CheckPoint 156-215.80 Online Practice Questions and Exam Preparation

CheckPoint 156-215.80 Online Questions & Answers

• Question 131:

  Which one of the following is the preferred licensing model? Select the Best answer.

  A. Local licensing because it ties the package license to the IP-address of the gateway and has no dependency of the Security Management Server.
  B. Central licensing because it ties the package license to the IP-address of the Security Management Server and has no dependency of the gateway.
  C. Local licensing because it ties the package license to the MAC-address of the gateway management interface and has no Security Management Server dependency.
  D. Central licensing because it ties the package license to the MAC-address of the Security Management Server Mgmt-interface and has no dependency of the gateway.
  B. Central licensing because it ties the package license to the IP-address of the Security Management Server and has no dependency of the gateway.

• Question 132:

  Fill in the blank: Once a certificate is revoked from the Security GateWay by the Security Management Server, the certificate information is _______.

  A. Sent to the Internal Certificate Authority.
  B. Sent to the Security Administrator.
  C. Stored on the Security Management Server.
  D. Stored on the Certificate Revocation List.
  D. Stored on the Certificate Revocation List.

• Question 133:

  How many packets does the IKE exchange use for Phase 1 Main Mode?

  A. 12
  B. 1
  C. 3
  D. 6
  D. 6

• Question 134:

  The "Hit count" feature allows tracking the number of connections that each rule matches. Will the Hit count feature work independently from logging and Track the hits even if the Track option is set to "None"?

  A. No, it will not work independently. Hit Count will be shown only for rules with Track options set as Log or alert
  B. Yes, it will work independently as long as "analyze all rules" tick box is enabled on the Security Gateway
  C. No, it will not work independently because hit count requires all rules to be logged
  D. Yes, it will work independently because when you enable Hit Count, the SMS collects the data from supported Security Gateways
  D. Yes, it will work independently because when you enable Hit Count, the SMS collects the data from supported Security Gateways

• Question 135:

  Which of the following is NOT a valid deployment option for R80?

  A. All-in-one (stand-alone)
  B. CloudGuard
  C. Distributed
  D. Bridge Mode
  B. CloudGuard

• Question 136:

  Choose what BEST describes a Session.

  A. Starts when an Administrator publishes all the changes made on SmartConsole.
  B. Starts when an Administrator logs in to the Security Management Server through SmartConsole and ends when it is published.
  C. Sessions ends when policy is pushed to the Security Gateway.
  D. Sessions locks the policy package for editing.
  B. Starts when an Administrator logs in to the Security Management Server through SmartConsole and ends when it is published.

• Question 137:

  The security Gateway is installed on GAiA R80 The default port for the WEB User Interface is _______ .

  A. TCP 18211
  B. TCP 257
  C. TCP 4433
  D. TCP 443
  D. TCP 443

• Question 138:

  VPN gateways must authenticate to each other prior to exchanging information. What are the two types of credentials used for authentication?

  A. 3DES and MD5
  B. Certificates and IPsec
  C. Certificates and pre-shared secret
  D. IPsec and VPN Domains
  C. Certificates and pre-shared secret

• Question 139:

  Which of the following is NOT a valid backup command for a Security Management Server?

  A. save backup
  B. add backup
  C. add snapshot
  D. migrate export
  A. save backup

• Question 140:

  Which R77 GUI would you use to see number of packets accepted since the last policy install?

  A. SmartView Monitor
  B. SmartView Tracker
  C. SmartDashboard
  D. SmartView Status
  A. SmartView Monitor