CheckPoint 156-215.80 Online Practice Questions and Exam Preparation

CheckPoint 156-215.80 Online Questions & Answers

• Question 91:

  If the first packet of an UDP session is rejected by a security policy, what does the firewall send to the client?

  A. Nothing
  B. TCP FIN
  C. TCP RST
  D. ICMP unreachable
  A. Nothing

• Question 92:

  Fill in the blank: The IPS policy for pre-R80 gateways is installed during the _______ .

  A. Firewall policy install
  B. Threat Prevention policy install
  C. Anti-bot policy install
  D. Access Control policy install
  B. Threat Prevention policy install

• Question 93:

  Which feature is NOT provided by all Check Point Mobile Access solutions?

  A. Support for IPv6
  B. Granular access control
  C. Strong user authentication
  D. Secure connectivity
  A. Support for IPv6

• Question 94:

  AdminA and AdminB are both logged in on SmartConsole. What does it mean if AdminB sees a locked icon on a rule? Choose the BEST answer.

  A. Rule is locked by AdminA, because the save bottom has not been press.
  B. Rule is locked by AdminA, because an object on that rule is been edited.
  C. Rule is locked by AdminA, and will make it available if session is published.
  D. Rule is locked by AdminA, and if the session is saved, rule will be available
  C. Rule is locked by AdminA, and will make it available if session is published.

• Question 95:

  Which statement is NOT TRUE about Delta synchronization?

  A. Using UDP Multicast or Broadcast on port 8161
  B. Using UDP Multicast or Broadcast on port 8116
  C. Quicker than Full sync
  D. Transfers changes in the Kernel tables between cluster members
  A. Using UDP Multicast or Broadcast on port 8161

• Question 96:

  Which authentication scheme requires a user to possess a token?

  A. TACACS
  B. SecurID
  C. Check Point password
  D. RADIUS
  B. SecurID

• Question 97:

  You want to define a selected administrator's permission to edit a layer. However, when you click the + sign in the "Select additional profile that will be able edit this layer" you do not see anything. What is the most likely cause of this problem? Select the BEST answer.

  

  A. "Edit layers by Software Blades" is unselected in the Permission Profile
  B. There are no permission profiles available and you need to create one first.
  C. All permission profiles are in use.
  D. "Edit layers by selected profiles in a layer editor" is unselected in the Permission profile.
  B. There are no permission profiles available and you need to create one first.

• Question 98:

  What is the purpose of a Stealth Rule?

  A. A rule used to hide a server's IP address from the outside world.
  B. A rule that allows administrators to access SmartDashboard from any device.
  C. To drop any traffic destined for the firewall that is not otherwise explicitly allowed.
  D. A rule at the end of your policy to drop any traffic that is not explicitly allowed.
  C. To drop any traffic destined for the firewall that is not otherwise explicitly allowed.

• Question 99:

  Which rule is responsible for the user authentication failure?

  

  A. Rule 4
  B. Rule 6
  C. Rule 3
  D. Rule 5
  C. Rule 3

• Question 100:

  Your manager requires you to setup a VPN to a new business partner site. The administrator from the partner site gives you his VPN settings and you notice that he setup AES 128 for IKE phase 1 and AES 256 for IKE phase 2. Why is this a problematic setup?

  A. The two algorithms do not have the same key length and so don't work together. You will get the error ... No proposal chosen...
  B. All is fine as the longest key length has been chosen for encrypting the data and a shorter key length for higher performance for setting up the tunnel.
  C. Only 128 bit keys are used for phase 1 keys which are protecting phase 2, so the longer key length in phase 2 only costs performance and does not add security due to a shorter key in phase 1.
  D. All is fine and can be used as is.
  C. Only 128 bit keys are used for phase 1 keys which are protecting phase 2, so the longer key length in phase 2 only costs performance and does not add security due to a shorter key in phase 1.