CheckPoint 156-215.81.20 Online Practice Questions and Exam Preparation

CheckPoint 156-215.81.20 Online Questions & Answers

• Question 101:

  Which Check Point software blade prevents malicious files from entering a network using virus signatures and anomaly-based protections from ThreatCloud?

  A. Firewall
  B. Application Control
  C. Anti-spam and Email Security
  D. Antivirus
  D. Antivirus

  ---

  Explanation/Reference:

  The enhanced Check Point Antivirus Software Blade uses real-time virus signatures and anomaly-based protections from ThreatCloudTM, the first collaborative network to fight cybercrime, to detect and block malware at the gateway before

  users are affected.

  Reference: https://www.checkpoint.com/products/antivirus-software-blade/

• Question 102:

  Choose what BEST describes a Session.

  A. Starts when an Administrator publishes all the changes made on SmartConsole.
  B. Starts when an Administrator logs in to the Security Management Server through SmartConsole and ends when it is published.
  C. Sessions ends when policy is pushed to the Security Gateway.
  D. Sessions locks the policy package for editing.
  B. Starts when an Administrator logs in to the Security Management Server through SmartConsole and ends when it is published.

  ---

  Explanation/Reference:

  Administrator Collaboration More than one administrator can connect to the Security Management Server at the same time. Every administrator has their own username, and works in a session that is independent of the other administrators. When an administrator logs in to the Security Management Server through SmartConsole, a new editing session starts. The changes that the administrator makes during the session are only available to that administrator. Other administrators see a lock icon on object and rules that are being edited. To make changes available to all administrators, and to unlock the objects and rules that are being edited, the administrator must publish the session. Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/ html_frameset.htm?topic=documents/R80/CP_R80_SecMGMT/117948

• Question 103:

  You are the Check Point administrator for Alpha Corp with an R80 Check Point estate. You have received a call by one of the management users stating that they are unable to browse the Internet with their new tablet connected to the company Wireless. The Wireless system goes through the Check Point Gateway. How do you review the logs to see what the problem may be?

  A. Open SmartLog and connect remotely to the IP of the wireless controller
  B. Open SmartView Tracker and filter the logs for the IP address of the tablet
  C. Open SmartView Tracker and check all the IP logs for the tablet
  D. Open SmartLog and query for the IP address of the Manager's tablet
  B. Open SmartView Tracker and filter the logs for the IP address of the tablet

• Question 104:

  Tom has been tasked to install Check Point R80 in a distributed deployment. Before Tom installs the systems this way, how many machines will he need if he does NOT include a SmartConsole machine in his calculations?

  A. One machine, but it needs to be installed using SecurePlatform for compatibility purposes.
  B. One machine
  C. Two machines
  D. Three machines
  C. Two machines

  ---

  Explanation/Reference:

  One for Security Management Server and the other one for the Security Gateway.

• Question 105:

  What are the advantages of a “shared policy”?

  A. Allows the administrator to share a policy between all the users identified by the Security Gateway.
  B. Allows the administrator to share a policy between all the administrators managing the Security Management Server.
  C. Allows the administrator to share a policy so that it is available to use in another Policy Package.
  D. Allows the administrator to install a policy on one Security Gateway and it gets installed on another managed Security Gateway.
  C. Allows the administrator to share a policy so that it is available to use in another Policy Package.

• Question 106:

  Which Identity Source(s) should be selected in Identity Awareness for when there is a requirement for a higher level of security for sensitive servers?

  A. AD Query
  B. Terminal Servers Endpoint Identity Agent
  C. Endpoint Identity Agent and Browser-Based Authentication
  D. RADIUS and Account Logon
  C. Endpoint Identity Agent and Browser-Based Authentication

  ---

  Explanation/Reference:

  Endpoint Identity Agents and Browser-Based Authentication - When a high level of security is necessary. The Captive Portal is used for distributing the Endpoint Identity Agent. IP Spoofing protection can be set to prevent packets from being IP spoofed.

  Reference: https://sc1.checkpoint.com/documents/R80.10/WebAdminGuides/EN/CP_R80.10_IdentityAwareness_AdminGuide/html_frameset.htm?topic=documents/R80.10/WebAdminGuides/EN/CP_R80.10_IdentityAwareness_AdminGuide/101858

• Question 107:

  When Identity Awareness is enabled, which identity source(s) is(are) used for Application Control?

  A. RADIUS
  B. Remote Access and RADIUS
  C. AD Query
  D. AD Query and Browser-based Authentication
  D. AD Query and Browser-based Authentication

  ---

  Explanation/Reference:

  Identity Awareness gets identities from these acquisition sources:

  1.

  AD Query

  2.

  Browser-Based Authentication

  3.

  Endpoint Identity Agent

  4.

  Terminal Servers Identity Agent

  5.

  Remote Access Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_IdentityAwareness_AdminGuide/62007.htm

• Question 108:

  R80 Security Management Server can be installed on which of the following operating systems?

  A. Gaia only
  B. Gaia, SPLAT, Windows Server only
  C. Gaia, SPLAT, Windows Server and IPSO only
  D. Gaia and SPLAT only
  A. Gaia only

  ---

  Explanation/Reference:

  R80 can be installed only on GAIA OS.

  Supported Check Point Installations All R80 servers are supported on the Gaia Operating System:

  1.

  ?Security Management Server

  2.

  ?Multi-Domain Security Management Server

  3.

  ?Log Server

  4.

  ?Multi-Domain Log Server

  5.

  ?SmartEvent Server

  Reference: http://dl3.checkpoint.com/paid/1f/1f7e21da67aa992954aa12a0a84e53a8/CP_R80_ReleaseNotes.pdf?HashKey=1479838085_d6ffcb36c6a3128708b3f6d7bcc4f94eandxtn=.pdf

• Question 109:

  Fill in the blank: The position of an implied rule is manipulated in the __________________ window.

  A. NAT
  B. Firewall
  C. Global Properties
  D. Object Explorer
  C. Global Properties

  ---

  Explanation/Reference:

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Firewall_WebAdmin/92703.htm

• Question 110:

  Why is a Central License the preferred and recommended method of licensing?

  A. Central Licensing ties to the IP address of the management server and is not dependent on the IP of any gateway in the event it changes.
  B. Central Licensing actually not supported with Gaia.
  C. Central Licensing ties to the IP address of a gateway and can be changed to any gateway if needed.
  D. Central Licensing is the only option when deploying Gaia.
  A. Central Licensing ties to the IP address of the management server and is not dependent on the IP of any gateway in the event it changes.