CheckPoint Checkpoint Certifications 156-215.80 Questions & Answers

• Question 401:

  Fill in the blanks: A ____ license requires an administrator to designate a gateway for attachment whereas

  a _____ license is automatically attached to a Security Gateway.

  A. Formal; corporate

  B. Local; formal

  C. Local; central

  D. Central; local

  Correct Answer: D

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Installation_and_Upgrade_GuidewebAdmin/13128.htm

• Question 402:

  What type of NAT is a one-to-one relationship where each host is translated to a unique address?

  A. Source

  B. Static

  C. Hide

  D. Destination

  Correct Answer: B

• Question 403:

  Which one of the following is a way that the objects can be manipulated using the new API integration in R80 Management?

  A. Microsoft Publisher

  B. JSON

  C. Microsoft Word

  D. RC4 Encryption

  Correct Answer: B

• Question 404:

  True or False: In a Distributed Environment, a Central License can be installed via CLI on a Security Gateway

  A. True, CLI is the prefer method for Licensing

  B. False, Central License are handled via Security Management Server

  C. False, Central License are installed via Gaia on Security Gateways

  D. True, Central License can be installed with CPLIC command on a Security Gateway

  Correct Answer: D

• Question 405:

  Which of the following is NOT an identity source used for Identity Awareness?

  A. Remote Access

  B. UserCheck

  C. AD Query

  D. RADIUS

  Correct Answer: B

  Reference: https://www.checkpoint.com/products/identity-awareness-software-blade/

• Question 406:

  Fill in the blanks: Default port numbers for an LDAP server is ______ for standard connections and _______ SSL connections.

  A. 675, 389

  B. 389, 636

  C. 636, 290

  D. 290, 675

  Correct Answer: B

  A client starts an LDAP session by connecting to an LDAP server, called a Directory System Agent (DSA), by default on TCP and UDP port 389, or on port 636 for LDAPS. Global Catalog is available by default on ports 3268, and 3269 for LDAPS.

• Question 407:

  How are the backups stored in Check Point appliances?

  A. Saved as*.tar under /var/log/CPbackup/backups

  B. Saved as*tgz under /var/CPbackup

  C. Saved as*tar under /var/CPbackup

  D. Saved as*tgz under /var/log/CPbackup/backups

  Correct Answer: B

  Backup configurations are stored in: /var/CPbackup/backups/

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_Gaia_Installation_and_Upgrade_Guide/ html_frameset.htm?topic=documents/R77/CP_R77_Gaia_Installation_and_Upgrade_Guide/107104

• Question 408:

  You are going to perform a major upgrade. Which back up solution should you use to ensure your database can be restored on that device?

  A. backup

  B. logswitch

  C. Database Revision

  D. snapshot

  Correct Answer: D

  The snapshot creates a binary image of the entire root (lv_current) disk partition. This includes Check

  Point products, configuration, and operating system. Starting in R77.10, exporting an image from one

  machine and importing that image on another machine of the same type is supported.

  The log partition is not included in the snapshot. Therefore, any locally stored FireWall logs will not be

  saved.

  Reference:

  https://supportcenter.checkpoint.com/supportcenter/portal?

  eventSubmit_doGoviewsolutiondetails=andsolutionid=sk108902

• Question 409:

  Which tool is used to enable ClusterXL?

  A. SmartUpdate

  B. cpconfig

  C. SmartConsole D. sysconfig

  Correct Answer: B

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_ClusterXL_WebAdminGuide/ html_frameset.htm?topic=documents/R77/CP_R77_ClusterXL_WebAdminGuide/161105

• Question 410:

  Which of the following is NOT a method used by Identity Awareness for acquiring identity?

  A. RADIUS

  B. Active Directory Query

  C. Remote Access

  D. Certificates

  Correct Answer: D

  Reference: https://www.checkpoint.com/products/identity-awareness-software-blade/