What are the three authentication methods for SIC?
Answer(s): B
Secure Internal Communication (SIC)Secure Internal Communication (SIC) lets Check Point platforms and products authenticate with each other. The SIC procedure creates a trusted status between gateways, management servers and other Check Point components. SIC is required to install polices on gateways and to send logs between gateways and management servers.These security measures make sure of the safety of SIC: 1.Certificates for authentication2.Standards-based SSL for the creation of the secure channel 3.3DES for encryption
https://sc1.checkpoint.com/documents/R76/CP_R76_SecMan_WebAdmin/html_frameset.htm?topic=documents/R76/CP_R76_SecMan_WebAdmin/71950
You have enabled “Extended Log” as a tracking option to a security rule. However, you are still not seeing any data type information. What is the MOST likely reason?
Answer(s): A
The most likely reason for the logs data to stop is the low disk space on the logging device, which can be the Management Server or the Gateway Server.
What is the order of NAT priorities?
The order of NAT priorities is:1. Static NAT2. IP Pool NAT3. Hide NATSince Static NAT has all of the advantages of IP Pool NAT and more, it has a higher priority than the other NAT methods.
https://sc1.checkpoint.com/documents/R77/CP_R77_Firewall_WebAdmin/6724.htm#o6919
Which of the following is an identity acquisition method that allows a Security Gateway to identify Active Directory users and computers?
AD Query extracts user and computer identity information from the Active Directory Security Event Logs. The system generates a Security Event log entry when a user or computer accesses a network resource. For example, this occurs when a user logs in, unlocks a screen, or accesses a network drive.
https://sc1.checkpoint.com/documents/R76/CP_R76_IdentityAwareness_AdminGuide/62402.htm
Ken wants to obtain a configuration lock from other administrator on R80 Security Management Server Operating System. He can do this via WebUI or via CLI. Which command should he use in CLI?
Answer(s): D
Use the database feature to obtain the configuration lock. The database feature has two commands:1.lock database [override]. 2.unlock databaseThe commands do the same thing: obtain the configuration lock from another administrator.
https://sc1.checkpoint.com/documents/R76/CP_R76_Gaia_WebAdmin/75697.htm#o73091
Post your Comments and Discuss Checkpoint 156-215.80 exam prep with other Community members: