CheckPoint 156-215.80 Online Practice Questions and Exam Preparation

CheckPoint 156-215.80 Online Questions & Answers

• Question 211:

  Vanessa is a Firewall administrator. She wants to test a backup of her company's production Firewall cluster Dallas_GW. She has a lab environment that is identical to her production environment. She decided to restore production backup via SmartConsole in lab environment. Which details she need to fill in System Restore window before she can click OK button and test the backup?

  A. Server, SCP, Username, Password, Path, Comment, Member
  B. Server, TFTP, Username, Password, Path, Comment, All Members
  C. Server, Protocol, Username, Password, Path, Comment, All Members
  D. Server, Protocol, Username, Password, Path, Comment, Member
  C. Server, Protocol, Username, Password, Path, Comment, All Members

• Question 212:

  What is the most complete definition of the difference between the Install Policy button on the SmartConsole's tab, and the Install Policy within a specific policy?

  A. The Global one also saves and published the session before installation.
  B. The Global one can install multiple selected policies at the same time.
  C. The local one does not install the Anti-Malware policy along with the Network policy.
  D. The second one pre-select the installation for only the current policy and for the applicable gateways.
  D. The second one pre-select the installation for only the current policy and for the applicable gateways.

• Question 213:

  Which of the following is TRUE about the Check Point Host object?

  A. Check Point Host has no routing ability even if it has more than one interface installed.
  B. When you upgrade to R80 from R77.30 or earlier versions, Check Point Host objects are converted to gateway objects.
  C. Check Point Host is capable of having an IP forwarding mechanism.
  D. Check Point Host can act as a firewall.
  A. Check Point Host has no routing ability even if it has more than one interface installed.

• Question 214:

  Fill in the blank: The _________ software blade enables Application Security policies to allow, block, or limit website access based on user, group, and machine identities.

  A. Application Control
  B. Data Awareness
  C. URL Filtering
  D. Threat Emulation
  A. Application Control

• Question 215:

  You find a suspicious connection from a problematic host. You decide that you want to block everything from that whole network, not just the problematic host. You want to block this for an hour while you investigate further, but you do not want to add any rules to the Rule Base. How do you achieve this?

  A. Use dbedit to script the addition of a rule directly into the Rule Bases_5_0.fws configuration file.
  B. Select Block intruder from the Tools menu in SmartView Tracker.
  C. Create a Suspicious Activity Rule in Smart Monitor.
  D. Add a temporary rule using SmartDashboard and select hide rule.
  C. Create a Suspicious Activity Rule in Smart Monitor.

• Question 216:

  After the initial installation on Check Point appliance, you notice that the Management interface and default gateway are incorrect. Which commands could you use to set the IP to 192.168.80.200/24 and default gateway to 192.168.80.1.

  A. set interface Mgmt ipv4-address 192.168.80.200 mask-length 24 set static-route default nexthop gateway address 192.168.80.1 on save config
  B. add interface Mgmt ipv4-address 192.168.80.200 255.255.255.0 add static-route 0.0.0.0.0.0.0.0 gw 192.168.80.1 on save config
  C. set interface Mgmt ipv4-address 192.168.80.200 255.255.255.0 add static-route 0.0.0.0.0.0.0.0 gw 192.168.80.1 on save config
  D. add interface Mgmt ipv4-address 192.168.80.200 mask-length 24 add static-route default nexthop gateway address 192.168.80.1 on save config
  A. set interface Mgmt ipv4-address 192.168.80.200 mask-length 24 set static-route default nexthop gateway address 192.168.80.1 on save config

• Question 217:

  What are the advantages of a "shared policy" in R80?

  A. Allows the administrator to share a policy between all the users identified by the Security Gateway
  B. Allows the administrator to share a policy between all the administrators managing the Security Management Server
  C. Allows the administrator to share a policy so that it is available to use in another Policy Package
  D. Allows the administrator to install a policy on one Security Gateway and it gets installed on another managed Security Gateway
  C. Allows the administrator to share a policy so that it is available to use in another Policy Package

• Question 218:

  Which one of these features is NOT associated with the Check Point URL Filtering and Application Control Blade?

  A. Detects and blocks malware by correlating multiple detection engines before users are affected.
  B. Configure rules to limit the available network bandwidth for specified users or groups.
  C. Use UserCheck to help users understand that certain websites are against the company's security policy.
  D. Make rules to allow or block applications and Internet sites for individual applications, categories, and risk levels.
  A. Detects and blocks malware by correlating multiple detection engines before users are affected.

• Question 219:

  What Check Point technologies deny or permit network traffic?

  A. Application Control, DLP
  B. Packet Filtering, Stateful Inspection, Application Layer Firewall.
  C. ACL, SandBlast, MPT
  D. IPS, Mobile Threat Protection
  B. Packet Filtering, Stateful Inspection, Application Layer Firewall.

• Question 220:

  Which of the following is NOT a set of Regulatory Requirements related to Information Security?

  A. ISO 37001
  B. Sarbanes Oxley (SOX)
  C. HIPPA
  D. PCI
  A. ISO 37001