CheckPoint 156-215.80 Online Practice Questions and Exam Preparation

CheckPoint 156-215.80 Online Questions & Answers

• Question 351:

  From the Gaia web interface, which of the following operations CANNOT be performed on a Security Management Server?

  A. Verify a Security Policy
  B. Open a terminal shell
  C. Add a static route
  D. View Security Management GUI Clients
  B. Open a terminal shell

• Question 352:

  Fill in the blank: By default, the SIC certificates issued by R80 Management Server are based on the ____________ algorithm.

  A. SHA-256
  B. SHA-200
  C. MD5
  D. SHA-128
  A. SHA-256

• Question 353:

  Access roles allow the firewall administrator to configure network access according to:

  A. a combination of computer groups and network
  B. users and user groups
  C. all of above
  D. remote access clients
  C. all of above

• Question 354:

  Which utility shows the security gateway general system information statistics like operating system information and resource usage, and individual software blade statistics of VPN, Identity Awareness and DLP?

  A. cpconfig
  B. fw ctl pstat
  C. cpview
  D. fw ctl multik stat
  C. cpview

• Question 355:

  Which tool CANNOT be launched from SmartUpdate R77?

  A. IP Appliance Voyager
  B. snapshot
  C. GAiA WebUI
  D. cpinfo
  B. snapshot

• Question 356:

  Which software blade enables Access Control policies to accept, drop, or limit web site access based on user, group, and/or machine?

  A. Application Control
  B. Data Awareness
  C. Identity Awareness
  D. Threat Emulation
  A. Application Control

• Question 357:

  An internal router is sending UDP keep-alive packets that are being encapsulated with GRE and sent through your R77 Security Gateway to a partner site. A rule for GRE traffic is configured for ACCEPT/LOG. Although the keep-alive packets

  are being sent every minute, a search through the SmartView Tracker logs for GRE traffic only shows one entry for the whole day (early in the morning after a Policy install). Your partner site indicates they are successfully receiving the GRE

  encapsulated keep-alive packets on the 1-minute interval. If GRE encapsulation is turned off on the router, SmartView Tracker shows a log entry for the UDP keep-alive packet every minute.

  Which of the following is the BEST explanation for this behavior?

  A. The setting Log does not capture this level of detail for GRE. Set the rule tracking action to Audit since certain types of traffic can only be tracked this way.
  B. The log unification process is using a LUUID (Log Unification Unique Identification) that has become corrupt. Because it is encrypted, the R77 Security Gateway cannot distinguish between GRE sessions. This is a known issue with GRE. Use IPSEC instead of the non-standard GRE protocol for encapsulation.
  C. The Log Server log unification process unifies all log entries from the Security Gateway on a specific connection into only one log entry in the SmartView Tracker. GRE traffic has a 10 minute session timeout, thus each keep-alive packet is considered part of the original logged connection at the beginning of the day.
  D. The Log Server is failing to log GRE traffic properly because it is VPN traffic. Disable all VPN configuration to the partner site to enable proper logging.
  C. The Log Server log unification process unifies all log entries from the Security Gateway on a specific connection into only one log entry in the SmartView Tracker. GRE traffic has a 10 minute session timeout, thus each keep-alive packet is considered part of the original logged connection at the beginning of the day.

• Question 358:

  You are about to integrate RSA SecurID users into the Check Point infrastructure. What kind of users are to be defined via SmartDashboard?

  A. A group with generic user
  B. All users
  C. LDAP Account Unit Group
  D. Internal user Group
  A. A group with generic user

• Question 359:

  Packages and licenses are loaded from all of these sources EXCEPT

  A. Download Center Web site
  B. UserUpdate
  C. User Center
  D. Check Point DVD
  B. UserUpdate

• Question 360:

  How do you configure an alert in SmartView Monitor?

  A. An alert cannot be configured in SmartView Monitor.
  B. By choosing the Gateway, and Configure Thresholds.
  C. By right-clicking on the Gateway, and selecting Properties.
  D. By right-clicking on the Gateway, and selecting System Information.
  B. By choosing the Gateway, and Configure Thresholds.