CheckPoint 156-215.80 Online Practice Questions and Exam Preparation

CheckPoint 156-215.80 Online Questions & Answers

• Question 471:

  What is the purpose of the Stealth Rule?

  A. To prevent users from directly connecting to a Security Gateway.
  B. To reduce the number of rules in the database.
  C. To reduce the amount of logs for performance issues.
  D. To hide the gateway from the Internet.
  A. To prevent users from directly connecting to a Security Gateway.

• Question 472:

  When launching SmartDashboard, what information is required to log into R77?

  A. User Name, Management Server IP, certificate fingerprint file
  B. User Name, Password, Management Server IP
  C. Password, Management Server IP
  D. Password, Management Server IP, LDAP Server IP
  B. User Name, Password, Management Server IP

• Question 473:

  Consider the Global Properties following settings: The selected option "Accept Domain Name over UDP (Queries)" means:

  

  A. UDP Queries will be accepted by the traffic allowed only through interfaces with external anti-spoofing topology and this will be done before first explicit rule written by Administrator in a Security Policy.
  B. All UDP Queries will be accepted by the traffic allowed through all interfaces and this will be done before first explicit rule written by Administrator in a Security Policy.
  C. No UDP Queries will be accepted by the traffic allowed through all interfaces and this will be done before first explicit rule written by Administrator in a Security Policy.
  D. All UDP Queries will be accepted by the traffic allowed by first explicit rule written by Administrator in a Security Policy.
  A. UDP Queries will be accepted by the traffic allowed only through interfaces with external anti-spoofing topology and this will be done before first explicit rule written by Administrator in a Security Policy.

• Question 474:

  Fill in the blank: An Endpoint identity agent uses a ___________ for user authentication.

  A. Shared secret
  B. Token
  C. Username/password or Kerberos Ticket
  D. Certificate
  C. Username/password or Kerberos Ticket

• Question 475:

  What is the BEST method to deploy Identity Awareness for roaming users?

  A. Use Office Mode
  B. Use identity agents
  C. Share user identities between gateways
  D. Use captive portal
  B. Use identity agents

• Question 476:

  Which option, when applied to a rule, allows traffic to VPN gateways in specific VPN communities?

  A. All Connections (Clear or Encrypted)
  B. Accept all encrypted traffic
  C. Specific VPN Communities
  D. All Site-to-Site VPN Communities
  B. Accept all encrypted traffic

• Question 477:

  Using ClusterXL, what statement is true about the Sticky Decision Function?

  A. Can only be changed for Load Sharing implementations
  B. All connections are processed and synchronized by the pivot
  C. Is configured using cpconfig
  D. Is only relevant when using SecureXL
  A. Can only be changed for Load Sharing implementations

• Question 478:

  What are the steps to configure the HTTPS Inspection Policy?

  A. Go to ManageandSettings > Blades > HTTPS Inspection > Configure in SmartDashboard
  B. Go to Applicationandurl filtering blade > Advanced > Https Inspection > Policy
  C. Go to ManageandSettings > Blades > HTTPS Inspection > Policy
  D. Go to Applicationandurl filtering blade > Https Inspection > Policy
  C. Go to ManageandSettings > Blades > HTTPS Inspection > Policy

• Question 479:

  Which of the following is the most secure means of authentication?

  A. Password
  B. Certificate
  C. Token
  D. Pre-shared secret
  B. Certificate

• Question 480:

  True or False: In a Distributed Environment, a Central License can be installed via CLI on a Security Gateway

  A. True, CLI is the prefer method for Licensing
  B. False, Central License are handled via Security Management Server
  C. False, Central License are installed via Gaia on Security Gateways
  D. True, Central License can be installed with CPLIC command on a Security Gateway
  D. True, Central License can be installed with CPLIC command on a Security Gateway