CheckPoint 156-215.80 Online Practice Questions and Exam Preparation

CheckPoint 156-215.80 Online Questions & Answers

• Question 51:

  Harriet wants to protect sensitive information from intentional loss when users browse to a specific URL: https://personal.mymail.com, which blade will she enable to achieve her goal?

  A. DLP
  B. SSL Inspection
  C. Application Control
  D. URL Filtering
  A. DLP

• Question 52:

  Review the following screenshot and select the BEST answer.

  

  A. Data Center Layer is an inline layer in the Access Control Policy.
  B. By default all layers are shared with all policies.
  C. If a connection is dropped in Network Layer, it will not be matched against the rules in Data Center Layer.
  D. If a connection is accepted in Network-layer, it will not be matched against the rules in Data Center Layer.
  C. If a connection is dropped in Network Layer, it will not be matched against the rules in Data Center Layer.

• Question 53:

  One of major features in R80.x SmartConsole is concurrent administration. Which of the following is NOT possible considering that AdminA, AdminB, and AdminC are editing the same Security Policy?

  A. AdminC sees a lock icon which indicates that the rule is locked for editing by another administrator.
  B. AdminA and AdminB are editing the same rule at the same time.
  C. AdminB sees a pencil icon next the rule that AdminB is currently editing.
  D. AdminA, AdminB and AdminC are editing three different rules at the same time.
  A. AdminC sees a lock icon which indicates that the rule is locked for editing by another administrator.

• Question 54:

  Which pre-defined Permission Profile should be assigned to an administrator that requires full access to audit all configurations without modifying them?

  A. Auditor
  B. Read Only All
  C. Super User
  D. Full Access
  B. Read Only All

• Question 55:

  On the following graphic, you will find layers of policies.

  

  What is a precedence of traffic inspection for the defined polices?

  A. A packet arrives at the gateway, it is checked against the rules in the networks policy layer and then if implicit Drop Rule drops the packet, it comes next to IPS layer and then after accepting the packet it passes to Threat Prevention layer.
  B. A packet arrives at the gateway, it is checked against the rules in the networks policy layer and then if there is any rule which accepts the packet, it comes next to IPS layer and then after accepting the packet it passes to Threat Prevention layer
  C. A packet arrives at the gateway, it is checked against the rules in the networks policy layer and then if there is any rule which accepts the packet, it comes next to Threat Prevention layer and then after accepting the packet it passes to IPS layer.
  D. A packet arrives at the gateway, it is checked against the rules in IPS policy layer and then it comes next to the Network policy layer and then after accepting the packet it passes to Threat Prevention layer.
  B. A packet arrives at the gateway, it is checked against the rules in the networks policy layer and then if there is any rule which accepts the packet, it comes next to IPS layer and then after accepting the packet it passes to Threat Prevention layer

• Question 56:

  When defining group-based access in an LDAP environment with Identity Awareness, what is the BEST object type to represent an LDAP group in a Security Policy?

  A. Access Role
  B. User Group
  C. SmartDirectory Group
  D. Group Template
  A. Access Role

• Question 57:

  Which Check Point software blade monitors Check Point devices and provides a picture of network and security performance?

  A. Application Control
  B. Threat Emulation
  C. Logging and Status
  D. Monitoring
  D. Monitoring

• Question 58:

  Your users are defined in a Windows 2008 R2 Active Directory server. You must add LDAP users to a Client Authentication rule. Which kind of user group do you need in the Client Authentication rule in R77?

  A. External-user group
  B. LDAP group
  C. A group with a genetic user
  D. All Users
  B. LDAP group

• Question 59:

  Which Threat Prevention Profile is not included by default in R80 Management?

  A. Basic ?Provides reliable protection on a range of non-HTTP protocols for servers, with minimal impact on network performance
  B. Optimized ?Provides excellent protection for common network products and protocols against recent or popular attacks
  C. Strict ?Provides a wide coverage for all products and protocols, with impact on network performance
  D. Recommended ?Provides all protection for all common network products and servers, with impact on network performance
  D. Recommended ?Provides all protection for all common network products and servers, with impact on network performance

• Question 60:

  To view statistics on detected threats, which Threat Tool would an administrator use?

  A. Protections
  B. IPS Protections
  C. Profiles
  D. ThreatWiki
  D. ThreatWiki