CheckPoint Checkpoint Certifications 156-215.81.20 Questions & Answers

• Question 111:

  When an Admin logs into SmartConsole and sees a lock icon on a gateway object and cannot edit that object, what does that indicate?

  A. Incorrect routing to reach the gateway.

  B. The Admin would need to login to Read-Only mode.

  C. The gateway is not powered on.

  D. Another Admin has made an edit to that object and has yet to publish the change.

  Correct Answer: D

• Question 112:

  Which of the following is considered a “Subscription Blade”, requiring renewal every 1-3 years?

  A. IPS blade

  B. IPSEC VPN Blade

  C. Firewall Blade

  D. Identity Awareness Blade

  Correct Answer: A

• Question 113:

  The Online Activation method is available for Check Point manufactured appliances. How does the administrator use the Online Activation method?

  A. The cpinfo command must be run on the firewall with the switch -online-license-activation.

  B. Using the Gaia First Time Configuration Wizard, the appliance connects to the Check Point User Center and downloads all necessary licenses and contracts.

  C. The SmartLicensing GUI tool must be launched from the SmartConsole for the Online Activation tool to start automatically.

  D. No action is required if the firewall has internet access and a DNS server to resolve domain names.

  Correct Answer: B

• Question 114:

  Check Point licenses come in two forms. What are those forms?

  A. Security Gateway and Security Management.

  B. On-premise and Public Cloud.

  C. Central and Local.

  D. Access Control and Threat Prevention.

  Correct Answer: C

• Question 115:

  True or False: In a Distributed Environment, a Central License can be installed via CLI on a Security Gateway.

  A. True, Central Licenses can be installed with CPLIC command on a Security Gateway

  B. True, CLI is the preferred method for Licensing

  C. False, Central Licenses are installed via Gaia on Security Gateways

  D. False, Central Licenses are handled via Security Management Server

  Correct Answer: D

• Question 116:

  Which application is used for the central management and deployment of licenses and packages?

  A. Deployment Agent

  B. SmartLicense

  C. SmartProvisioning

  D. SmartUpdate

  Correct Answer: D

• Question 117:

  Which command shows the installed licenses in Expert mode?

  A. show licenses

  B. fwlic print

  C. cplic print

  D. print cplic

  Correct Answer: C

• Question 118:

  In SmartConsole, objects are used to represent physical and virtual network components and also some logical components. These objects are divided into several categories. Which of the following is NOT an objects category?

  A. Network Object

  B. IP Address

  C. Limit

  D. Custom Application / Site

  Correct Answer: B

• Question 119:

  What is the purpose of the Stealth Rule?

  A. To reduce the amount of logs for performance issues.

  B. To reduce the number of rules in the database.

  C. To prevent users from directly connecting to a Security Gateway.

  D. To make the gateway visible to the Internet.

  Correct Answer: C

• Question 120:

  What are the advantages of a “shared policy”?

  A. Allows the administrator to share a policy between all the users identified by the Security Gateway.

  B. Allows the administrator to share a policy between all the administrators managing the Security Management Server.

  C. Allows the administrator to share a policy so that it is available to use in another Policy Package.

  D. Allows the administrator to install a policy on one Security Gateway and it gets installed on another managed Security Gateway.

  Correct Answer: C