156-215.77 | Verified 156-215.77 Exam Dumps 2021

NEW QUESTION 1
Jennifer McHanry is CEO of ACME. She recently bought her own personal iPad. She wants use her iPad to access the internal Finance Web server. Because the iPad is not a member of the Active Directory domain, she cannot identify seamlessly with AD Query. However, she can enter her AD credentials in the Captive Portal and then get the same access as on her office computer. Her access to resources is based on rules in the R77 Firewall Rule Base.
To make this scenario work, the IT administrator must:
1) Enable Identity Awareness on a gateway and select Captive Portal as one of the Identity Sources.
2) In the Portal Settings window in the User Access section, make sure that Name and password login is selected.
3) Create a new rule in the Firewall Rule Base to let Jennifer McHanry access network destinations. Select accept as the Action.
Ms. McHanry tries to access the resource but is unable. What should she do?

• A. Have the security administrator select the Action field of the Firewall Rule “Redirect HTTP connections to an authentication (captive) portal?
• B. Have the security administrator reboot the firewall
• C. Have the security administrator select Any for the Machines tab in the appropriate Access Role
• D. Install the Identity Awareness agent on her iPad

Answer: A

NEW QUESTION 2
Anti-Spoofing is typically set up on which object type?

• A. Security Gateway
• B. Host
• C. Security Management object
• D. Network

Answer: A

NEW QUESTION 3
Which of these Security Policy changes optimize Security Gateway performance?

• A. Using groups within groups in the manual NAT Rule Base.
• B. Use Automatic NAT rules instead of Manual NAT rules whenever possible.
• C. Using domain objects in rules when possible.
• D. Putting the least-used rule at the top of the Rule Base.

Answer: B

NEW QUESTION 4
What happens when you select File > Export from the SmartView Tracker menu?

• A. Current logs are exported to a new *.log file.
• B. Exported log entries are not viewable in SmartView Tracker.
• C. Logs in fw.log are exported to a file that can be opened by Microsoft Excel.
• D. Exported log entries are deleted from fw.log.

Answer: C

NEW QUESTION 5
Review the rules.

Assume domain UDP is enabled in the impled rules.
What happens when a user from the internal network tries to browse to the internet using HTTP? The user:

• A. can connect to the Internet successfully after being authenticated.
• B. is prompted three times before connecting to the Internet successfully.
• C. can go to the Internet after Telnetting to the client authentication daemon port 259.
• D. can go to the Internet, without being prompted for authentication.

Answer: D

NEW QUESTION 6
Match the terms with their definitions: Exhibit:

• A. A-3, B-2, C-4, D-1
• B. A-2, B-3, C-4, D-1
• C. A-3, B-2, C-1, D-4
• D. A-3, B-4, C-1, D-2

Answer: A

NEW QUESTION 7
Which of the following describes the default behavior of an R77 Security Gateway?

• A. Traffic not explicitly permitted is dropped.
• B. Traffic is filtered using controlled port scanning.
• C. All traffic is expressly permitted via explicit rules.
• D. IP protocol types listed as secure are allowed by default, i.
• E. ICMP, TCP, UDP sessions are inspected.

Answer: A

NEW QUESTION 8
Your company has two headquarters, one in London, one in New York. Each of the headquarters includes several branch offices. The branch offices only need to communicate with the headquarters in their country, not with each other, and the headquarters need to communicate directly. What is the BEST configuration for establishing VPN Communities among the branch offices and their headquarters, and between the two headquarters? VPN Communities comprised of:

• A. Three mesh Communities: one for London headquarters and its branches; one for New York headquarters and its branches; and one for London and New York headquarters.
• B. Two mesh and one star Community: Each mesh Community is set up for each site between headquarters their branche
• C. The star Community has New York as the center and London as its satellite.
• D. Two star communities and one mesh: A star community for each city with headquarters as center, and branches as satellite
• E. Then one mesh community for the two headquarters.
• F. One star Community with the option to mesh the center of the star: New York and London Gateways added to the center of the star with the “mesh center Gateways? option checked; all London branch offices defined in one satellite window; but, all New York branch offices defined in another satellite window.

Answer: C

NEW QUESTION 9
Which of the following is a viable consideration when determining Rule Base order?

• A. Placing frequently accessed rules before less frequently accessed rules
• B. Grouping IPS rules with dynamic drop rules
• C. Adding SAM rules at the top of the Rule Base
• D. Grouping rules by date of creation

Answer: A

NEW QUESTION 10
How can you configure an application to automatically launch on the Security Management Server when traffic is dropped or accepted by a rule in the Security Policy?

• A. SNMP trap alert script
• B. Custom scripts cannot be executed through alert scripts.
• C. User-defined alert script
• D. Pop-up alert script

Answer: C

NEW QUESTION 11
Which of the following authentication methods can be configured in the Identity Awareness setup wizard?

• A. TACACS
• B. Captive Portal
• C. Check Point Password
• D. Windows password

Answer: B

NEW QUESTION 12
When using an encryption algorithm, which is generally considered the best encryption method?

• A. Triple DES
• B. AES-256
• C. CAST cipher
• D. DES

Answer: B

NEW QUESTION 13
As a Security Administrator, you must refresh the Client Authentication authorization time- out every time a new user connection is authorized. How do you do this? Enable the Refreshable Timeout setting:

• A. in the user object's Authentication screen.
• B. in the Gateway object's Authentication screen.
• C. in the Limit tab of the Client Authentication Action Properties screen.
• D. in the Global Properties Authentication screen.

Answer: C

NEW QUESTION 14
Your boss wants you to closely monitor an employee suspected of transferring company secrets to the competition. The IT department discovered the suspect installed a WinSCP client in order to use encrypted communication. Which of the following methods is BEST to accomplish this task?

• A. Use SmartView Tracker to follow his actions by filtering log entries that feature the WinSCP destination por
• B. Then, export the corresponding entries to a separate log file for documentation.
• C. Use SmartDashboard to add a rule in the firewall Rule Base that matches his IP address, and those of potential targets and suspicious protocol
• D. Apply the alert action or customized messaging.
• E. Watch his IP in SmartView Monitor by setting an alert action to any packet that matches your Rule Base and his IP address for inbound and outbound traffic.
• F. Send the suspect an email with a keylogging Trojan attached, to get direct information about his wrongdoings.

Answer: A

NEW QUESTION 15
Certificates for Security Gateways are created during a simple initialization from ____.

• A. sysconfig
• B. The ICA management tool
• C. SmartUpdate
• D. SmartDashboard

Answer: D

NEW QUESTION 16
How many packets does the IKE exchange use for Phase 1 Main Mode?

• A. 12
• B. 1
• C. 3
• D. 6

Answer: D

NEW QUESTION 17
All R77 Security Servers can perform authentication with the exception of one. Which of the Security Servers can NOT perform authentication?

• A. FTP
• B. SMTP
• C. HTTP
• D. RLOGIN

Answer: B