The IT department discovered the suspect installed a WinSCP client in order to use encrypted communication. Which of the following methods is BEST to accomplish this task?

Use SmartView Tracker to follow his actions by filtering log entries that feature the WinSCP destination port. Then, export the corresponding entries to a separate log file for documentation. ✘ Watch his IP in SmartView Monitor by setting an alert action to any packet that matches your Rule Baseand his IP address for inbound and outbound traffic. ✘ Send the suspect an email with a keylogging Trojan attached, to get direct information about hiswrongdoings. ✘ Use SmartDashboard to add a rule in the firewall Rule Base that matches his IP address, and those ofpotential targets and suspicious protocols. Apply the alert action or customized messaging. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

You find a suspicious FTP site trying to connect to one of your internal hosts. How do you block it in real time and verify it is successfully blocked? Highlight the suspicious connection in SmartView Tracker:

Log mode. Block it using Tools > Block Intruder menu. Observe in the Log mode that the suspicious connection does not appear again in this SmartView Tracker view. ✘ Active mode. Block it using Tools > Block Intruder menu. Observe in the Active mode that thesuspicious connection is listed in this SmartView Tracker view as "dropped". ✘ Log mode. Block it using Tools > Block Intruder menu. Observe in the Log mode that the suspiciousconnection is listed in this SmartView Tracker view as "dropped". ✘ Active mode. Block it using Tools > Block Intruder menu. Observe in the Active mode that thesuspicious connection does not appear again in this SmartView Tracker view. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

Identity Awareness is implemented to manage access to protected resources based on a user's _____________.

Time of connection ✘ Application requirement ✘ Identity ✘ Computer MAC address ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

10.

Which of the following allows administrators to allow or deny traffic to or from a specific network based on the user's credentials?

Access Role ✘ Access Rule ✘ Access Policy ✘ Access Certificate ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

Prev Next

Congratulations

you have successfully completed the test

Back to Question View Result

Detail Form

We will send your result on your email id and phone no. please fill detail

Name

Email ID Note: Report will be send to the above Email ID

Phone No

Check Point-Certified Security Administrator NGX Set 3

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

COMPANY

Products

OTHERS

Partner