Mrcorp.Net Security

1. The user composes a email message and sends it through the firewalled gateway SMTP client to the original server. Assuming all necessary actions have been performed and the message has been transferred to the spool directory, what action does the mail dequeuer perform next?

a. The mail dequeuer examines the spool directory for the messages
b. The mail dequeuer takes the R files and sends them, or processes them into E files
c. The mail dequeuer opens a second connection to the final SMTP Server
d. The mail dequeuer, after opening a connection to the mail server, opens a connection to the CVP Server if needed
e. The mail dequeuer receives the files back from CVP Server and completes the sending of the message to final SMTP Server

2. The Account Management Client (AMC) is used as the Interface to an LDAP server. With the AMC, you can create organizational units (ou), for example sales, support, and marketing. If, for example, you miss-spell 'suppport' and want to correct it, what action would you follow?
a. Highlight support and select delete from the pop-up menu or from the pull-down menus and recreate the support organizational unit.
b. Highlight suppport and rename it
c. Exit the AMC and use the Netscape 'ldapmodify' command to delete it, start the AMC and recreate the support organizational unit.
d. Highlight the parent ou and delete the parent and recreate the branch.

3. The Account Management Client (AMC) is a java application and only runs in a Microsoft Windows environment.
a. True
b. False

4. Firewall-1 stores the object definitions in which configuration file?
a. Objects.C
b. fwauthd.NDB
c. product.conf
d. control.map

5. Firewall-1 provides content security for which protocols?
a. HTTP, SMTP, POP3, FTP
b. HTTP, RLOGIN, FTP, TELNET
c. HTTP, FTP, SMTP
d. CVP, SMTP, FTP

6. When users are operating on the firewall, connections originating
from the firewall can be properly inspected and compared to the
Security Policy if the firewall is configured to apply gateway rules
to the _______________ interface direction

a. Inbound
b. Eitherbound
c. Outbound

7. You are setting up a VPN, and must select an encryption scheme. Your data is extremely business sensitive and you want maximum security for your data communications. Which encryption scheme would you select?
a. Tunneling Mode
b. In-place
c. FWZ-1
d. Triple DES
e. Hybrid_IKE

8. Assume that a failure of the primary sever in a MEP configuration has occurred. Which gateway will SecureRemote attempt to establish an encrypted connection with?
a. Gateway 1
b. Gateway 2
c. The gateway set by the firewall administrator
d. The gateway addressed by the client
e. The gateway that answers first

9. Selecting "Encapsulate SecuRemote connections" allows a packet to reach its destination unless the destination has an illegal or reserved IP address causing the connection to fail.
a. True
b. False

10. What method of address translation would you use when setting up an IKE VPN between two or more networks with reserved (illegal) IP addresses?
a. Static source
b. Static destination
c. Dynamic source
d. Hide
e. None

11. When adding users to the firewall, an administrator can install just the users' database without re- installing the entire Security Policy.
a. True
b. False

12. When defining a new group in the CP2000 VPN-1/FireWall-1 software, you can NOT nest previously created groups, but you can import the "contents" of the old group.
a. True
b. False

13. Groups must be created in order to implement authentication.
a. True
b. False

14. VPN-1/FireWall-1 uses _________________ to retrieve the Interface Name, IP Address, and Network Mask when an administrator clicks the GET button in the Interfaces tab of a workstation network object.
a. ioctl
b. Control Connection
c. SNMP
d. UDP
e. URI

15. How to increase hidden timeout value for TCP?
(by Command line)

16. How to increase hidden timout value for UDP?
(by command line)

17. In LDAP Server can be integrated with Check Point Firewall-1 for two purposes. Select which two from the following list:
1) Storing user authentication details
2) For storing the object database
3) As a Certificate server for VPNS
4) For storing all the rulebases that have ever been used.

a. 1 & 2
b. 1 & 3
c. 2 & 3
d. 3 & 4

18. Most load balancing is implemented using dynamic address translation but _____ & _____ use connect control to implement load balancing. (choose 2)

a. server load
b. round trip
c. round robin
d. random
e. domain

19. The Account Management Client is a Java Application and is only available for MS-Windows platforms.
a. True
b. False

20. Integrating Check Point Firewall-1 with an LDAP server is a standard feature of all products (Enterprise, Single Gateway, 25, 50, 100, 250 user licenses) and doe NOT require a separate license as an extra cost option.
a. True
b. False

21. In what log viewer module would you see that a connection that was supposed to be Telnet Connection was actually used to transfer file?
a. Security Log
b. Action Connection Log
c. Accounting Log
d. None of the above

22. Which Log Viewer allows use to see the contents the files HTTP'ed by your Regional Directory.
a. Security Log
b. Active Connection Log
c. Accounting Log
d. None of the above

23. In what log viewer mode would you see that a certain IP is pinging to your web server repeatedly?
a. Security Log
b. Active Connection
c. Accounting Log
d. None of the Above

24. Assume that no changes have been made to
the default policy. If you want to allow DNS into your
network, do you need to create rule.
a. Yes
b. No