CheckPoint 156-215.80 Online Practice Questions and Exam Preparation

CheckPoint 156-215.80 Online Questions & Answers

• Question 141:

  On the following picture an administrator configures Identity Awareness:

  

  After clicking "Next" the above configuration is supported by:

  A. Kerberos SSO which will be working for Active Directory integration
  B. Based on Active Directory integration which allows the Security Gateway to correlate Active Directory users and machines to IP addresses in a method that is completely transparent to the user
  C. Obligatory usage of Captive Portal
  D. The ports 443 or 80 what will be used by Browser-Based and configured Authentication
  B. Based on Active Directory integration which allows the Security Gateway to correlate Active Directory users and machines to IP addresses in a method that is completely transparent to the user

• Question 142:

  What is the BEST command to view configuration details of all interfaces in Gaia CLISH?

  A. ifconfig -a
  B. show interfaces
  C. show interfaces detail
  D. show configuration interface
  D. show configuration interface

• Question 143:

  Which of the following actions do NOT take place in IKE Phase 1?

  A. Peers agree on encryption method.
  B. Diffie-Hellman key is combined with the key material to produce the symmetrical IPsec key.
  C. Peers agree on integrity method.
  D. Each side generates a session key from its private key and peer's public key.
  B. Diffie-Hellman key is combined with the key material to produce the symmetrical IPsec key.

• Question 144:

  Which of the following is NOT a valid deployment option for R80?

  A. All-in-one (stand-alone)
  B. Log server
  C. SmartEvent
  D. Multi-domain management server
  D. Multi-domain management server

• Question 145:

  What is the default method for destination NAT?

  A. Destination side
  B. Source side
  C. Server side
  D. Client side
  D. Client side

• Question 146:

  What does the "unknown" SIC status shown on SmartConsole mean?

  A. The SMS can contact the Security Gateway but cannot establish Secure Internal Communication.
  B. SIC activation key requires a reset.
  C. The SIC activation key is not known by any administrator.
  D. There is no connection between the Security Gateway and SMS.
  D. There is no connection between the Security Gateway and SMS.

• Question 147:

  Which of the following is NOT an authentication scheme used for accounts created through SmartConsole?

  A. Security questions
  B. Check Point password
  C. SecurID
  D. RADIUS
  A. Security questions

• Question 148:

  Choose the Best place to find a Security Management Server backup file named backup_fw, on a Check Point Appliance.

  A. /var/log/Cpbackup/backups/backup/backup_fw.tgs
  B. /var/log/Cpbackup/backups/backup/backup_fw.tar
  C. /var/log/Cpbackup/backups/backups/backup_fw.tar
  D. /var/log/Cpbackup/backups/backup_fw.tgz
  D. /var/log/Cpbackup/backups/backup_fw.tgz

• Question 149:

  Administrator Kofi has just made some changes on his Management Server and then clicks on the Publish button in SmartConsole but then gets the error message shown in the screenshot below. Where can the administrator check for more information on these errors?

  

  A. The Log and Monitor section in SmartConsole
  B. The Validations section in SmartConsole
  C. The Objects section in SmartConsole
  D. The Policies section in SmartConsole
  B. The Validations section in SmartConsole

• Question 150:

  What does ExternalZone represent in the presented rule?

  

  A. The Internet.
  B. Interfaces that administrator has defined to be part of External Security Zone.
  C. External interfaces on all security gateways.
  D. External interfaces of specific gateways.
  B. Interfaces that administrator has defined to be part of External Security Zone.