CheckPoint 156-215.80 Online Practice Questions and Exam Preparation

CheckPoint 156-215.80 Online Questions & Answers

• Question 61:

  Fill in the blank: An identity server uses a ___________ for user authentication.

  A. Shared secret
  B. Certificate
  C. One-time password
  D. Token
  A. Shared secret

• Question 62:

  Which of the following is NOT a valid option when configuring access for Captive Portal?

  A. From the Internet
  B. Through internal interfaces
  C. Through all interfaces
  D. According to the Firewall Policy
  A. From the Internet

• Question 63:

  Under which file is the proxy arp configuration stored?

  A. $FWDIR/state/proxy_arp.conf on the management server
  B. $FWDIR/conf/local.arp on the management server
  C. $FWDIR/state/_tmp/proxy.arp on the security gateway
  D. $FWDIR/conf/local.arp on the gateway
  D. $FWDIR/conf/local.arp on the gateway

• Question 64:

  Fill in the blank: RADIUS protocol uses ______ to communicate with the gateway.

  A. UDP
  B. TDP
  C. CCP
  D. HTTP
  A. UDP

• Question 65:

  In which deployment is the security management server and Security Gateway installed on the same appliance?

  A. Bridge Mode
  B. Remote
  C. Standalone
  D. Distributed
  C. Standalone

• Question 66:

  Review the rules. Assume domain UDP is enabled in the implied rules.

  

  What happens when a user from the internal network tries to browse to the internet using HTTP? The user:

  A. can connect to the Internet successfully after being authenticated.
  B. is prompted three times before connecting to the Internet successfully.
  C. can go to the Internet after Telnetting to the client authentication daemon port 259.
  D. can go to the Internet, without being prompted for authentication.
  D. can go to the Internet, without being prompted for authentication.

• Question 67:

  MegaCorp's security infrastructure separates Security Gateways geographically. You must request a central license for one remote Security Gateway. How do you apply the license?

  A. Using the remote Gateway's IP address, and attaching the license to the remote Gateway via SmartUpdate.
  B. Using your Security Management Server's IP address, and attaching the license to the remote Gateway via SmartUpdate.
  C. Using the remote Gateway's IP address, and applying the license locally with command cplic put.
  D. Using each of the Gateway's IP addresses, and applying the licenses on the Security Management Server with the command cprlic put.
  B. Using your Security Management Server's IP address, and attaching the license to the remote Gateway via SmartUpdate.

• Question 68:

  The Network Operations Center administrator needs access to Check Point Security devices mostly for troubleshooting purposes. You do not want to give her access to the expert mode, but she still should be able to run tcpdump. How can you achieve this requirement?

  A. Add tcpdump to CLISH using add command. Create a new access role. Add tcpdump to the role. Create new user with any UID and assign role to the user.
  B. Add tcpdump to CLISH using add command. Create a new access role. Add tcpdump to the role. Create new user with UID 0 and assign role to the user.
  C. Create a new access role. Add expert-mode access to the role. Create new user with UID 0 and assign role to the user.
  D. Create a new access role. Add expert-mode access to the role. Create new user with any UID and assign role to the user.
  A. Add tcpdump to CLISH using add command. Create a new access role. Add tcpdump to the role. Create new user with any UID and assign role to the user.

• Question 69:

  When attempting to start a VPN tunnel, in the logs the error 'no proposal chosen' is seen numerous times. No other VPN-related log entries are present. Which phase of the VPN negotiations has failed?

  A. IKE Phase 1
  B. IPSEC Phase 2
  C. IPSEC Phase 1
  D. IKE Phase 2
  A. IKE Phase 1

• Question 70:

  What are the two high availability modes?

  A. Load Sharing and Legacy
  B. Traditional and New
  C. Active and Standby
  D. New and Legacy
  D. New and Legacy