CheckPoint 156-215.80 Online Practice Questions and Exam Preparation

CheckPoint 156-215.80 Online Questions & Answers

• Question 121:

  A Cleanup rule:

  A. logs connections that would otherwise be dropped without logging by default.
  B. drops packets without logging connections that would otherwise be dropped and logged by default.
  C. logs connections that would otherwise be accepted without logging by default.
  D. drops packets without logging connections that would otherwise be accepted and logged by default.
  A. logs connections that would otherwise be dropped without logging by default.

• Question 122:

  Which of the following is considered to be the more secure and preferred VPN authentication method?

  A. Password
  B. Certificate
  C. MD5
  D. Pre-shared secret
  B. Certificate

• Question 123:

  Which two of these Check Point Protocols are used by _____ ?

  A. ELA and CPD
  B. FWD and LEA
  C. FWD and CPLOG
  D. ELA and CPLOG
  B. FWD and LEA

• Question 124:

  You want to establish a VPN, using certificates. Your VPN will exchange certificates with an external partner. Which of the following activities sh you do first?

  A. Create a new logical-server object to represent your partner's CA
  B. Exchange exported CA keys and use them to create a new server object to represent your partner's Certificate Authority (CA)
  C. Manually import your partner's Certificate Revocation List.
  D. Manually import your partner's Access Control List.
  B. Exchange exported CA keys and use them to create a new server object to represent your partner's Certificate Authority (CA)

• Question 125:

  When you upload a package or license to the appropriate repository in SmartUpdate, where is the package or license stored

  A. Security Gateway
  B. Check Point user center
  C. Security Management Server
  D. SmartConsole installed device
  C. Security Management Server

• Question 126:

  Which key is created during Phase 2 of a site-to-site VPN?

  A. Pre-shared secret
  B. Diffie-Hellman Public Key
  C. Symmetrical IPSec key
  D. Diffie-Hellman Private Key
  C. Symmetrical IPSec key

• Question 127:

  To ensure that VMAC mode is enabled, which CLI command you should run on all cluster members? Choose the best answer.

  A. fw ctl set int fwha vmac global param enabled
  B. fw ctl get int fwha vmac global param enabled; result of command should return value 1
  C. cphaprob
  D. fw ctl get int fwha_vmac_global_param_enabled; result of command should return value 1
  B. fw ctl get int fwha vmac global param enabled; result of command should return value 1

• Question 128:

  If there are two administrators logged in at the same time to the SmartConsole, and there are objects locked for editing, what must be done to make them available to other administrators? Choose the BEST answer.

  A. Publish or discard the session.
  B. Revert the session.
  C. Save and install the Policy.
  D. Delete older versions of database.
  A. Publish or discard the session.

• Question 129:

  By default, which port does the WebUI listen on?

  A. 80
  B. 4434
  C. 443
  D. 8080
  C. 443

• Question 130:

  Which of the following statements is TRUE about R80 management plug-ins?

  A. The plug-in is a package installed on the Security Gateway.
  B. Installing a management plug-in requires a Snapshot, just like any upgrade process.
  C. A management plug-in interacts with a Security Management Server to provide new features and support for new products.
  D. Using a plug-in offers full central management only if special licensing is applied to specific features of the plug-in.
  C. A management plug-in interacts with a Security Management Server to provide new features and support for new products.