CheckPoint 156-215.81.20 Online Practice Questions and Exam Preparation

CheckPoint 156-215.81.20 Online Questions & Answers

• Question 1:

  Which of the following is NOT a type of Endpoint Identity Agent?

  A. Terminal
  B. Light
  C. Full
  D. Custom
  A. Terminal

  ---

  explanation:

  Explanation/Reference:

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk107415

• Question 2:

  The default method for destination NAT is _____________, where NAT occurs on the inbound interface closest to the client.

  A. Destination side
  B. Source side
  C. Server side
  D. Client side
  D. Client side

  ---

  explanation:

  Explanation/Reference:

  As of VPN-1 NGX, the default method for Destination NAT is "client side", where NAT occurs on the inbound interface closest to the client.

• Question 3:

  One of major features in R80.x SmartConsole is concurrent administration. Which of the following is NOT possible considering that AdminA, AdminB, and AdminC are editing the same Security Policy?

  A. AdminC sees a lock icon which indicates that the rule is locked for editing by another administrator.
  B. AdminA and AdminB are editing the same rule at the same time.
  C. AdminB sees a pencil icon next the rule that AdminB is currently editing.
  D. AdminA, AdminB and AdminC are editing three different rules at the same time.
  A. AdminC sees a lock icon which indicates that the rule is locked for editing by another administrator.

  ---

  explanation:

  Explanation/Reference:

  In SmartConsole, administrators work with sessions. A session is created each time an administrator logs into SmartConsole. Changes made in the session are saved automatically. These changes are private and available only to the administrator. To avoid configuration conflicts, other administrators see a lock icon on objects and rules that are being edited in other sessions.

  Reference: http://downloads.checkpoint.com/dc/download.htm?ID=65846

• Question 4:

  A Check Point Software license consists of two components, the Software Blade and the Software Container. There are ______________ types of Software Containers: ______________.

  A. Three; Security Management, Security Gateway, and Endpoint Security
  B. Three; Security Gateway, Endpoint Security, and Gateway Management
  C. Two; Security Management and Endpoint Security
  D. Two; Endpoint Security and Security Gateway
  A. Three; Security Management, Security Gateway, and Endpoint Security

  ---

  explanation:

  Explanation/Reference:

  Reference: https://dl3.checkpoint.com/paid/a8/a81bd8771f3d7bf40a269f64f5b536e7/QuickLicenseGuide.pdf?HashKey=1591197932_63e138c47656005c0a28456090361659andxtn=.pdf page 11

• Question 5:

  Where can I find the file for a Gaia backup named backup_fw on a Check Point Appliance?

  A. /var/log/CPbackup/backups/backup_fw.tgz
  B. /var/CPbackup/backups/backup_fw.tgz
  C. /var/log/backups/backup_fw.tgz
  D. $CPDIR/backups/backup_fw.tgz
  A. /var/log/CPbackup/backups/backup_fw.tgz

  ---

  explanation:

  Explanation/Reference:

• Question 6:

  Which backup utility captures the most information and tends to create the largest archives?

  A. backup
  B. snapshot
  C. Database Revision
  D. migrate export
  B. snapshot

  ---

  explanation:

  Explanation/Reference:

  Reference: https://solvingcenter.wordpress.com/2016/07/07/checkpoint-backup-and-snapshot/

• Question 7:

  Which software blade does NOT accompany the Threat Prevention policy?

  A. Anti-virus
  B. IPS
  C. Threat Emulation
  D. Application Control and URL Filtering
  D. Application Control and URL Filtering

  ---

  explanation:

  Explanation/Reference:

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Firewall_WebAdmin/92707.htm

• Question 8:

  Which of the following cannot be configured in an Access Role Object?

  A. Users
  B. Networks
  C. Time
  D. Machines
  C. Time

  ---

  explanation:

  Explanation/Reference:

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Firewall_WebAdmin/92705.htm

• Question 9:

  When configuring Anti-Spoofing, which tracking options can an Administrator select?

  A. Log, Send SNMP Trap, Email
  B. Drop Packet, Alert, None
  C. Log, Alert, None
  D. Log, Allow Packets, Email
  C. Log, Alert, None

  ---

  explanation:

  Explanation/Reference:

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80BC_Firewall/html_frameset.htm?topic=documents/R80/CP_R80BC_Firewall/136417

• Question 10:

  Which of the following is NOT a valid backup command for a Security Management Server?

  A. save backup
  B. add backup
  C. add snapshot
  D. migrate export
  A. save backup

  ---

  explanation:

  Explanation/Reference:

  Reference: https://www.networksecurityplus.net/2015/02/check-point-backup-and-restore-command-reference.html