CheckPoint Checkpoint Certifications 156-215.80 Questions & Answers

• Question 171:

  Choose the Best place to find a Security Management Server backup file named backup_fw, on a Check Point Appliance.

  A. /var/log/Cpbackup/backups/backup/backup_fw.tgs

  B. /var/log/Cpbackup/backups/backup/backup_fw.tar

  C. /var/log/Cpbackup/backups/backups/backup_fw.tar

  D. /var/log/Cpbackup/backups/backup_fw.tgz

  Correct Answer: D

  Gaia's Backup feature allows backing up the configuration of the Gaia OS and of the Security Management

  server database, or restoring a previously saved configuration.

  The configuration is saved to a .tgz file in the following directory:

  

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal? action=portlets.SearchResultMainActionandeventSubmit_doGoviewsolutiondetails=andsolutionid=sk91400

• Question 172:

  With which command can you view the running configuration of Gaia-based system.

  A. show conf-active

  B. show configuration active

  C. show configuration

  D. show running-configuration

  Correct Answer: C

• Question 173:

  Which of the following is TRUE regarding Gaia command line?

  A. Configuration changes should be done in mgmt_cli and use CLISH for monitoring, Expert mode is used only for OS level tasks.

  B. Configuration changes should be done in expert-mode and CLISH is used for monitoring.

  C. Configuration changes should be done in mgmt-cli and use expert-mode for OS-level tasks.

  D. All configuration changes should be made in CLISH and expert-mode should be used for OS-level tasks.

  Correct Answer: D

• Question 174:

  If there are two administrators logged in at the same time to the SmartConsole, and there are objects locked for editing, what must be done to make them available to other administrators? Choose the BEST answer.

  A. Publish or discard the session.

  B. Revert the session.

  C. Save and install the Policy.

  D. Delete older versions of database.

  Correct Answer: A

  To make changes available to all administrators, and to unlock the objects and rules that are being edited, the administrator must publish the session. To make your changes available to other administrators, and to save the database before installing a policy, you must publish the session. When you publish a session, a new database version is created. When you select Install Policy, you are prompted to publish all unpublished changes. You cannot install a policy if the included changes are not published.

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm? topic=documents/R80/CP_R80_SecMGMT/126197

• Question 175:

  By default, which port does the WebUI listen on?

  A. 80

  B. 4434

  C. 443

  D. 8080

  Correct Answer: C

  To configure Security Management Server on Gaia:

  Open a browser to the WebUI: https://

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_Gaia_IUG/html_frameset.htm?

  topic=documents/R80/CP_R80_Gaia_IUG/132120

• Question 176:

  When doing a Stand-Alone Installation, you would install the Security Management Server with which other Check Point architecture component?

  A. None, Security Management Server would be installed by itself.

  B. SmartConsole

  C. SecureClient

  D. Security Gateway

  Correct Answer: D

  There are different deployment scenarios for Check Point software products.

  Standalone Deployment - The Security Management Server and the Security Gateway are installed on the

  same computer or appliance.

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Installation_and_Upgrade_GuidewebAdmin/86429.htm

• Question 177:

  Which options are given on features, when editing a Role on Gaia Platform?

  A. Read/Write, Read Only

  B. Read/Write, Read only, None

  C. Read/Write, None

  D. Read Only, None

  Correct Answer: B

  Roles

  Role-based administration (RBA) lets you create administrative roles for users. With RBA, an administrator

  can allow Gaia users to access specified features by including those features in a role and assigning that

  role to users. Each role can include a combination of administrative (read/write) access to some features,

  monitoring (read-only) access to other features, and no access to other features.

  You can also specify which access mechanisms (WebUI or the CLI) are available to the user.

  

  Note - When users log in to the WebUI, they see only those features that they have read-only or read/write access to. If they have read-only access to a feature, they can see the settings pages, but cannot change the settings.

  Gaia includes these predefined roles:

  1.

  adminRole - Gives the user read/write access to all features.

  2.

  monitorRole- Gives the user read-only access to all features. You cannot delete or change the predefined roles.

  

  Note - Do not define a new user for external users. An external user is one that is defined on an authentication server (such as RADIUS or TACACS) and not on the local Gaia system.

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_Gaia_AdminWebAdminGuide/ html_frameset.htm?topic=documents/R77/CP_R77_Gaia_AdminWebAdminGuide/75930

• Question 178:

  To optimize Rule Base efficiency the most hit rules should be where?

  A. Removed from the Rule Base.

  B. Towards the middle of the Rule Base.

  C. Towards the top of the Rule Base.

  D. Towards the bottom of the Rule Base.

  Correct Answer: C

  It is logical that if lesser rules are checked for the matched rule to be found the lesser CPU cycles the device is using. Checkpoint match a session from the first rule on top till the last on the bottom.

• Question 179:

  Which of the following is NOT a license activation method?

  A. SmartConsole Wizard

  B. Online Activation

  C. License Activation Wizard

  D. Offline Activation

  Correct Answer: A

• Question 180:

  Which policy type has its own Exceptions section?

  A. Thread Prevention

  B. Access Control

  C. Threat Emulation

  D. Desktop Security

  Correct Answer: A

  The Exceptions Groups pane lets you define exception groups. When necessary, you can create exception groups to use in the Rule Base. An exception group contains one or more defined exceptions. This option facilitates ease-of-use so you do not have to manually define exceptions in multiple rules for commonly required exceptions. You can choose to which rules you want to add exception groups. This means they can be added to some rules and not to others, depending on necessity.

  Reference: https://sc1.checkpoint.com/documents/R77/ CP_R77_ThreatPrevention_WebAdmin/82209.htm#o97030