CheckPoint 156-215.80 Online Practice Questions and Exam Preparation

CheckPoint 156-215.80 Online Questions & Answers

• Question 241:

  An administrator is creating an IPsec site-to-site VPN between his corporate office and branch office. Both offices are protected by Check Point Security Gateway managed by the same Security Management Server (SMS). While configuring the VPN community to specify the pre-shared secret, the administrator did not find a box to input the pre-shared secret. Why does it not allow him to specify the pre-shared secret?

  A. The Gateway is an SMB device
  B. The checkbox "Use only Shared Secret for all external members" is not checked
  C. Certificate based Authentication is the only authentication method available between two Security Gateway managed by the same SMS
  D. Pre-shared secret is already configured in Global Properties
  C. Certificate based Authentication is the only authentication method available between two Security Gateway managed by the same SMS

• Question 242:

  Which tool provides a list of trusted files to the administrator so they can specify to the Threat Prevention blade that these files do not need to be scanned or analyzed?

  A. ThreatWiki
  B. Whitelist Files
  C. AppWiki
  D. IPS Protections
  A. ThreatWiki

• Question 243:

  What component of R80 Management is used for indexing?

  A. DBSync
  B. API Server
  C. fwm
  D. SOLR
  D. SOLR

• Question 244:

  Which of these components does NOT require a Security Gateway R77 license?

  A. Security Management Server
  B. Check Point Gateway
  C. SmartConsole
  D. SmartUpdate upgrading/patching
  C. SmartConsole

• Question 245:

  As you review this Security Policy, what changes could you make to accommodate Rule 4?

  

  A. Remove the service HTTP from the column Service in Rule 4.
  B. Modify the column VPN in Rule 2 to limit access to specific traffic.
  C. Nothing at all
  D. Modify the columns Source or Destination in Rule 4
  B. Modify the column VPN in Rule 2 to limit access to specific traffic.

• Question 246:

  You manage a global network extending from your base in Chicago to Tokyo, Calcutta and Dallas. Management wants a report detailing the current software level of each Enterprise class Security Gateway. You plan to take the opportunity to create a proposal outline, listing the most cost-effective way to upgrade your Gateways. Which two SmartConsole applications will you use to create this report and outline?

  A. SmartView Tracker and SmartView Monitor
  B. SmartLSM and SmartUpdate
  C. SmartDashboard and SmartView Tracker
  D. SmartView Monitor and SmartUpdate
  D. SmartView Monitor and SmartUpdate

• Question 247:

  Which type of attack can a firewall NOT prevent?

  A. Network Bandwidth Saturation
  B. Buffer Overflow
  C. SYN Flood
  D. SQL Injection
  A. Network Bandwidth Saturation

• Question 248:

  The Captive Portal tool:

  A. Acquires identities from unidentified users.
  B. Is only used for guest user authentication.
  C. Allows access to users already identified.
  D. Is deployed from the Identity Awareness page in the Global Properties settings.
  A. Acquires identities from unidentified users.

• Question 249:

  R80 Security Management Server can be installed on which of the following operating systems?

  A. Gaia only
  B. Gaia, SPLAT, Windows Server only
  C. Gaia, SPLAT, Windows Server and IPSO only
  D. Gaia and SPLAT only
  A. Gaia only

• Question 250:

  Fill in the blank: Licenses can be added to the License and Contract repository ________ .

  A. From the User Center, from a file, or manually
  B. From a file, manually, or from SmartView Monitor
  C. Manually, from SmartView Monitor, or from the User Center
  D. From SmartView Monitor, from the User Center, or from a file
  A. From the User Center, from a file, or manually