CheckPoint 156-215.80 Online Practice Questions and Exam Preparation

CheckPoint 156-215.80 Online Questions & Answers

• Question 421:

  Where would an administrator enable Implied Rules logging?

  A. In Smart Log Rules View
  B. In SmartDashboard on each rule
  C. In Global Properties under Firewall
  D. In Global Properties under log and alert
  B. In SmartDashboard on each rule

• Question 422:

  True or False: The destination server for Security Gateway logs depends on a Security Management Server configuration.

  A. False, log servers are configured on the Log Server General Properties
  B. True, all Security Gateways will only forward logs with a SmartCenter Server configuration
  C. True, all Security Gateways forward logs automatically to the Security Management Server
  D. False, log servers are enabled on the Security Gateway General Properties
  B. True, all Security Gateways will only forward logs with a SmartCenter Server configuration

• Question 423:

  Which of the following is used to initially create trust between a Gateway and Security Management Server?

  A. Internal Certificate Authority
  B. Token
  C. One-time Password
  D. Certificate
  C. One-time Password

• Question 424:

  Ken wants to obtain a configuration lock from other administrator on R80 Security Management Server. He can do this via WebUI or a via CLI. Which command should be use in CLI? Choose the correct answer.

  A. remove database lock
  B. The database feature has one command lock database override.
  C. override database lock
  D. The database feature has two commands: lock database override and unlock database. Both will work.
  D. The database feature has two commands: lock database override and unlock database. Both will work.

• Question 425:

  Which Identity Source(s) should be selected in Identity Awareness for when there is a requirement for a higher level of security for sensitive servers?

  A. AD Query
  B. Terminal Servers Endpoint Identity Agent
  C. Endpoint Identity Agent and Browser-Based Authentication
  D. RADIUS and Account Logon
  C. Endpoint Identity Agent and Browser-Based Authentication

• Question 426:

  Fill in the blank: The position of an implied rule is manipulated in the __________________ window.

  A. NAT
  B. Firewall
  C. Global Properties
  D. Object Explorer
  C. Global Properties

• Question 427:

  John is the administrator of a R80 Security Management server managing r R77.30 Check Point Security Gateway. John is currently updating the network objects and amending the rules using SmartConsole. To make John's changes available to other administrators, and to save the database before installing a policy, what must John do?

  A. Logout of the session
  B. File > Save
  C. Install database
  D. Publish the session
  D. Publish the session

• Question 428:

  What are the three tabs available in SmartView Tracker?

  A. Network and Endpoint, Management, and Active
  B. Network, Endpoint, and Active
  C. Predefined, All Records, Custom Queries
  D. Endpoint, Active, and Custom Queries
  C. Predefined, All Records, Custom Queries

• Question 429:

  Which type of the Check Point license ties the package license to the IP address of the Security Management Server?

  A. Local
  B. Central
  C. Corporate
  D. Formal
  B. Central

• Question 430:

  How do you configure the Security Policy to provide uses access to the Captive Portal through an external (Internet) interface?

  A. Change the gateway settings to allow Captive Portal access via an external interface.
  B. No action is necessary. This access is available by default.
  C. Change the Identity Awareness settings under Global Properties to allow Captive Policy access on all interfaces.
  D. Change the Identity Awareness settings under Global Properties to allow Captive Policy access for an external interface.
  A. Change the gateway settings to allow Captive Portal access via an external interface.