CheckPoint 156-215.81.20 Online Practice Questions and Exam Preparation

CheckPoint 156-215.81.20 Online Questions & Answers

• Question 111:

  You have successfully backed up your Check Point configurations without the OS information. What command would you use to restore this backup?

  A. restore_backup
  B. import backup
  C. cp_merge
  D. migrate import
  A. restore_backup

  ---

  Explanation/Reference:

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk54100#1.1.1

• Question 112:

  What two ordered layers make up the Access Control Policy Layer?

  A. URL Filtering and Network
  B. Network and Threat Prevention
  C. Application Control and URL Filtering
  D. Network and Application Control
  D. Network and Application Control

• Question 113:

  Tom has connected to the R80 Management Server remotely using SmartConsole and is in the process of making some Rule Base changes, when he suddenly loses connectivity. Connectivity is restored shortly afterward. What will happen to the changes already made:

  A. Tom's changes will have been stored on the Management when he reconnects and he will not lose any of this work.
  B. Tom will have to reboot his SmartConsole computer, and access the Management cache store on that computer, which is only accessible after a reboot.
  C. Tom's changes will be lost since he lost connectivity and he will have to start again.
  D. Tom will have to reboot his SmartConsole computer, clear the cache and restore changes.
  A. Tom's changes will have been stored on the Management when he reconnects and he will not lose any of this work.

• Question 114:

  Fill in the bank: In Office mode, a Security Gateway assigns a remote client to an IP address once___________.

  A. the user connects and authenticates
  B. office mode is initiated
  C. the user requests a connection
  D. the user connects
  A. the user connects and authenticates

  ---

  Explanation/Reference:

  Office Mode enables a Security Gateway to assign a remote client an IP address. The assignment takes place once the user connects and authenticates. The assignment lease is renewed as long as the user is connected.

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_VPN_AdminGuide/13857.htm

• Question 115:

  Fill in the blank: Once a license is activated, a ________ should be installed.

  A. License Management file
  B. Security Gateway Contract file
  C. Service Contract file
  D. License Contract file
  C. Service Contract file

  ---

  Explanation/Reference:

  Service Contract File Following the activation of the license, a Service Contract File should be installed. This file contains important information about all subscriptions purchased for a specific device and is installed via SmartUpdate. A detailed explanation of the Service Contract File can be found in sk33089. Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk11054

• Question 116:

  Which of the following statements accurately describes the command snapshot?

  A. snapshot creates a full OS-level backup, including network-interface data, Check Point production information, and configuration settings of a GAiA Security Gateway.
  B. snapshot creates a Security Management Server full system-level backup on any OS
  C. snapshot stores only the system-configuration settings on the Gateway
  D. A Gateway snapshot includes configuration settings and Check Point product information from the remote Security Management Server
  A. snapshot creates a full OS-level backup, including network-interface data, Check Point production information, and configuration settings of a GAiA Security Gateway.

• Question 117:

  The following graphic shows:

  

  A. View from SmartLog for logs initiated from source address 10.1.1.202
  B. View from SmartView Tracker for logs of destination address 10.1.1.202
  C. View from SmartView Tracker for logs initiated from source address 10.1.1.202
  D. View from SmartView Monitor for logs initiated from source address 10.1.1.202
  C. View from SmartView Tracker for logs initiated from source address 10.1.1.202

• Question 118:

  With which command can you view the running configuration of Gaia-based system.

  A. show conf-active
  B. show configuration active
  C. show configuration
  D. show running-configuration
  C. show configuration

• Question 119:

  When Identity Awareness is enabled, which identity source(s) is(are) used for Application Control?

  A. RADIUS
  B. Remote Access and RADIUS
  C. All of the above
  D. AD Query and Browser-based Authentication
  D. AD Query and Browser-based Authentication

  ---

  Explanation/Reference:

  Identity Awareness gets identities from these acquisition sources:

  1.

  AD Query

  2.

  Browser-Based Authentication

  3.

  Endpoint Identity Agent

  4.

  Terminal Servers Identity Agent

  5.

  Remote Access Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_IdentityAwareness_AdminGuide/62007.htm

• Question 120:

  Both major kinds of NAT support Hide and Static NAT. However, one offers more flexibility. Which statement is true?

  A. Manual NAT can offer more flexibility than Automatic NAT.
  B. Dynamic NAT with Port Address Translation can offer more flexibility than Network Address Translation (NAT) Overloading.
  C. Automatic NAT can offer more flexibility than Manual NAT.
  D. Dynamic Network Address Translation (NAT) Overloading can offer more flexibility than Port Address Translation.
  A. Manual NAT can offer more flexibility than Automatic NAT.