Free CheckPoint 156-215.75 Practice Test & Real Exam Questions

Exam Code/Number: 156-215.75
Exam Name/Title: Check Point Certified Security Administrator R75
Certification Provider: CheckPoint
Corresponding Certification: CCSA

Exam Questions: 543
Updated On: Jun 18, 2026

Question #11

Which of the following can be found in cpinfo from an enforcement point?

A. Policy file information specific to this enforcement point

B. Everything NOT contained in the file r2info

C. VPN keys for all established connections to all enforcement points

D. The complete file objects_5_0. c

Discussion 0

Correct Answer: A Vote an answer

Question #12

Security Gateway R75 supports User Authentication for which of the following services?
Select the response below that contains the MOST complete list of supported services.

A. FTP, TELNET

B. FTP, HTTP, TELNET

C. SMTP, FTP, HTTP, TELNET

D. SMTP, FTP, TELNET

Discussion 0

Correct Answer: B Vote an answer

Question #13

You issue the fw monitor command with no arguments. Which of the following inspection points will be displayed?

A. All inspection points

B. Before the virtual machine, in the inbound direction

C. After the virtual machine, in the outbound direction

D. Before the virtual machine, in the outbound direction

Discussion 0

Correct Answer: A Vote an answer

Question #14

Users are not prompted for authentication when they access their Web servers, even though you have created an HTTP rule via User Authentication. Why?

A. Users must use the SecuRemote Client, to use the User Authentication Rule.

B. You checked the cache password on desktop option in Global Properties.

C. You have forgotten to place the User Authentication Rule before the Stealth Rule.

D. Another rule that accepts HTTP without authentication exists in the Rule Base.

Discussion 0

Correct Answer: D Vote an answer

Question #15

Once an Access Role is configured, in which Rule Bases can it be implemented?

A. DLP

B. IPS

C. Application Control

D. Mobile Access

Discussion 0

Correct Answer: C Vote an answer

Question #16

Which authentication type requires specifying a contact agent in the Rule Base?

A. Client Authentication with Manual Sign On

B. Session Authentication

C. User Authentication

D. Client Authentication with Partially Automatic Sign On

Discussion 0

Correct Answer: B Vote an answer

Question #17

Your R75 enterprise Security Management Server is running abnormally on Windows 2003 Server. You decide to try reinstalling the Security Management Server, but you want to try keeping the critical Security Management Server configuration settings intact (i.e., all Security Policies, databases, SIC, licensing etc.) What is the BEST method to reinstall the Server and keep its critical configuration?

A. 1) Download the latest upgrade_export utility and run it from a \ temp directory to export
the
Configuration.
2) Perform any requested upgrade verification suggested steps.
3) Uninstall all R75 packages via Add/Remove Programs and reboot
4) Use smartUpdate to reinstall the Security Management server and reboot
5) Transfer the .tgz file back to the local \ temp.
6) Run upgrade_import to import the configuration.

B. 1) Insert the R75 CD-ROM. and select the option to export the configuration into a . tgz
file
2) Skip any upgrade verification warnings since you are not upgrading.
3) Transfer the. tgz file to another networked machine.
4) Download and run the cpclean utility and reboot.
5) Use the R75 CD_ROM to select the upgrade__import option to import the c

C. 1) Download the latest upgrade_export utility and run it from a \ temp directory to export
the
Configuration.
2) Transferee .tgz file to another network machine 3) Uninstall all R75 packages via Add/Remove Programs and reboot 4) Install again using the R75 CD ROM as a primary security management server 5) Reboot and than transfer the .tgz file back to the local\ tem p 6) Run upgcade_import to import the configuration.

D. 1) Run the latest upgrade_export utility to export the configuration
2) Leave the exported - tgz file in %FWDIR\bin.
3) Install the primary security Management Server on top of the current installation
4) Run upgrade_import to Import the configuration.

Discussion 0

Correct Answer: A Vote an answer

Question #18

You have blocked an IP address via the Block Intruder feature of SmartView Tracker. How can you view the blocked addresses?

A. In SmartView Tracker, click the Active tab. and the actively blocked connections displays

B. In SmartView Monitor, select the Blocked Intruder option from the query tree view

C. Run f wm blockedview.

D. In SmartView Monitor, select Suspicious Activity Rules from the Tools menu and select the relevant Security Gateway from the list.

Discussion 0

Correct Answer: D Vote an answer

Question #19

NAT can be implemented on which of the following lists of objects?

A. Network, Dynamic Object

B. Domain, Network

C. Host, User

D. Host, Network

Discussion 0

Correct Answer: D Vote an answer

Question #20

You want to establish a VPN, using certificates. Your VPN will exchange certificates with an external partner. Which of the following activities should you do first?

A. Manually import your partner's Control List.

B. Manually import your partner's Certificate Revocation List.

C. Create a new logical-server object to represent your partner's CA

D. Exchange exported CA keys and use them to create a new server object to represent your partner's Certificate Authority (CA).

Discussion 0

Correct Answer: D Vote an answer

Download Free CheckPoint 156-215.75 Demo

Simply submit your e-mail address below to get started with our free demo of your CheckPoint 156-215.75 exam.