CheckPoint 156-215.81 Quiz 14 Topic 8 Questions 66-70

Question: 1

Katie has been asked to do a backup on the Blue Security Gateway. Which command would accomplish this in the Gaia CLI?

ABlue > add local backup

BExpert&Blue#add local backing

CBlue > set backup local

DBlue > add backup local

Show Answer

Question: 2

You want to establish a VPN, using certificates. Your VPN will exchange certificates with an external partner. Which of the following activities sh you do first?

ACreate a new logical-server object to represent your partner's CA

BExchange exported CA keys and use them to create a new server object to represent your partner's Certificate Authority (CA)

CManually import your partner's Certificate Revocation List.

DManually import your partner's Access Control List.

Show Answer

Question: 3

What must a Security Administrator do to comply with a management requirement to log all traffic accepted through the perimeter Security Gateway?

AIn Global Properties > Reporting Tools check the box Enable tracking all rules (including rules marked as None in the Track column). Send these logs to a secondary log server for a complete logging history. Use your normal log server for standard logging for troubleshooting.

BInstall the View Implicit Rules package using SmartUpdate.

CDefine two log servers on the R77 Gateway object. Lof Implied Rules on the first log server. Enable Log Rule Base on the second log server. Use SmartReporter to merge the two log server records into the same database for HIPPA log audits.

DCheck the Log Implied Rules Globally box on the R77 Gateway object.

Show Answer

Question: 4

What is the appropriate default Gaia Portal address?

AHTTP://[IPADDRESS]

BHTTPS://[IPADDRESS]:8080

CHTTPS://[IPADDRESS]:4434

DHTTPS://[IPADDRESS]

Show Answer

Question: 5

Your boss wants you to closely monitor an employee suspected of transferring company secrets to the competition. The IT department discovered the suspect installed a WinSCP client in order to use encrypted communication. Which of the following methods is BEST to accomplish this task?

AUse SmartView Tracker to follow his actions by filtering log entries that feature the WinSCP destination port. Then, export the corresponding entries to a separate log file for documentation.

BUse SmartDashboard to add a rule in the firewall Rule Base that matches his IP address, and those of potential targets and suspicious protocols. Apply the alert action or customized messaging.

CWatch his IP in SmartView Monitor by setting an alert action to any packet that matches your Rule Base and his IP address for inbound and outbound traffic.

DSend the suspect an email with a keylogging Trojan attached, to get direct information about his wrongdoings.

Show Answer

CheckPoint 156-215.81 Quiz:14 Topic:8 Questions:66-70