CheckPoint 156-215.80 Online Practice Questions and Exam Preparation

CheckPoint 156-215.80 Online Questions & Answers

• Question 261:

  When a packet arrives at the gateway, the gateway checks it against the rules in the top Policy Layer, sequentially from top to bottom, and enforces the first rule that matches a packet. Which of the following statements about the order of rule enforcement is true?

  A. If the Action is Accept, the gateway allows the packet to pass through the gateway.
  B. If the Action is Drop, the gateway continues to check rules in the next Policy Layer down.
  C. If the Action is Accept, the gateway continues to check rules in the next Policy Layer down.
  D. If the Action is Drop, the gateway applies the Implicit Clean-up Rule for that Policy Layer.
  C. If the Action is Accept, the gateway continues to check rules in the next Policy Layer down.

• Question 262:

  Which component functions as the Internal Certificate Authority for R77?

  A. Security Gateway
  B. Management Server
  C. Policy Server
  D. SmartLSM
  B. Management Server

• Question 263:

  Which of the following firewall modes DOES NOT allow for Identity Awareness to be deployed?

  A. Bridge
  B. Load Sharing
  C. High Availability
  D. Fail Open
  A. Bridge

• Question 264:

  What Identity Agent allows packet tagging and computer authentication?

  A. Endpoint Security Client
  B. Full Agent
  C. Light Agent
  D. System Agent
  B. Full Agent

• Question 265:

  John Adams is an HR partner in the ACME organization. ACME IT wants to limit access to HR servers to designated IP addresses to minimize malware infection and unauthorized access risks. Thus, gateway policy permits access only from

  Join's desktop which is assigned an IP address 10.0.0.19 via DHCP.

  John received a laptop and wants to access the HR Web Server from anywhere in the organization. The IT department gave the laptop a static IP address, but the limits him to operating it only from his desk. The current Rule Base contains a

  rule that lets John Adams access the HR Web Server from his laptop. He wants to move around the organization and continue to have access to the HR Web Server.

  To make this scenario work, the IT administrator:

  1) Enables Identity Awareness on a gateway, selects AD Query as one of the Identity Sources.

  2) Adds an access role object to the Firewall Rule Base that lets John Adams PC access the HR Web Server from any machine and from any location.

  John plugged in his laptop to the network on a different network segment and he is not able to connect. How does he solve this problem?

  A. John should install the identity Awareness Agent
  B. The firewall admin should install the Security Policy
  C. John should lock and unlock the computer
  D. Investigate this as a network connectivity issue
  C. John should lock and unlock the computer

• Question 266:

  According to Check Point Best Practice, when adding a non-managed Check Point Gateway to a Check Point security solution what object SHOULD be added? A(n):

  A. Gateway
  B. Interoperable Device
  C. Externally managed gateway
  D. Network Node
  C. Externally managed gateway

• Question 267:

  Which of the following methods can be used to update the trusted log server regarding the policy and configuration changes performed on the Security Management Server?

  A. Save Policy
  B. Install Database
  C. Save session
  D. Install Policy
  D. Install Policy

• Question 268:

  View the rule below. What does the pen-symbol in the left column mean?

  

  A. Those rules have been published in the current session.
  B. Rules have been edited by the logged in administrator, but the policy has not been published yet.
  C. Another user has currently locked the rules for editing.
  D. The configuration lock is present. Click the pen symbol in order to gain the lock.
  B. Rules have been edited by the logged in administrator, but the policy has not been published yet.

• Question 269:

  Which of the following is NOT a back up method?

  A. Save backup
  B. System backup
  C. snapshot
  D. Migrate
  A. Save backup

• Question 270:

  Examine the sample Rule Base.

  

  What will be the result of a verification of the policy from SmartConsole?

  A. No errors or Warnings
  B. Verification Error. Empty Source-List in Rule 5 (Mail Inbound)
  C. Verification Error. Rule 4 (Web Inbound) hides Rule 6 (Webmaster access)
  D. Verification Error. Rule 7 (Clean-Up Rule) hides Implicit Clean-up Rule
  C. Verification Error. Rule 4 (Web Inbound) hides Rule 6 (Webmaster access)