CheckPoint 156-215.80 Online Practice Questions and Exam Preparation

CheckPoint 156-215.80 Online Questions & Answers

• Question 161:

  Which of the following is an authentication method used for Identity Awareness?

  A. SSL
  B. Captive Portal
  C. PKI
  D. RSA
  B. Captive Portal

• Question 162:

  An administrator is creating an IPsec site-to-site VPN between his corporate office and branch office. Both offices are protected by Check Point Security Gateway managed by the same Security Management Server. While configuring the VPN community to specify the pre-shared secret the administrator found that the check box to enable pre-shared secret is shared and cannot be enabled. Why does it not allow him to specify the pre-shared secret?

  A. IPsec VPN blade should be enabled on both Security Gateway.
  B. Pre-shared can only be used while creating a VPN between a third party vendor and Check Point Security Gateway.
  C. Certificate based Authentication is the only authentication method available between two Security Gateway managed by the same SMS.
  D. The Security Gateways are pre-R75.40.
  C. Certificate based Authentication is the only authentication method available between two Security Gateway managed by the same SMS.

• Question 163:

  Which of the following is NOT an advantage to using multiple LDAP servers?

  A. You achieve a faster access time by placing LDAP servers containing the database at remote sites
  B. Information on a user is hidden, yet distributed across several servers
  C. You achieve compartmentalization by allowing a large number of users to be distributed across several servers
  D. You gain High Availability by replicating the same information on several servers
  B. Information on a user is hidden, yet distributed across several servers

• Question 164:

  Fill in the blank: An LDAP server holds one or more ______________.

  A. Server Units
  B. Administrator Units
  C. Account Units
  D. Account Servers
  C. Account Units

• Question 165:

  Which of the following is TRUE regarding Gaia command line?

  A. Configuration changes should be done in mgmt_cli and use CLISH for monitoring, Expert mode is used only for OS level tasks.
  B. Configuration changes should be done in expert-mode and CLISH is used for monitoring.
  C. Configuration changes should be done in mgmt-cli and use expert-mode for OS-level tasks.
  D. All configuration changes should be made in CLISH and expert-mode should be used for OS-level tasks.
  D. All configuration changes should be made in CLISH and expert-mode should be used for OS-level tasks.

• Question 166:

  Where can you trigger a failover of the cluster members?

  1.

  Log in to Security Gateway CLI and run command clusterXL_admin down.

  2.

  In SmartView Monitor right-click the Security Gateway member and select Cluster member down.

  3.

  Log into Security Gateway CLI and run command cphaprob down.

  A. 1, 2, and 3
  B. 2 and 3
  C. 1 and 2
  D. 1 and 3
  C. 1 and 2

• Question 167:

  What is the command to see cluster status in cli expert mode?

  A. fw ctl stat
  B. clusterXL stat
  C. clusterXL status
  D. cphaprob stat
  A. fw ctl stat

• Question 168:

  The organization's security manager wishes to back up just the Gaia operating system parameters. Which command can be used to back up only Gaia operating system parameters like interface details, Static routes and Proxy ARP entries?

  A. show configuration
  B. backup
  C. migrate export
  D. upgrade export
  B. backup

• Question 169:

  Fill in the blank: A(n) _____ rule is created by an administrator and is located before the first and before last rules in the Rule Base.

  A. Firewall drop
  B. Explicit
  C. Implicit accept
  D. Implicit drop
  E. Implied
  E. Implied

• Question 170:

  In the Check Point Security Management Architecture, which component(s) can store logs?

  A. SmartConsole
  B. Security Management Server and Security Gateway
  C. Security Management Server
  D. SmartConsole and Security Management Server
  B. Security Management Server and Security Gateway