CheckPoint 156-215.80 Online Practice Questions and Exam Preparation

CheckPoint 156-215.80 Online Questions & Answers

• Question 371:

  Examine the following Rule Base.

  

  What can we infer about the recent changes made to the Rule Base?

  A. Rule 7 was created by the 'admin' administrator in the current session
  B. 8 changes have been made by administrators since the last policy installation
  C. Te rules 1, 5 and 6 cannot be edited by the 'admin' administrator
  D. Rule 1 and object webserver are locked by another administrator
  D. Rule 1 and object webserver are locked by another administrator

• Question 372:

  When configuring Anti-Spoofing, which tracking options can an Administrator select?

  A. Log, Send SNMP Trap, Email
  B. Drop Packet, Alert, None
  C. Log, Alert, None
  D. Log, Allow Packets, Email
  C. Log, Alert, None

• Question 373:

  Fill in the blank: ________information is included in the "Full Log" tracking option, but is not included in the "Log" tracking option?

  A. file attributes
  B. application
  C. destination port
  D. data type
  D. data type

• Question 374:

  Where do you verify that UserDirectory is enabled?

  A. Verify that Security Gateway > General Properties > Authentication > Use UserDirectory (LDAP) for Security Gateways is checked
  B. Verify that Global Properties > Authentication > Use UserDirectory (LDAP) for Security Gateways is checked.
  C. Verify that Security Gateway > General Properties > UserDirectory (LDAP) > Use UserDirectory (LDAP) for Security Gateways is checked.
  D. Verify that Global Properties > UserDirectory (LDAP) > Use UserDirectory (LDAP) for Security Gateways is checked.
  D. Verify that Global Properties > UserDirectory (LDAP) > Use UserDirectory (LDAP) for Security Gateways is checked.

• Question 375:

  Which of the following is NOT an identity source used for Identity Awareness?

  A. Remote Access
  B. UserCheck
  C. AD Query
  D. RADIUS
  B. UserCheck

• Question 376:

  Which of the following is NOT an integral part of VPN communication within a network?

  A. VPN key
  B. VPN community
  C. VPN trust entities
  D. VPN domain
  A. VPN key

• Question 377:

  Which is a suitable command to check whether Drop Templates are activated or not?

  A. fw ctl get int activate_drop_templates
  B. fwaccel stat
  C. fwaccel stats
  D. fw ctl templates
  B. fwaccel stat

• Question 378:

  Which of the following authentication methods can be configured in the Identity Awareness setup wizard?

  A. Check Point Password
  B. TACACS
  C. LDAP
  D. Windows password
  C. LDAP

• Question 379:

  Which feature in R77 permits blocking specific IP addresses for a specified time period?

  A. Suspicious Activity Monitoring
  B. HTTP Methods
  C. Local Interface Spoofing
  D. Block Port Overflow
  A. Suspicious Activity Monitoring

• Question 380:

  Which of the following are types of VPN communicates?

  A. Pentagon, star, and combination
  B. Star, octagon, and combination
  C. Combined and star
  D. Meshed, star, and combination
  D. Meshed, star, and combination