156-215.77

156-215.77 practice questions, page 8 of 15, with answer review and explanations.

Question 36

Because of pre-existing design constraints, you set up manual NAT rules for your HTTP server. However, your FTP server and SMTP server are both using automatic NAT rules. All traffic from your FTP and SMTP servers are passing through the Security Gateway without a problem, but traffic from the Web server is dropped on rule 0 because of anti-spoofing settings. What is causing this?

  1. Manual NAT rules are not configured correctly.
  2. Allow bi-directional NAT is not checked in Global Properties.
  3. Routing is not configured correctly.
  4. Translate destination on client side is not checked in Global Properties under Manual NAT Rules.

Question 37

You enable Hide NAT on the network object, 10.1.1.0 behind the Security Gateway's external interface. You browse to the Google Website from host, 10.1.1.10 successfully. You enable a log on the rule that allows 10.1.1.0 to exit the network. How many log entries do you see for that connection in SmartView Tracker?

  1. Two, one for outbound, one for inbound
  2. Only one, outbound
  3. Two, both outbound, one for the real IP connection and one for the NAT IP connection
  4. Only one, inbound

Question 38

Which of the following statements BEST describes Check Point's Hide Network Address Translation method?

  1. Translates many destination IP addresses into one destination IP address
  2. One-to-one NAT which implements PAT (Port Address Translation) for accomplishing both Source and Destination IP address translation
  3. Translates many source IP addresses into one source IP address
  4. Many-to-one NAT which implements PAT (Port Address Translation) for accomplishing both Source and Destination IP address translation

Question 39

Which Check Point address translation method allows an administrator to use fewer ISP- assigned IP addresses than the number of internal hosts requiring Internet connectivity?

  1. Hide
  2. Static Destination
  3. Static Source
  4. Dynamic Destination

Question 40

NAT can NOT be configured on which of the following objects?

  1. HTTP Logical Server
  2. Gateway
  3. Address Range
  4. Host