Check Point Certified Security Administrator Set 4

Question - 15 Maximum mark : - 30

Home
All Exams
Check Point Certified Security Administrator Online Practice Exams
Check Point Certified Security Administrator Set 4

Which of these security policy changes optimize Security Gateway performance?

Use Automatic NAT rules instead of Manual NAT rules whenever possible ✘ Putting the least-used rule at the top of the Rule Base ✘ Using groups within groups in the manual NAT Rule Base ✘ Using domain objects in rules when possible ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

You enable Hide NAT on the network object, 10.1.1.0 behind the Security Gateway's external interface. You browse to from host, 10.1.1.10 successfully. You enable a log on the rule that allows 10.1.1.0 to exit the network. How many log entries do you see for that connection in SmartView Tracker?

Only one, outbound ✘ Two, one for outbound, one for inbound ✘ Only one, inbound ✘ Two, both outbound, one for the real IP connection and one for the NAT IP connection ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

Which of the following statements BEST describes Check Point's Hide Network Address Translation method?

Many-to-one NAT which implements PAT (Port Address Translation) for accomplishing both Source and Destination IP address translation ✘ Translates many destination IP addresses into one destination IP address ✘ Translates many source IP addresses into one source IP address ✘ One-to-one NAT which implements PAT (Port Address Translation) for accomplishing both Source andDestination IP address translation ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

Which Check Point address translation method allows an administrator to use fewer ISP-assigned IP addresses than the number of internal hosts requiring Internet connectivity?

Static Destination ✘ Hide ✘ Dynamic Destination ✘ Static Source ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

NAT can be implemented on which of the following lists of objects?

Host, Network ✘ Host, User ✘ Domain, Network ✘ Network, Dynamic Object ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

You want to implement Static Destination NAT in order to provide external, Internet users access to an internal Web Server that has a reserved (RFC 1918) IP address. You have an unused valid IP address on the network between your Security Gateway and ISP router. You control the router that sits between the external interface of the firewall and the Internet. What is an alternative configuration if proxy ARP cannot be used on your Security Gateway?

Place a static host route on the firewall for the valid IP address to the internal Web server. ✘ Place a static ARP entry on the ISP router for the valid IP address to the firewall's external address. ✘ Publish a proxy ARP entry on the ISP router instead of the firewall for the valid IP address. ✘ Publish a proxy ARP entry on the internal Web server instead of the firewall for the valid IP address. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

After implementing Static Address Translation to allow Internet traffic to an internal Web Server on your DMZ, you notice that any NATed connections to that machine are being dropped by anti- spoofing protections. Which of the following is the MOST LIKELY cause?

The Global Properties setting Translate destination on client side is checked. But the topology on the
external interface is set to External.Change topology to Others +. ✘ The Global Properties setting Translate destination on client side is unchecked. But the topology on theexternal interface is set to Others +. Change topology to External ✘ The Global Properties setting Translate destination on client side is checked But the topology on theDMZ interface is set to Internal -Network defined by IP and Mask Uncheck the Global Properties setting Translate destination on client side ✘ The Global Properties setting Translate destination on client side is unchecked. But the topology on theDMZ interface is set to Internal - Network defined by IP and Mask. Check the Global Properties setting
Translate destination on client side. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

Which NAT option applicable for Automatic NAT applies to Manual NAT as well?

Allow bi-directional NAT ✘ Automatic ARP configuration ✘ Enable IP Pool NAT ✘ Translate destination on client-side ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

Your main internal network 10.10.10.0/24 allows all traffic to the Internet using Hide NAT. You also have a small network 10.10.20.0/24 behind the internal router. You want to configure the kernel to translate the source address only when network 10.10.20.0 tries to access the Internet for HTTP, SMTP, and FTP services. Which of the following configurations will allow this network to access the Internet?

Configure three Manual Static NAT rules for network 10.10.20.0/24, one for each service ✘ Configure one Manual Hide NAT rule for HTTP, FTP, and SMTP services for network 10.10.20.0/24 ✘ Configure Automatic Hide NAT on network 10.10.20.0/24 and then edit the Service column in the NATRule Base on the automatic rule ✘ Configure Automatic Static NAT on network 10.10.20.0/24 ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

10.

You have three servers located in a DMZ, using private IP addresses. You want internal users from 10.10.10.x to access the DMZ servers by public IP addresses. Internal_net 10.10.10.x is configured for Hide NAT behind the Security Gateway's external interface. What is the best configuration for 10.10.10.x users to access the DMZ servers, using the DMZ servers public IP addresses?

When connecting to the Internet, configure manual Static NAT rules to translate the DMZ servers ✘ When the source is the internal network 10.10.10.x, configure manual static NAT rules to translate theDMZ servers. ✘ When connecting to internal network 10 10.10 x. configure Hide NAT for the DMZ servers. ✘ When connecting to the internal network 10.10.10x, configure Hide Nat for the DMZ network behind theDMZ interface of the Security Gateway ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

Prev Next

Congratulations

you have successfully completed the test

Back to Question View Result

Detail Form

We will send your result on your email id and phone no. please fill detail

Name

Email ID Note: Report will be send to the above Email ID

Phone No

Check Point Certified Security Administrator Set 4

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

COMPANY

Products

OTHERS

Partner