CheckPoint 156-215.80 Online Practice Questions and Exam Preparation

CheckPoint 156-215.80 Online Questions & Answers

• Question 191:

  Which of the following uses the same key to decrypt as it does to encrypt?

  A. Asymmetric encryption
  B. Dynamic encryption
  C. Certificate-based encryption
  D. Symmetric encryption
  D. Symmetric encryption

• Question 192:

  There are two R77.30 Security Gateways in the Firewall Cluster. They are named FW_A and FW_B. The cluster is configured to work as HA (High availability) with default cluster configuration. FW_A is configured to have higher priority than FW_B. FW_A was active and processing the traffic in the morning. FW_B was standby. Around 1100 am, its interfaces went down and this caused a failover. FW_B became active. After an hour, FW_A's interface issues were resolved and it became operational. When it re-joins the cluster, will it become active automatically?

  A. No, since "maintain current active cluster member" option on the cluster object properties is enabled by default
  B. No, since "maintain current active cluster member" option is enabled by default on the Global Properties
  C. Yes, since "Switch to higher priority cluster member" option on the cluster object properties is enabled by default
  D. Yes, since "Switch to higher priority cluster member" option is enabled by default on the Global Properties
  A. No, since "maintain current active cluster member" option on the cluster object properties is enabled by default

• Question 193:

  What is the Transport layer of the TCP/IP model responsible for?

  A. It transports packets as datagrams along different routes to reach their destination.
  B. It manages the flow of data between two hosts to ensure that the packets are correctly assembled and delivered to the target application.
  C. It defines the protocols that are used to exchange data between networks and how host programs interact with the Application layer.
  D. It deals with all aspects of the physical components of network connectivity and connects with different network types.
  B. It manages the flow of data between two hosts to ensure that the packets are correctly assembled and delivered to the target application.

• Question 194:

  While in SmartView Tracker, Brady has noticed some very odd network traffic that he thinks could be an intrusion. He decides to block the traffic for 60 minutes, but cannot remember all the steps. What is the correct order of steps needed to

  set up the block?

  1) Select Active Mode tab in SmartView Tracker.

  2) Select Tools > Block Intruder.

  3) Select Log Viewing tab in SmartView Tracker.

  4) Set Blocking Timeout value to 60 minutes.

  5) Highlight connection that should be blocked.

  A. 1, 2, 5, 4
  B. 3, 2, 5, 4
  C. 1, 5, 2, 4
  D. 3, 5, 2, 4
  C. 1, 5, 2, 4

• Question 195:

  What is also referred to as Dynamic NAT?

  A. Automatic NAT
  B. Static NAT
  C. Manual NAT
  D. Hide NAT
  D. Hide NAT

• Question 196:

  Jack works for a managed service provider and he has been tasked to create 17 new policies for several new customers. He does not have much time. What is the BEST way to do this with R80 security management?

  A. Create a text-file with mgmt_cli script that creates all objects and policies. Open the file in SmartConsole Command Line to run it.
  B. Create a text-file with Gaia CLI -commands in order to create all objects and policies. Run the file in CLISH with command load configuration.
  C. Create a text-file with DBEDIT script that creates all objects and policies. Run the file in the command line of the management server using command dbedit -f.
  D. Use Object Explorer in SmartConsole to create the objects and Manage Policies from the menu to create the policies.
  A. Create a text-file with mgmt_cli script that creates all objects and policies. Open the file in SmartConsole Command Line to run it.

• Question 197:

  What CLI utility allows an administrator to capture traffic along the firewall inspection chain?

  A. show interface (interface) 璫hain
  B. tcpdump
  C. tcpdump /snoop
  D. fw monitor
  D. fw monitor

• Question 198:

  Which directory holds the SmartLog index files by default?

  A. $SMARTLOGDIR/data
  B. $SMARTLOG/dir
  C. $FWDIR/smartlog
  D. $FWDIR/log
  A. $SMARTLOGDIR/data

• Question 199:

  Which of the following is a new R80.10 Gateway feature that had not been available in R77.X and older?

  A. The rule base can be built of layers, each containing a set of the security rules. Layers are inspected in the order in which they are defined, allowing control over the rule base flow and which security functionalities take precedence.
  B. Limits the upload and download throughput for streaming media in the company to 1 Gbps.
  C. Time object to a rule to make the rule active only during specified times.
  D. Sub Policies are sets of rules that can be created and attached to specific rules. If the rule is matched, inspection will continue in the sub policy attached to it rather than in the next rule.
  D. Sub Policies are sets of rules that can be created and attached to specific rules. If the rule is matched, inspection will continue in the sub policy attached to it rather than in the next rule.

• Question 200:

  What data MUST be supplied to the SmartConsole System Restore window to restore a backup?

  A. Server, Username, Password, Path, Version
  B. Username, Password, Path, Version
  C. Server, Protocol, Username, Password, Destination Path
  D. Server, Protocol, Username, Password, Path
  D. Server, Protocol, Username, Password, Path