QUESTION: 161

Which Check Point address translation method is necessary if you want to connect from a host on the Internet via HTTP to a server with a reserved (RFC 1918) IP address on your DMZ?

Dynamic Source Address Translation
Hide Address Translation
Port Address Translation
Static Destination Address Translation

Answer(s): D

Reveal Solution Next Question

You enable Automatic Static NAT on an internal host node object with a private IP address of 10.10.10.5, which is NATed into 216.216.216.5. (You use the default settings in Global Properties / NAT.)
When you run fw monitor on the R80 Security Gateway and then start a new HTTP connection from host 10.10.10.5 to browse the Internet, at what point in the monitor output will you observe the HTTP SYN-ACK packet translated from 216.216.216.5 back into 10.10.10.5?

o=outbound kernel, before the virtual machine
I=inbound kernel, after the virtual machine
O=outbound kernel, after the virtual machine
i=inbound kernel, before the virtual machine

Answer(s): B

Reveal Solution Next Question

QUESTION: 163

Review the rules.

Assume domain UDP is enabled in the impled rules.
What happens when a user from the internal network tries to browse to the internet using HTTP? The user:

can connect to the Internet successfully after being authenticated.
is prompted three times before connecting to the Internet successfully.
can go to the Internet after Telnetting to the client authentication daemon port 259.
can go to the Internet, without being prompted for authentication.

Answer(s): D

Reveal Solution Next Question

QUESTION: 164

How granular may an administrator filter an Access Role with identity awareness? Per:

Specific ICA Certificate
AD User
Radius Group
Windows Domain

Answer(s): B

Reveal Solution Next Question

Free 156-915.80 Exam Braindumps (page: 41)

QUESTION: 161

QUESTION: 162

QUESTION: 163

QUESTION: 164