CheckPoint Check Point Certified Security Administrator R71 Sample Questions:

1. In a distributed management environment, the administrator has removed the default check from Accept Control Connections under the Policy / Global Properties / FireWall tab. In order for the Security Management Server to install a policy to the Firewall, an explicit rule must be created to allow the server to communicate to the Security Gateway on port ______.

A) 256
B) 259
C) 900
D) 80

2. You need to completely reboot the Operating System after making which of the following changes on the Security Gateway? i.e. the command cprestart is not sufficient.

A) 1, 2, 3, 4, and 5
B) 3 only
C) 2, 3 only
D) 3, 4, and 5 only

3. Your network includes a SecurePlatform machine running NG with Application Intelligence (AI) R55. This configuration acts as both the primary Security Management Server and VPN-1 Pro Gateway. You add one machine, so you can implement Security Gateway R71 in a distributed environment. The new machine is an Intel CoreDuo processor, with 2 GB RAM and a 500-GB hard drive. How do you use these two machines to successfully migrate the NG with AI R55 configuration?

A) 1. On the existing machine, export the NG with AJ R55 configuration to a network share.
2.Insert the R71 CD-ROM in the old machine Install the R7D Security Gateway only while
reinstalling the SecurePlatform OS over the top of the existing installation. Complete sysconfig.
3.On the new machine, install SecurePlatform as the primary Security Management Server only.
4.Transfer the exported. tgz file into the new machine, import the configuration, and then reboot
5.Open SmartDashboard, change the Gateway object to the new version, and reset SIC for the Gateway object.
B) 1. Export the configuration on the existing machine to a tape drive
2.Uninstall the Security Management Server from the existing machine, using sysconfig.
3.Insert the R71 CD-ROM. run the patch add CD-ROM command to upgrade the existing machine to the R71 Security Gateway, and reboot
4.Install a new primary Security Management Server on the new machine
5.Change the Gateway object to the new version, and reset SIC
C) 1. Export the configuration on the existing machine to a network share
2.Uninstall the Security Gateway from the existing machine, using sysconfig
3.Insert the R71 CD ROM. and run the patch add CD-HGM command to upgrade the Security Management Server to Security Gateway R 70
4.Select upgrade with imported file, and reboot
5.Install a new R71 Security Gateway as the only module on the new machine, and reset SIC to the new Gateway
D) 1. Export the configuration on the existing machine as a backup only
2.Edit $FWDIR\product. conf on the existing machine, to disable the VPN-1 Pro Gateway package
3.Reboot the existing machine
4.Perform an in place upgrade on the Security Management Server using the command "patch odd cd"
5.On the new machine, install SecurePlatform as the R71 Security Gateway only
6.Run sysconfig to complete the configuration
7.From SmartDashboard, reconfigure the Gateway object to the new version, and reset SIC

4. What is used to validate a digital certificate?

A) S/MIME
B) CRL
C) PKCS
D) IPsec

5. You are running the Security Gateway on SecurePlatform and configure SNX with default settings. The client fails to connect to the Security Gateway. What is wrong?

A) The client has Active-X blocked.
B) The client is configured incorrectly.
C) The routing table on the client does not get modified.
D) The SecurePlatform Web User Interface is listening on port 443.

Solutions: