156-215.70 Check Point Certify Security Administrator Exam

Sample Questions

Q) You have blocked an IP address via the Block Intruder feature of SmartView Tracker How can you view the blocked addresses'?

a) Run f wm blockedview

b) In SmartView Monitor, select the Blocked Intruder option from the query tree view

c) In SmartView Monitor, select Suspicious Activity Rules from the Tools menu and select the relevant Security Gateway from the list

d) In SmartView Tracker, click the Active tab. and the actively blocked connections displays

Q) John is the Security Administrator in his company He installs a new R70 Security Management Server and a new R70 Gateway He now wants to establish SIC between them. After entering the activation key, the message "Trust established" is displayed in SmartDashboard, but SIC still does not seem to work because the policy won't install and interface fetching still does not work. What might be a reason for this?

a) This must be a human error.

b) The Gateway's time is several days or weeks in the future and the SIC certificate is not yet valid.

c) SIC does not function over the network.

d) It always works when the trust is established.

Q) What are you required to do before running upgrade__ export?

a) Run cpconfig and set yourself up as a GUI client.

b) Run a cpstop on the Security Management Server

c) Run a cpstop on the Security Gateway.

d) Close all GUI clients

Q) You are installing a Security Management Server Your security plan calls for three administrators for this particular server. How many can you create during installation'? a) Depends on the license installed on the Security Management Server

b) Only one with full access and one with read-only access

c) One

d) As many as you want

Q) You are installing your R70Security Gateway. Which is NOT a valid option for the hardware platform?

a) Crossbeam

b) Solaris

c) Windows

d) IPSO