CheckPoint 156-215.80 Online Practice Questions and Exam Preparation

CheckPoint 156-215.80 Online Questions & Answers

• Question 461:

  How would you deploy TE250X Check Point appliance just for email traffic and in-line mode without a Check Point Security Gateway?

  A. Install appliance TE250X on SpanPort on LAN switch in MTA mode
  B. Install appliance TE250X in standalone mode and setup MTA
  C. You can utilize only Check Point Cloud Services for this scenario
  D. It is not possible, always Check Point SGW is needed to forward emails to SandBlast appliance
  C. You can utilize only Check Point Cloud Services for this scenario

• Question 462:

  Look at the following screenshot and select the BEST answer.

  

  A. Clients external to the Security Gateway can download archive files from FTP_Ext server using FTP.
  B. Internal clients can upload and download any-files to FTP_Ext-server using FTP.
  C. Internal clients can upload and download archive-files to FTP_Ext server using FTP.
  D. Clients external to the Security Gateway can upload any files to the FTP_Ext-server using FTP.
  A. Clients external to the Security Gateway can download archive files from FTP_Ext server using FTP.

• Question 463:

  Fill in the blanks: The _________ collects logs and sends them to the _________ .

  A. Log server; security management server
  B. Log server; Security Gateway
  C. Security management server; Security Gateway
  D. Security Gateways; log server
  D. Security Gateways; log server

• Question 464:

  CPU-level of your Security gateway is peaking to 100% causing problems with traffic. You suspect that the problem might be the Threat Prevention settings. The following Threat Prevention Profile has been created.

  

  How could you tune the profile in order to lower the CPU load still maintaining security at good level? Select the BEST answer.

  A. Set High Confidence to Low and Low Confidence to Inactive.
  B. Set the Performance Impact to Medium or lower.
  C. The problem is not with the Threat Prevention Profile. Consider adding more memory to the appliance.
  D. Set the Performance Impact to Very Low Confidence to Prevent.
  B. Set the Performance Impact to Medium or lower.

• Question 465:

  Which of the following is NOT a component of a Distinguished Name?

  A. Organization Unit
  B. Country
  C. Common name
  D. User container
  D. User container

• Question 466:

  Fill in the blank: The R80 feature ________ permits blocking specific IP addresses for a specified time period.

  A. Block Port Overflow
  B. Local Interface Spoofing
  C. Suspicious Activity Monitoring
  D. Adaptive Threat Prevention
  C. Suspicious Activity Monitoring

• Question 467:

  Where does the security administrator activate Identity Awareness within SmartDashboard?

  A. Gateway Object > General Properties
  B. Security Management Server > Identity Awareness
  C. Policy > Global Properties > Identity Awareness
  D. LDAP Server Object > General Properties
  A. Gateway Object > General Properties

• Question 468:

  How many layers make up the TCP/IP model?

  A. 2
  B. 7
  C. 6
  D. 4
  D. 4

• Question 469:

  Which of the following technologies extracts detailed information from packets and stores that information in state tables?

  A. INSPECT Engine
  B. Next-Generation Firewall
  C. Packet Filtering
  D. Application Layer Firewall
  B. Next-Generation Firewall

• Question 470:

  Identify the API that is not supported by Check Point currently.

  A. R80 Management API
  B. Identity Awareness Web Services API
  C. Open REST API
  D. OPSEC SDK
  C. Open REST API