CheckPoint 156-215.81.20 Online Practice Questions and Exam Preparation

CheckPoint 156-215.81.20 Online Questions & Answers

• Question 1:

  Fill in the blank: To create policy for traffic to or from a particular location, use the _____________.

  A. DLP shared policy
  B. Geo policy shared policy
  C. Mobile Access software blade
  D. HTTPS inspection
  B. Geo policy shared policy

  ---

  Explanation/Reference:

  Shared Policies The Shared Policies section in the Security Policies shows the policies that are not in a Policy package. They are shared between all Policy packages. Shared policies are installed with the Access Control Policy. Software Blade Description Mobile Access Launch Mobile Access policy in a SmartConsole. Configure how your remote users access internal resources, such as their email accounts, when they are mobile. Launch Data Loss Prevention policy in a SmartConsole. Configure DLP advanced tools to automatically identify data that must not go outside the network, to block the leak, and to educate users. Geo Policy Create a policy for traffic to or from specific geographical or political locations.

  Reference: https://sc1.checkpoint.com/documents/R80.10/WebAdminGuides/EN/CP_R80.10_NexGenSecurityGateway_Guide/html_frameset.htm?topic=documents/R80.10/WebAdminGuides/EN/ CP_R80.10_NexGenSecurityGateway_Guide/137006

• Question 2:

  Of all the Check Point components in your network, which one changes most often and should be backed up most frequently?

  A. Security Management Server
  B. Security Gateway
  C. SmartConsole
  D. SmartManager
  A. Security Management Server

• Question 3:

  Which of the following are types of VPN communities?

  A. Pentagon, star, and combination
  B. Star, octagon, and combination
  C. Combined and star
  D. Meshed, star, and combination
  D. Meshed, star, and combination

  ---

  Explanation/Reference:

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_VPN_AdminGuide/html_frameset.htm?topic=documents/R77/CP_R77_VPN_AdminGuide/13894

• Question 4:

  Which of the following ClusterXL modes uses a non-unicast MAC address for the cluster IP address.

  A. High Availability
  B. Load Sharing Multicast
  C. Load Sharing Pivot
  D. Master/Backup
  B. Load Sharing Multicast

  ---

  Explanation/Reference:

  :

  ClusterXL uses the Multicast mechanism to associate the virtual cluster IP addresses with all cluster members. By binding these IP addresses to a Multicast MAC address, it ensures that all packets sent to the cluster, acting as a gateway, will

  reach all members in the cluster.

  Reference:

  https://sc1.checkpoint.com/documents/R76/CP_R76_ClusterXL_AdminGuide/7292.htm

• Question 5:

  Check Point ClusterXL Active/Active deployment is used when:

  A. Only when there is Multicast solution set up
  B. There is Load Sharing solution set up
  C. Only when there is Unicast solution set up
  D. There is High Availability solution set up
  D. There is High Availability solution set up

• Question 6:

  All R77 Security Servers can perform authentication with the exception of one. Which of the Security Servers can NOT perform authentication?

  A. FTP
  B. SMTP
  C. HTTP
  D. RLOGIN
  B. SMTP

• Question 7:

  Message digests use which of the following?

  A. DES and RC4
  B. IDEA and RC4
  C. SSL and MD4
  D. SHA-1 and MD5
  D. SHA-1 and MD5

• Question 8:

  What command would show the API server status?

  A. cpm status
  B. api restart
  C. api status
  D. show api status
  C. api status

• Question 9:

  Fill in the blanks: The Application Layer Firewalls inspect traffic through the _____ layer(s) of the TCP/IP model and up to and including the _____ layer.

  A. Upper; Application
  B. Lower; Application
  C. First two; Internet
  D. First two; Transport
  B. Lower; Application

• Question 10:

  The Network Operations Center administrator needs access to Check Point Security devices mostly for troubleshooting purposes. You do not want to give her access to the expert mode, but she still should be able to run tcpdump. How can you achieve this requirement?

  A. Add tcpdump to CLISH using add command. Create a new access role. Add tcpdump to the role. Create new user with any UID and assign role to the user.
  B. Add tcpdump to CLISH using add command. Create a new access role. Add tcpdump to the role. Create new user with UID 0 and assign role to the user.
  C. Create a new access role. Add expert-mode access to the role. Create new user with UID 0 and assign role to the user.
  D. Create a new access role. Add expert-mode access to the role. Create new user with any UID and assign role to the user.
  A. Add tcpdump to CLISH using add command. Create a new access role. Add tcpdump to the role. Create new user with any UID and assign role to the user.