Failed CCSA NGX today with 58% =(

[dean7711]

I failed my CCSA exam today with 58%, pass mark 70%. I scored as follows:

Security Policy: 53%
NAT: 25%
Monitoring Traffic and Connections: 66%
Disaster Recovery: 85%
VPN1 NGX Overview: 50%
Authentication: 66%
SmartDefense: 37%
Encryption and VPNs: 50%
LDAP and User Management with Smart Directory: 83%

I read through most things in Syngress and new every single question in the testking (65 questions)

I played around in Demo mode allot to but I have no working experiance of Checkpoint and didnt sit a course (did off own back).

Not sure what to do now I was surprised how many smartdefense i had wrong.

Testkings were good for about 8 -10 max
---------------------------------------------------------------

As for Dumps

I remember a strange question on where the security policy name was saved upon uploading, now I know its in smartmonitor but it wasent in the selection only: Smartview status, event reporter, smartdashboard and smart tracker.

I went for status because I know that allot of features have moved from status into monitor??

NAT questions where very hard but unfortunatly cannot remember.

[recrui]

sorry to hear you failed, got mine tomorrow morning.

[dean7711]

Good Luck! If you feel you havent done as good and you have gone over as many questions as you could have done it would be a good idea to try and use the remainder time to try and remember the hard questions. I left about 10 mins early and should have tried to memorise hard ones.

Please could you post any dumps you remeber I will try and post some as soon as I get over this failure hang over.......

[dean7711]

Ok I have calmed down a little now........

Other dumps are.

When installing NGX how many admins are allowed? 1

What does the dbexport do? exports the database to another location.

Um.....


I try an remember more and post anything that pops back in to my head. Please can others add there dumps... I think i will do this again in a few weeks. (Read NAT and Smartdefense a little more also)

[BadCrc]

I failed with a 67, guess i missed it by 3 questions diffie hellman key exchange symetric or asymetric....I always thought it was asymetric...I didn't see my question breakdown. Opps, guess I got pissed and left I just saw a red and green bar and needed score and your score. Dam so close.

I passed CISSP first try, I don't have the books for this though. I can't afford to pay 400 for books. I got the pdf's and sybex. The Sybex doesn't do the smartdirectory. I felt like that is where I was missing the most. I don't know.... Where on the checkpoint site is there a pdf on smartdirectory. If this is such a intregal part of there system then why don't we see a pdf, or it included in one of the R60 pdf's....I will retake this soon best of luck.

[david]

BadCrC,

Look for CheckPoint_NGX_SmartCenter_User_Guide.pdf, chapter 09.
This covers SmartDirectory.

I took this test a couple of weeks back, & passed.

As for encryption questions, make sure you know about in-place & tunnel mode encryption. Examples, differences etc.

[silverblade]

I failed it too with 60% : ( ..I read Boson (which is the biggest bullsh*t of all..becuase it comes with real easy questions which are NOTHING compared to what you'll get in the exam..I was scoring 90%+ with boson!)

Anyway i read Boson and Syngress book and other checkpoint documents..BUTTT....i shouldve read the Testking exam sheet 156-215 (which I had with me before the exam and never touched it).

Man this sheet covered EXACTLY atleast 60% of questions I had in the exam...even the same wordings!!..Contact me if you need this sheet sent to you..i'm rescheduling this exam next week after reading testking and heaps and heaps of NATing questions..

Anyway guys, if it helps..these are the questions i had:

-- NATing - You need to be a NATting KING before you can sit this exam...expect atleast 30-40% of question on nat...which can be static, dynamic and ESPECIALLY bi-directional natting

-- Expect lots and lots of questions relating to SmartView Monitor, Tracker and Audit mode. You need to know and memorize the SmartView windows...(Under Windows -> SmartView *) and how theyr're all different from each other ...know where your licensing is..

-- Web Intelligence - Need to know how to configure your servers for web intelligence and cross-site scrpting attacks..(Memorize the host objects window--they asked me..what will you configure within the hosts properties to make it ready for WI..two of the options were-- Configure servers, Manage Servers...I chose manage servers which is obviolsy wrong!)

-- smart defense - know the common attacks like small PMTU, ping, teardrop

-- Know your Firewall Status modes in monitor...and know what Collision is..

-- LDAP... Expect 3-4 questions on LDAP and its schema

-- VPNs..Inplace and standard ecryption...which is better?
- diffie-hellman..asymmetric or symm?

[firewalz]

Thanks for the advice, I plan on taking the test soon, I would greatly appreciate it if you could send the doc my way. thanks in advance.

firewalz<at>gmail.com

[tmsouza]

Hi,

i'm failed too with 58% in 156-215.1.
I would like to know if i get this exam again, it would have same questions then the first or normally they would be newer questions ?
Who failed and get it again, what was the experience about the questions mode between the first exam?


Regards


Thanks in advance

[Arsenal_Allstar]

First thanks to everyone posting here - the dumps and posts are very useful when used in addition to having done the course and spending lots of time reading the PDFs and manuals.

Unfortunately I to failed last week got 65% needed to get 70% so was a little pi**ed-off

The Testking dump is well worth memorising - there were lots of questions in the real test that were verbatim from that dump.

As others have already said - really gem up on SmartDefense and NAT there are loads of questions on both.

A few questions that stumped me during the test:

- How many administrator users can you set-up during the installation of Smart Console Server
A) 1 B) 2 C)1 plus 1 read-only D) As many as you want
Think this is A)1 - but not sure

- How do you reset the administrator password
A, B, C all command line options which I can't recall
D) From SmartDashboard - Manage - Users and Administrators - locate user then retype password
I went for D) which is correct

- Checkpoint uses "in place" encryption which is an example of
A) IKE
B) SHA
C) DES
D) 3DES
- No idea on this one - I went for A) IKE

I will definitely read and re-read Smartdefense and NAT chapters and then hopefully sail through with 71% :(
(oh out of interest there were 73 questions in the test of which 3 were for evaluation and did not count towards the mark - but you don't know which ones they are!)

Cheers,

Greg

[jordi]

Originally Posted by Arsenal_Allstar

First thanks to everyone posting here - the dumps and posts are very useful when used in addition to having done the course and spending lots of time reading the PDFs and manuals.

Unfortunately I to failed last week got 65% needed to get 70% so was a little pi**ed-off

The Testking dump is well worth memorising - there were lots of questions in the real test that were verbatim from that dump.

As others have already said - really gem up on SmartDefense and NAT there are loads of questions on both.

A few questions that stumped me during the test:

- How many administrator users can you set-up during the installation of Smart Console Server
A) 1 B) 2 C)1 plus 1 read-only D) As many as you want
Think this is A)1 - but not sure

- How do you reset the administrator password
A, B, C all command line options which I can't recall
D) From SmartDashboard - Manage - Users and Administrators - locate user then retype password
I went for D) which is correct

- Checkpoint uses "in place" encryption which is an example of
A) IKE
B) SHA
C) DES
D) 3DES
- No idea on this one - I went for A) IKE

I will definitely read and re-read Smartdefense and NAT chapters and then hopefully sail through with 71% :(
(oh out of interest there were 73 questions in the test of which 3 were for evaluation and did not count towards the mark - but you don't know which ones they are!)

Cheers,

Greg

Thanks for sharing.

[dean7711]

Heres a question off the ngx ccca exam. What do you think the answer is?

Select the correct statement about sic.

A: For NGX security gateways are created during the smartcentre server installation.

B:For Smartcentre server are created during the smartcentre server installation.

C:Decrease network security be securing admisitrative communication amoung the smartcentre servers and gateway.

D:Uniquly identify Checkpoint enabled machines; they must have the same function as authentication certificates.

[ma77smith]

Originally Posted by dean7711

Heres a question off the ngx ccca exam. What do you think the answer is?

Select the correct statement about sic.

A: For NGX security gateways are created during the smartcentre server installation.

B:For Smartcentre server are created during the smartcentre server installation.

C:Decrease network security be securing admisitrative communication amoung the smartcentre servers and gateway.

D:Uniquly identify Checkpoint enabled machines; they must have the same function as authentication certificates.

I think its D


BTW, the new TK is out 121 questions instead of 71 :o)

[dean7711]

So it is...... Is anyone feeling rich enough to buy it and share it?

[ma77smith]

Originally Posted by dean7711

So it is...... Is anyone feeling rich enough to buy it and share it?

I have got it, but testking arent stupid now - you have to unlock it online with a serial number, if i give it out it will disable it (more than one unlock)

What Im going to do monday is print out all the pages at work, then scan them in on our 40ppm scanner ;) in pdf format.

There a loads of answers missing for the 50 new questions, I WILL ONLY DO THIS ON THE BASIS THAT PEOPLE GIVE THEIR OPINION ON WHAT THEY THINK THE ANSWERS ARE !!! It's give and take ppl

Infact, I will only give to ppl who have contributed already, rather than leeches with 1 or 2 posts. dean, I will pm you with details on monday

[solara]

Originally Posted by ma77smith

What Im going to do monday is print out all the pages at work, then scan them in on our 40ppm scanner ;) in pdf format.

Did you know that you can print it to PDF without having to scan it in? Although the Test King program only appears to let you print to physical printers, there is a way around it.

-get a pdf printer like PrimoPDF and install it
-if you don't have a physical printer installed, install one that you have the drivers for. The HP Laserjet 8500 PS works for me.
-Now open Test King IPad viewer and minimize
-Open your printers applet and then rename your PrimoPDF printer to be EXACTLY the same name as your HP Laserjet 8500 PS (of course you'll also need to change the name of you real printer - append the word OLD to it or something)
-Go back to Test King IPad window and choose to print to the HP Laserjet 8500 PS and you will find that it prints to PrimoPDF and opens up a nice document with 121 Test King questions.

I would share mine with you all but I'm just too chicken.

:)
solara

[solara]

I happened to open the updated question list on number 111. Here's my opinion.

Question number 111
Answer D

When displaying active connections in SmartView Tracker you can highlight a record and then select “Block Intruder” from the Tools menu. This displays the Block Intruder window that gives you the option to define the blocking scope, blocking timeout and on which gateways to enforce this block

[ma77smith]

Originally Posted by solara

I happened to open the updated question list on number 111. Here's my opinion.

Question number 111
Answer D

When displaying active connections in SmartView Tracker you can highlight a record and then select “Block Intruder” from the Tools menu. This displays the Block Intruder window that gives you the option to define the blocking scope, blocking timeout and on which gateways to enforce this block

yes, definately D

[solara]

By the way Ma77Smith, did you know that if you submit the answers with explanations to Test King they will give you credit off you next purchase? I submitted the answer I posted previously to Test King, prior to posting it here, and later received 3 USD of my next purchase.

That equates to getting paid for doing homework. I like it.

I think it depends on them not already having worked through the answer you submit.

[ma77smith]

solara,

they have just brought out version 10.1 !!

loads of answers, however Im sure some of them are wrong

for example question 105 is B not A

dbload is to load user database/network objects to a specific target

and it says in the question she needs to uninstall, so fwunload is the command.


What do you think ?

Also Q108 is B without doubt, if it is D then in contradicts what they say in Q40 !!

Oh and btw, how did you send your suggestions to testking ? feedback@testking.com ?