Skip to main content

156-215.81.20 Real Exam Questions

Check Point Certified Security Administrator - R81.20 (CCSA)

677 questions available · Page 1 of 68

Updated Exam DumpsVerified AnswersPass Guarantee

Get Complete Exam Dumps
Question 1 Single choice

What is the main objective when using Application Control?

  1. A

    To see what users are doing.

  2. B

    Ensure security and privacy of information.

  3. C

    To filter out specific content.

  4. D

    To assist the firewall blade with handling traffic.

Show answer and explanation

Correct answer: B

Question 2 Single choice

Which Threat Prevention Software Blade provides protection from malicious software that can infect your network computers?

  1. A

    Anti-Malware

  2. B

    IPS

  3. C

    Anti-bot

  4. D

    Anti-Spam

Show answer and explanation

Correct answer: C

Explanation

Anti-Bot
The Need for Anti-Bot There are two emerging trends in today's threat landscape:
1. A profit-driven cybercrime industry that uses different tools to meet its goals. This industry includes cyber-criminals, malware operators, tool providers, coders, and affiliate programs. Their "products" can be easily ordered online from numerous sites (for example, do-it-yourself malware kits, spam sending, data theft, and denial of service attacks) and organizations are finding it difficult to fight off these attacks.
2. Ideological and state driven attacks that target people or organizations to promote a political cause or carry out a cyber-warfare campaign.
Both of these trends are driven by bot attacks.
A bot is malicious software that can invade your computer. There are many infection methods. These include opening attachments that exploit a vulnerability and accessing a web site that results in a malicious download.

References:
https://sc1.checkpoint.com/documents/R77/CP_R77_ThreatPrevention_WebAdmin/102176.htm

Question 3 Single choice

Which is a main component of the Check Point security management architecture?

  1. A

    Proxy Server

  2. B

    Endpoint VPN client

  3. C

    Identity Collector

  4. D

    SmartConsole

Show answer and explanation

Correct answer: D

Question 4 Single choice

Which of the following is an authentication method used for Identity Awareness?

  1. A

    SSL

  2. B

    Captive Portal

  3. C

    PKI

  4. D

    RSA

Show answer and explanation

Correct answer: B

Question 5 Single choice

Fill in the blank: The _________ software blade enables Application Security policies to allow, block, or limit website access based on user, group, and machine identities.

  1. A

    Application Control

  2. B

    Data Awareness

  3. C

    URL Filtering

  4. D

    Threat Emulation

Show answer and explanation

Correct answer: A

Question 6 Single choice

You are conducting a security audit. While reviewing configuration files and logs, you notice logs accepting POP3 traffic, but you do not see a rule allowing POP3 traffic in the Rule Base.

Which of the following is the most likely cause?

  1. A

    The POP3 rule is disabled.

  2. B

    POP3 is accepted in Global Properties.

  3. C

    The POP3 rule is hidden.

  4. D

    POP3 is one of 3 services (POP3, IMAP, and SMTP) accepted by the default mail object in R77.

Show answer and explanation

Correct answer: C

Question 7 Single choice

Which of the following technologies extracts detailed information from packets and stores that information in state tables?

  1. A

    INSPECT Engine

  2. B

    Next-Generation Firewall

  3. C

    Packet Filtering

  4. D

    Application Layer Firewall

Show answer and explanation

Correct answer: B

Question 8 Single choice

Which of the following is NOT a valid application navigation tab in SmartConsole?

  1. A

    WEBUI & COMMAND LINE

  2. B

    SECURITY POLICIES

  3. C

    GATEWAYS & SERVERS

  4. D

    LOGS & MONITOR

Show answer and explanation

Correct answer: A

Question 9 Single choice

When using GAiA, it might be necessary to temporarily change the MAC address of the interface eth 0 to 00:0C:29:12:34:56. After restarting the network the old MAC address should be active.

How do you configure this change?

  1. A

    As expert user, issue these commands:
    # IP link set eth0 down
    # IP link set eth0 addr 00:0C:29:12:34:56
    # IP link set eth0 up

  2. B

    Edit the file /etc/sysconfig/netconf.C and put the new MAC address in the field (conf
    :(conns
    :(conn
    :hwaddr ("00:0C:29:12:34:56")

  3. C

    As expert user, issue the command:
    # IP link set eth0 addr 00:0C:29:12:34:56

  4. D

    Open the WebUI, select Network > Connections > eth0. Place the new MAC address in the field
    Physical Address, and press Apply to save the settings.

Show answer and explanation

Correct answer: C

Question 10 Single choice

When a packet arrives at the gateway, the gateway checks it against the rules in the top Policy Layer, sequentially from top to bottom, and enforces the first rule that matches a packet.

Which of the following statements about the order of rule enforcement is true?

  1. A

    If the Action is Accept, the gateway allows the packet to pass through the gateway.

  2. B

    If the Action is Drop, the gateway continues to check rules in the next Policy Layer down.

  3. C

    If the Action is Accept, the gateway continues to check rules in the next Policy Layer down.

  4. D

    If the Action is Drop, the gateway applies the Implicit Clean-up Rule for that Policy Layer.

Show answer and explanation

Correct answer: C