CheckPoint 156-215.80 Online Practice Questions and Exam Preparation

CheckPoint 156-215.80 Online Questions & Answers

• Question 481:

  Fill in the blanks: VPN gateways authenticate using ___________ and ___________ .

  A. Passwords; tokens
  B. Certificates; pre-shared secrets
  C. Certificates; passwords
  D. Tokens; pre-shared secrets
  B. Certificates; pre-shared secrets

• Question 482:

  Your boss wants you to closely monitor an employee suspected of transferring company secrets to the competition. The IT department discovered the suspect installed a WinSCP client in order to use encrypted communication. Which of the following methods is BEST to accomplish this task?

  A. Use SmartView Tracker to follow his actions by filtering log entries that feature the WinSCP destination port. Then, export the corresponding entries to a separate log file for documentation.
  B. Use SmartDashboard to add a rule in the firewall Rule Base that matches his IP address, and those of potential targets and suspicious protocols. Apply the alert action or customized messaging.
  C. Watch his IP in SmartView Monitor by setting an alert action to any packet that matches your Rule Base and his IP address for inbound and outbound traffic.
  D. Send the suspect an email with a keylogging Trojan attached, to get direct information about his wrongdoings.
  A. Use SmartView Tracker to follow his actions by filtering log entries that feature the WinSCP destination port. Then, export the corresponding entries to a separate log file for documentation.

• Question 483:

  What type of NAT is a one-to-one relationship where each host is translated to a unique address?

  A. Source
  B. Static
  C. Hide
  D. Destination
  B. Static

• Question 484:

  Which tool is used to enable cluster membership on a Gateway?

  A. SmartUpdate
  B. cpconfig
  C. SmartConsole
  D. sysconfig
  B. cpconfig

• Question 485:

  You have discovered suspicious activity in your network. What is the BEST immediate action to take?

  A. Create a policy rule to block the traffic.
  B. Create a suspicious action rule to block that traffic.
  C. Wait until traffic has been identified before making any changes.
  D. Contact ISP to block the traffic.
  B. Create a suspicious action rule to block that traffic.

• Question 486:

  The Gaia operating system supports which routing protocols?

  A. BGP, OSPF, RIP
  B. BGP, OSPF, EIGRP, PIM, IGMP
  C. BGP, OSPF, RIP, PIM, IGMP
  D. BGP, OSPF, RIP, EIGRP
  A. BGP, OSPF, RIP

• Question 487:

  Sally has a Hot Fix Accumulator (HFA) she wants to install on her Security Gateway which operates with GAiA, but she cannot SCP the HFA to the system. She can SSH into the Security Gateway, but she has never been able to SCP files to it. What would be the most likely reason she cannot do so?

  A. She needs to edit /etc/SSHd/SSHd_config and add the Standard Mode account.
  B. She needs to run sysconfig and restart the SSH process.
  C. She needs to edit /etc/scpusers and add the Standard Mode account.
  D. She needs to run cpconfig to enable the ability to SCP files.
  C. She needs to edit /etc/scpusers and add the Standard Mode account.

• Question 488:

  Choose what BEST describes the Policy Layer Traffic Inspection.

  A. If a packet does not match any of the inline layers, the matching continues to the next Layer.
  B. If a packet matches an inline layer, it will continue matching the next layer.
  C. If a packet does not match any of the inline layers, the packet will be matched against the Implicit Clean-up Rule.
  D. If a packet does not match a Network Policy Layer, the matching continues to its inline layer.
  B. If a packet matches an inline layer, it will continue matching the next layer.

• Question 489:

  The ______ software blade package uses CPU-level and OS-level sandboxing in order to detect and block malware.

  A. Next Generation Threat Prevention
  B. Next Generation Threat Emulation
  C. Next Generation Threat Extraction
  D. Next Generation Firewall
  B. Next Generation Threat Emulation

• Question 490:

  Fill in the blank: RADIUS Accounting gets ______ data from requests generated by the accounting client

  A. Destination
  B. Identity
  C. Payload
  D. Location
  B. Identity