AllExam Dumps

DUMPS, FREE DUMPS, VCP5 DUMPS| VMWARE DUMPS, VCP DUMPS, VCP4 DUMPS, VCAP DUMPS, VCDX DUMPS, CISCO DUMPS, CCNA, CCNA DUMPS, CCNP DUMPS, CCIE DUMPS, ITIL, EXIN DUMPS,


READ Free Dumps For Checkpoint- 156-215





Question ID 18631

Choose the BEST sequence for configuring user management on SmartDashboard, for use
with an LDAP server:

Option A

Enable LDAP in Global Properties, configure a host-node object for the LDAP Server, and configure a server object for the LDAP Account Unit.

Option B

 Configure a workstation object for the LDAP server, configure a server object for the LDAP Account Unit, and enable LDAP in Global Properties.

Option C

Configure a server object for the LDAP Account Unit, enable LDAP in Global Properties, and create an LDAP server using an OPSEC application.

Option D

Configure a server object for the LDAP Account Unit, enable LDAP in Global Properties, and create an LDAP resource object.

Option E

Configure a server object for the LDAP Account Unit, and create an LDAP resource object.

Correct Answer A
Explanation


Question ID 18632

David is a Security Administrator who has installed NGX on his network. He needs to allow
a specific IP address range for a partner site to access his intranet Web server. To limit the
partner's access for HTTP and FTP only, David has done the following:
Created manual Static NAT rules for the Web server.
Cleared the following boxessettings in the Global Properties' Network Address Translation
screen.
1."Allow bi-directional NAT"
2."Translate destination on client side"
Do the above settings limit the partner's access?

Option A

 Yes. This will ensure that traffic only matches the specific rule configured for this traffic, and that NGX translates the traffic after accepting the packet.

Option B

No. These settings are only applicable when upgrading from FireWall-1 4.1 to NGX.

Option C

Yes. Both of these settings are only applicable to automatic NAT rules.

Option D

Yes. The first setting is not applicable. The second setting will reduce performance impact, by translating traffic in the kernel nearest the intranet server.

Option E

No. The first setting is only applicable to automatic NAT rules. The second setting is necessary to make sure there are no conflicts between NAT and anti-spoofing

Correct Answer E
Explanation

Send email to admin@getfreedumps for new dumps request!!!