CheckPoint 156-215.80 Online Practice Questions and Exam Preparation

CheckPoint 156-215.80 Online Questions & Answers

• Question 271:

  What are the two types of NAT supported by the Security Gateway?

  A. Destination and Hide
  B. Hide and Static
  C. Static and Source
  D. Source and Destination
  B. Hide and Static

• Question 272:

  Which of the following is NOT an attribute of packer acceleration?

  A. Source address
  B. Protocol
  C. Destination port
  D. Application Awareness
  D. Application Awareness

• Question 273:

  Which Check Point software blade provides visibility of users, groups and machines while also providing access control through identity-based policies?

  A. Firewall
  B. Identity Awareness
  C. Application Control
  D. URL Filtering
  B. Identity Awareness

• Question 274:

  How can the changes made by an administrator before publishing the session be seen by a superuser administrator?

  A. By impersonating the administrator with the `Login as...' option
  B. They cannot be seen
  C. From the SmartView Tracker audit log
  D. From Manage and Settings > Sessions, right click on the session and click `View Changes...'
  C. From the SmartView Tracker audit log

• Question 275:

  Fill in the blank: Once a license is activated, a ________ should be installed.

  A. License Management file
  B. Security Gateway Contract file
  C. Service Contract file
  D. License Contract file
  C. Service Contract file

• Question 276:

  An administrator wishes to enable Identity Awareness on the Check Point firewalls. However they allow users to use company issued or personal laptops. Since the administrator cannot manage the personal laptops, which of the following methods would BEST suit this company?

  A. AD Query
  B. Browser-Based Authentication
  C. Identity Agents
  D. Terminal Servers Agent
  B. Browser-Based Authentication

• Question 277:

  When configuring Spoof Tracking, which tracking actions can an administrator select to be done when spoofed packets are detected?

  A. Log, send snmp trap, email
  B. Drop packet, alert, none
  C. Log, alert, none
  D. Log, allow packets, email
  C. Log, alert, none

• Question 278:

  As a Security Administrator, you must refresh the Client Authentication authorized time-out every time a new user connection is authorized. How do you do this? Enable the Refreshable Timeout setting:

  A. in the user object's Authentication screen.
  B. in the Gateway object's Authentication screen.
  C. in the Limit tab of the Client Authentication Action Properties screen.
  D. in the Global Properties Authentication screen.
  C. in the Limit tab of the Client Authentication Action Properties screen.

• Question 279:

  When should you generate new licenses?

  A. Before installing contract files.
  B. After an RMA procedure when the MAC address or serial number of the appliance changes.
  C. When the existing license expires, license is upgraded or the IP-address where the license is tied changes.
  D. Only when the license is upgraded.
  B. After an RMA procedure when the MAC address or serial number of the appliance changes.

• Question 280:

  Which tool is used to enable ClusterXL?

  A. SmartUpdate
  B. cpconfig
  C. SmartConsole
  D. sysconfig
  B. cpconfig