Free Download Lastest Pass4sure Check Point 156-215.13 Exam Questions

Check Point Certified Security Administrator – GAiA Exam: 156-215.13 Exam
156-215.13 Questions & Answers
Exam Code: 156-215.13
Exam Name: Check Point Certified Security Administrator – GAiA Exam
Q & A: 360 Q&As

QUESTION 1
The customer has a small Check Point installation, which includes one SecurePlatform server
working as the SmartConsole, and a second server running Windows 2008 as both Security
Management Server and Security Gateway. This is an example of a(n):
A. Distributed Installation
B. Stand-Alone Installation
C. Hybrid Installation
D. Unsupported configuration
Answer: D

QUESTION 2
The customer has a small Check Point installation which includes one Windows 2008 server as
the SmartConsole and a second server running SecurePlatform as both Security Management
Server and the Security Gateway. This is an example of a(n):
A. Stand-Alone Installation
B. Distributed Installation
C. Unsupported configuration
D. Hybrid Installation
Answer: A

QUESTION 3
The customer has a small Check Point installation which includes one Windows 7 workstation as
the SmartConsole, one GAiA device working as Security Management Server, and a third server
running SecurePlatform as Security Gateway. This is an example of a(n):
A. Unsupported configuration
B. Stand-Alone Installation
C. Hybrid Installation
D. Distributed Installation
Answer: D

QUESTION 4
The customer has a small Check Point installation which includes one Windows 2008 server as
SmartConsole and Security Management Server with a second server running SecurePlatform as
Security Gateway. This is an example of a(n):
A. Stand-Alone Installation.
B. Distributed Installation.
C. Hybrid Installation.
D. Unsupported configuration.
Answer: B

QUESTION 5
When doing a Stand-Alone Installation, you would install the Security Management Server with
which other Check Point architecture component?
A. SecureClient
B. Security Gateway
C. None, Security Management Server would be installed by itself.
D. SmartConsole
Answer: B

QUESTION 6
Tom has been tasked to install Check Point R76 in a distributed deployment. Before Tom installs
the systems this way, how many machines will he need if he does not include a SmartConsole
machine in his calculations?
A. Three machines
B. One machine
C. One machine, but it needs to be installed using SecurePlatform for compatibility purposes
D. Two machines
Answer: D

QUESTION 7
Which of the following statements is TRUE about management plug-ins?
A. A management plug-in interacts with a Security Management Server to provide new features and
support for new products.
B. The plug-in is a package installed on the Security Gateway.
C. Using a plug-in offers full central management only if special licensing is applied to specific features
of the plug-in.
D. Installing a management plug-in is just like an upgrade process.
Answer: A

QUESTION 8
You are installing a Security Management Server. Your security plan calls for three administrators
for this particular server. How many can you create during installation?
A. Depends on the license installed on the Security Management Server
B. One
C. As many as you want
D. Only one with full access and one with read-only access
Answer: B

QUESTION 9
During which step in the installation process is it necessary to note the fingerprint for first-time
verification?
A. When configuring the Security Gateway object in SmartDashboard
B. When configuring the Security Management Server using cpconfig
C. When establishing SIC between the Security Management Server and the Gateway
D. When configuring the Gateway in the WebUI
Answer: B

QUESTION 10
How can you most quickly reset Secure Internal Communications (SIC) between a Security
Management Server and Security Gateway?
A. From the Security Management Server’s command line, type fw putkey -p <shared key> <IP Address
of Security Gateway>.
B. Run the command fwm sic_reset to reinitialize the Security Management Server Internal Certificate
Authority (ICA). Then retype the activation key on the Security Gateway from SmartDashboard.
C. Use SmartUpdate to retype the Security Gateway activation key. This will automatically sync SIC to
both the Security Management Server and Gateway.
D. From cpconfig on the Gateway, choose the Secure Internal Communication option and retype the activation
key. Next, retype the same key in the Gateway object in SmartDashboard and reinitialize Secure Internal
Communications (SIC).
Answer: D

QUESTION 11
How can you recreate the Security Administrator account, which was created during initial
Management Server installation on SecurePlatform?
A. Launch cpconfig and delete the Administrator’s account. Recreate the account with the same name.
B. Launch SmartDashboard in the User Management screen, and delete the cpconfig administrator.
C. Export the user database into an ASCII file with fwm dbexport. Open this file with an editor, and delete
the Administrator Account portion of the file. You will be prompted to create a new account.
D. Type cpm -a, and provide the existing Administrator’s account name. Reset the Security Administrator’s
password.
Answer: A

QUESTION 12
When Jon first installed his new security system, he forgot to configure DNS servers on his
Security Gateway. How could Jon configure DNS servers now that his Security Gateway is in
production?
A. Login to the SmartDashboard, edit the firewall Gateway object, select the tab Interfaces > Domain
Name Servers.
B. Login to the firewall using SSH and run cpconfig, then select Domain Name Servers.
C. Login to the firewall using SSH and run fwm, then select System Configuration > Domain Name Servers.
D. Login to the firewall using SSH and run sysconfig, then select Domain Name Servers.
Answer: D

QUESTION 13
The London Security Gateway Administrator has just installed the Security Gateway and
Management Server. He has not changed any default settings. As he tries to configure the
Gateway, he is unable to connect. Which troubleshooting suggestion will NOT help him?
A. Check if some intermediate network device has a wrong routing table entry, VLAN assignment,
duplex-mismatch, or trunk issue.
B. Verify that the Rule Base explicitly allows management connections.
C. Test the IP address assignment and routing settings of the Security Management Server, Gateway,
and console client.
D. Verify the SIC initialization.
Answer: B

QUESTION 14
You need to completely reboot the Operating System after making which of the following changes
on the Security Gateway? (i.e. the command cprestart is not sufficient.)
1. Adding a hot-swappable NIC to the Operating System for the first
time.
2. Uninstalling the R75 Power/UTM package.
3. Installing the R75 Power/UTM package.
4. Re-establishing SIC to the Security Management Server.
5. Doubling the maximum number of connections accepted by the Security
Gateway.
A. 2, 3 only
B. 3 only
C. 3, 4, and 5 only
D. 1, 2, 3, 4, and 5
Answer: A

QUESTION 15
The Security Gateway is installed on SecurePlatform R76 The default port for the Web User
Interface is ____________.
A. TCP 443
B. TCP 4433
C. TCP 18211
D. TCP 257
Answer: A

…go to http://www.lead2pass.com/156-215-13.html to download the full version Q&As.

Why Choose Lead2pass?