CheckPoint 156-215.80 Online Practice Questions and Exam Preparation

CheckPoint 156-215.80 Online Questions & Answers

• Question 521:

  Vanessa is expecting a very important Security Report. The Document should be sent as an attachment via e-mail. An e-mail with Security_report.pdf file was delivered to her e-mail inbox. When she opened the PDF file, she noticed that the file is basically empty and only few lines of text are in it. The report is missing some graphs, tables and links. Which component of SandBlast protection is her company using on a Gateway?

  A. SandBlast Threat Emulation
  B. SandBlast Agent
  C. Check Point Protect
  D. SandBlast Threat Extraction
  D. SandBlast Threat Extraction

• Question 522:

  What is the main difference between Threat Extraction and Threat Emulation?

  A. Threat Emulation never delivers a file and takes more than 3 minutes to complete
  B. Threat Extraction always delivers a file and takes less than a second to complete
  C. Threat Emulation never delivers a file that takes less than a second to complete
  D. Threat Extraction never delivers a file and takes more than 3 minutes to complete
  B. Threat Extraction always delivers a file and takes less than a second to complete

• Question 523:

  What is the mechanism behind Threat Extraction?

  A. This is a new mechanism which extracts malicious files from a document to use it as a counter-attack against its sender
  B. This is a new mechanism which is able to collect malicious files out of any kind of file types to destroy it prior to sending it to the intended recipient
  C. This is a new mechanism to identify the IP address of the sender of malicious codes and to put it into the SAM database (Suspicious Activity Monitoring).
  D. Any active contents of a document, such as JavaScripts, macros and links will be removed from the document and forwarded to the intended recipient, which makes this solution very fast
  D. Any active contents of a document, such as JavaScripts, macros and links will be removed from the document and forwarded to the intended recipient, which makes this solution very fast

• Question 524:

  Choose the SmartLog property that is TRUE.

  A. SmartLog has been an option since release R71.10.
  B. SmartLog is not a Check Point product.
  C. SmartLog and SmartView Tracker are mutually exclusive.
  D. SmartLog is a client of SmartConsole that enables enterprises to centrally track log records and security activity with Google-like search.
  D. SmartLog is a client of SmartConsole that enables enterprises to centrally track log records and security activity with Google-like search.

• Question 525:

  What will be the effect of running the following command on the Security Management Server?

  

  A. Remove the installed Security Policy.
  B. Remove the local ACL lists.
  C. No effect.
  D. Reset SIC on all gateways.
  A. Remove the installed Security Policy.

• Question 526:

  Which type of Endpoint Identity Agent includes packet tagging and computer authentication?

  A. Full
  B. Light
  C. Custom
  D. Complete
  A. Full

• Question 527:

  The technical-support department has a requirement to access an intranet server. When configuring a User Authentication rule to achieve this, which of the following should you remember?

  A. You can only use the rule for Telnet, FTP, SMPT, and rlogin services.
  B. The Security Gateway first checks if there is any rule that does not require authentication for this type of connection before invoking the Authentication Security Server.
  C. Once a user is first authenticated, the user will not be prompted for authentication again until logging out.
  D. You can limit the authentication attempts in the User Properties' Authentication tab.
  B. The Security Gateway first checks if there is any rule that does not require authentication for this type of connection before invoking the Authentication Security Server.

• Question 528:

  The CDT utility supports which of the following?

  A. Major version upgrades to R77.30
  B. Only Jumbo HFA's and hotfixes
  C. Only major version upgrades to R80.10
  D. All upgrades
  D. All upgrades

• Question 529:

  Vanessa is firewall administrator in her company; her company is using Check Point firewalls on central and remote locations, which are managed centrally by R80 Security Management Server. One central location has an installed R77.30 Gateway on Open server. Remote location is using Check Point UTM-1 570 series appliance with R71. Which encryption is used in Secure Internal Communication (SIC) between central management and firewall on each location?

  A. On central firewall AES128 encryption is used for SIC, on Remote firewall 3DES encryption is used for SIC.
  B. On both firewalls, the same encryption is used for SIC. This is AES-GCM-256.
  C. The Firewall Administrator can choose which encryption suite will be used by SIC.
  D. On central firewall AES256 encryption is used for SIC, on Remote firewall AES128 encryption is used for SIC.
  A. On central firewall AES128 encryption is used for SIC, on Remote firewall 3DES encryption is used for SIC.

• Question 530:

  Which of the following is NOT a component of Check Point Capsule?

  A. Capsule Docs
  B. Capsule Cloud
  C. Capsule Enterprise
  D. Capsule Workspace
  C. Capsule Enterprise