CheckPoint 156-215.80 Online Practice Questions and Exam Preparation

CheckPoint 156-215.80 Online Questions & Answers

• Question 1:

  Which of the following is NOT supported by Bridge Mode Check Point Security Gateway

  A. Antivirus
  B. Data Loss Prevention
  C. NAT
  D. Application Control
  C. NAT

• Question 2:

  When using LDAP as an authentication method for Identity Awareness, the query:

  A. Requires client and server side software.
  B. Prompts the user to enter credentials.
  C. Requires administrators to specifically allow LDAP traffic to and from the LDAP Server and the Security Gateway.
  D. Is transparent, requiring no client or server side software, or client intervention.
  D. Is transparent, requiring no client or server side software, or client intervention.

• Question 3:

  A digital signature:

  A. Guarantees the authenticity and integrity of a message.
  B. Automatically exchanges shared keys.
  C. Decrypts data to its original form.
  D. Provides a secure key exchange mechanism over the Internet.
  A. Guarantees the authenticity and integrity of a message.

• Question 4:

  How is communication between different Check Point components secured in R80? As with all questions, select the best answer.

  A. By using IPSEC
  B. By using SIC
  C. By using ICA
  D. By using 3DES
  B. By using SIC

• Question 5:

  What is the purpose of Captive Portal?

  A. It provides remote access to SmartConsole
  B. It manages user permission in SmartConsole
  C. It authenticates users, allowing them access to the Internet and corporate resources
  D. It authenticates users, allowing them access to the Gaia OS
  C. It authenticates users, allowing them access to the Internet and corporate resources

• Question 6:

  Which of the following is NOT a tracking log option in R80.x?

  A. Log
  B. Full Log
  C. Detailed Log
  D. Extended Log
  C. Detailed Log

• Question 7:

  Which NAT rules are prioritized first?

  A. Post-Automatic/Manual NAT rules
  B. Manual/Pre-Automatic NAT
  C. Automatic Hide NAT
  D. Automatic Static NAT
  B. Manual/Pre-Automatic NAT

• Question 8:

  Which default user has full read/write access?

  A. Monitor
  B. Altuser
  C. Administrator
  D. Superuser
  C. Administrator

• Question 9:

  Please choose correct command syntax to add an "emailserver1" host with IP address 10.50.23.90 using GAiA management CLI?

  A. host name myHost12 ip-address 10.50.23.90
  B. mgmt add host name ip-address 10.50.23.90
  C. add host name emailserver1 ip-address 10.50.23.90
  D. mgmt add host name emailserver1 ip-address 10.50.23.90
  C. add host name emailserver1 ip-address 10.50.23.90

• Question 10:

  Provide very wide coverage for all products and protocols, with noticeable performance impact.

  

  How could you tune the profile in order to lower the CPU load still maintaining security at good level? Select the BEST answer.

  A. Set High Confidence to Low and Low Confidence to Inactive.
  B. Set the Performance Impact to Medium or lower.
  C. The problem is not with the Threat Prevention Profile. Consider adding more memory to the appliance.
  D. Set the Performance Impact to Very Low Confidence to Prevent.
  B. Set the Performance Impact to Medium or lower.