CheckPoint Checkpoint Certifications 156-215.80 Questions & Answers

• Question 131:

  What are the two high availability modes?

  A. Load Sharing and Legacy

  B. Traditional and New

  C. Active and Standby

  D. New and Legacy

  Correct Answer: D

  ClusterXL has four working modes. This section briefly describes each mode and its relative advantages and disadvantages.

  1.

  Load Sharing Multicast Mode

  2.

  Load Sharing Unicast Mode

  3.

  New High Availability Mode

  4.

  High Availability Legacy Mode

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_ClusterXL_AdminGuide/7292.htm#o7363

• Question 132:

  Fill in the blank: The R80 feature ________ permits blocking specific IP addresses for a specified time period.

  A. Block Port Overflow

  B. Local Interface Spoofing

  C. Suspicious Activity Monitoring

  D. Adaptive Threat Prevention

  Correct Answer: C

  Suspicious Activity Rules Solution Suspicious Activity Rules is a utility integrated into SmartView Monitor that is used to modify access privileges upon detection of any suspicious network activity (for example, several attempts to gain unauthorized access). The detection of suspicious activity is based on the creation of Suspicious Activity rules. Suspicious Activity rules are Firewall rules that enable the system administrator to instantly block suspicious connections that are not restricted by the currently enforced security policy. These rules, once set (usually with an expiration date), can be applied immediately without the need to perform an Install Policy operation Reference: https://sc1.checkpoint.com/documents/R76/ CP_R76_SmartViewMonitor_AdminGuide/17670.htm

• Question 133:

  What does ExternalZone represent in the presented rule?

  

  A. The Internet.

  B. Interfaces that administrator has defined to be part of External Security Zone.

  C. External interfaces on all security gateways.

  D. External interfaces of specific gateways.

  Correct Answer: B

  Configuring Interfaces

  Configure the Security Gateway 80 interfaces in the Interfaces tab in the Security Gateway window.

  To configure the interfaces:

  1.

  From the Devices window, double-click the Security Gateway 80. The Security Gateway window opens.

  2.

  Select the Interfaces tab.

  3.

  Select Use the following settings. The interface settings open.

  4.

  Select the interface and click Edit. The Edit window opens.

  5.

  From the IP Assignment section, configure the IP address of the interface:

  1.

  Select Static IP.

  2.

  Enter the IP address and subnet mask for the interface.

  6. In Security Zone, select Wireless, DMS, External, or Internal. Security zone is a type of zone, created by a bridge to easily create segments, while maintaining IP addresses and router configurations. Security zones let you choose if to enable or not the firewall between segments.

  Reference: https://sc1.checkpoint.com/documents/R76/ CP_R76_SmartProvisioning_WebAdmin/16741.htm

• Question 134:

  You are unable to login to SmartDashboard. You log into the management server and run #cpwd_admin

  list with the following output:

  

  What reason could possibly BEST explain why you are unable to connect to SmartDashboard?

  A. CDP is down

  B. SVR is down

  C. FWM is down

  D. CPSM is down

  Correct Answer: C

  The correct answer would be FWM (is the process making available communication between

  SmartConsole applications and Security Management Server.). STATE is T (Terminate = Down)

  :

  Symptoms

  SmartDashboard fails to connect to the Security Management server.

  1.

  Verify if the FWM process is running. To do this, run the command: [Expert@HostName:0]# ps -aux | grep fwm

  2.

  If the FWM process is not running, then try force-starting the process with the following command: [Expert@HostName:0]# cpwd_admin start -name FWM -path "$FWDIR/bin/fwm" -command "fwm"

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal? eventSubmit_doGoviewsolutiondetails=andsolutionid=sk97638 https://supportcenter.checkpoint.com/ supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk12120

• Question 135:

  What are the two types of address translation rules?

  A. Translated packet and untranslated packet

  B. Untranslated packet and manipulated packet

  C. Manipulated packet and original packet

  D. Original packet and translated packet

  Correct Answer: D

  NAT Rule Base

  The NAT Rule Base has two sections that specify how the IP addresses are translated:

  1.

  Original Packet

  2.

  Translated Packet Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Firewall_WebAdmin/6724.htm

• Question 136:

  What are the three essential components of the Check Point Security Management Architecture?

  A. SmartConsole, Security Management Server, Security Gateway

  B. SmartConsole, SmartUpdate, Security Gateway

  C. Security Management Server, Security Gateway, Command Line Interface

  D. WebUI, SmartConsole, Security Gateway

  Correct Answer: A

  Deployments

  Basic deployments:

  1.

  Standalone deployment - Security Gateway and the Security Management server are installed on the same machine.

  2.

  Distributed deployment - Security Gateway and the Security Management server are installed on different machines.

  

  Assume an environment with gateways on different sites. Each Security Gateway connects to the Internet

  on one side, and to a LAN on the other.

  You can create a Virtual Private Network (VPN) between the two Security Gateways, to secure all

  communication between them.

  The Security Management server is installed in the LAN, and is protected by a Security Gateway. The

  Security Management server manages the Security Gateways and lets remote users connect securely to

  the corporate network.

  SmartDashboard can be installed on the Security Management server or another computer.

  There can be other OPSEC-partner modules (for example, an Anti-Virus Server) to complete the network

  security with the Security Management server and its Security Gateways. Reference: https://

  sc1.checkpoint.com/documents/R77/CP_R77_SecurityManagement_WebAdminGuide/

  html_frameset.htm?topic=documents/R77/CP_R77_SecurityManagement_WebAdminGuide/118037

• Question 137:

  You work as a security administrator for a large company. CSO of your company has attended a security conference where he has learnt how hackers constantly modify their strategies and techniques to evade detection and reach corporate resources. He wants to make sure that his company has the right protections in place. Check Point has been selected for the security vendor. Which Check Point products protects BEST against malware and zero-day attacks while ensuring quick delivery of safe content to your users?

  A. IPS and Application Control

  B. IPS, anti-virus and anti-bot

  C. IPS, anti-virus and e-mail security

  D. SandBlast

  Correct Answer: D

  SandBlast Zero-Day Protection Hackers constantly modify their strategies and techniques to evade detection and reach corporate resources. Zero-day exploit protection from Check Point provides a deeper level of inspection so you can prevent more malware and zero-day attacks, while ensuring quick delivery of safe content to your users. Reference: https://www.checkpoint.com/products-solutions/zero-day-protection/

• Question 138:

  Fill in the blank: Each cluster has __________ interfaces.

  A. Five

  B. Two

  C. Three

  D. Four

  Correct Answer: C

  Each cluster member has three interfaces: one external interface, one internal interface, and one for synchronization. Cluster member interfaces facing in each direction are connected via a switch, router, or VLAN switch.

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_ClusterXL_AdminGuide/7292.htm

• Question 139:

  Which application should you use to install a contract file?

  A. SmartView Monitor

  B. WebUI

  C. SmartUpdate

  D. SmartProvisioning

  Correct Answer: C

  Using SmartUpdate: If you already use an NGX R65 (or higher) Security Management / Provider-1 / Multi-Domain Management Server, SmartUpdate allows you to import the service contract file that you have downloaded in Step #3. Open SmartUpdate and from the Launch Menu select 'Licenses and Contracts' -> 'Update Contracts' -> 'From File...' and provide the path to the file you have downloaded in Step #3: Note: If SmartUpdate is connected to the Internet, you can download the service contract file directly from the UserCenter without going through the download and import steps. Reference: https:// supportcenter.checkpoint.com/supportcenter/portal? eventSubmit_doGoviewsolutiondetails=andsolutionid=sk33089

  

• Question 140:

  Which feature is NOT provided by all Check Point Mobile Access solutions?

  A. Support for IPv6

  B. Granular access control

  C. Strong user authentication

  D. Secure connectivity

  Correct Answer: A

  Types of Solutions

  All of Check Point's Remote Access solutions provide:

  1.

  Enterprise-grade, secure connectivity to corporate resources.

  2.

  Strong user authentication.

  3.

  Granular access control.

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_VPN_AdminGuide/83586.htm