CheckPoint 156-315.80 Quiz 9 Topic 7 Questions 41-45

Question: 1

You have a Geo-Protection policy blocking Australia and a number of the countries. You network now requires a Check point Firewall to be installed in Sydney, Australi

a. What must you do to get SIC to work?

ARemove Goe-Protection as the IP-to-country database externally and you have no control of this.

BCreate a rule at the top in the Sydney firewall to also control traffic from your network.

CNothing-Check Point control connection function regardless of Geo-Protection policy

DCreate a rule at the top in your point firewall to bypass the Goe-Protection

Show Answer

Question: 2

Which of to the following is true about Capsule Connect?

AIt is a full layer 3 VPN client

BIt offers full enterprise mobility management

CIt is supported only on IOS phones and Windows PCs

DIt does not support all VPN authentication methods

Show Answer

Question: 3

What is a best practice before starting to troubleshooting using the ''fw monitor'' tool?

ARun the command: fw monitor debug on

BClear the connections table

CDisable CoreXL

DDisable SecureXL

Show Answer

Question: 4

You can access the ThreatCloud Repository form:

AR80.10 SmartConsole and Application WiKi

BThreat Prevention and Threat Tools

CThreat WiKi and Check point Website

DR80.10 smartConsole and Threat prevention

Show Answer

Question: 5

In what way is Secure Distribute (SND) a relevant feature if the security gateway?

ASDN is a feature to accelerate multiple SSL VPN connections

BSDN is an alternative to IPSec Main Mode, using only 3 packets

CSDN is used to distribute packets firewall instances

DSDN is a feature fw monitor to capture accelerated packets

Show Answer

CheckPoint 156-315.80 Quiz:9 Topic:7 Questions:41-45