CheckPoint 156-215.81.20 Online Practice Questions and Exam Preparation

CheckPoint 156-215.81.20 Online Questions & Answers

• Question 131:

  Session unique identifiers are passed to the web api using which http header option?

  A. X-chkp-sid
  B. Accept-Charset
  C. Proxy-Authorization
  D. Application
  C. Proxy-Authorization

• Question 132:

  What statement is true regarding Visitor Mode?

  A. VPN authentication and encrypted traffic are tunneled through port TCP 443.
  B. Only ESP traffic is tunneled through port TCP 443.
  C. Only Main mode and Quick mode traffic are tunneled on TCP port 443.
  D. All VPN traffic is tunneled through UDP port 4500.
  A. VPN authentication and encrypted traffic are tunneled through port TCP 443.

• Question 133:

  In what way are SSL VPN and IPSec VPN different?

  A. SSL VPN is using HTTPS in addition to IKE, whereas IPSec VPN is clientless
  B. SSL VPN adds an extra VPN header to the packet, IPSec VPN does not
  C. IPSec VPN does not support two factor authentication, SSL VPN does support this
  D. IPSec VPN uses an additional virtual adapter, SSL VPN uses the client network adapter only
  D. IPSec VPN uses an additional virtual adapter, SSL VPN uses the client network adapter only

• Question 134:

  What is the user ID of a user that have all the privileges of a root user?

  A. User ID 99
  B. User ID 1
  C. User ID 2
  D. User ID 0
  D. User ID 0

• Question 135:

  Which option in a firewall rule would only match and allow traffic to VPN gateways for one Community in common?

  A. All Connections (Clear or Encrypted)
  B. Accept all encrypted traffic
  C. Specific VPN Communities
  D. All Site-to-Site VPN Communities
  C. Specific VPN Communities

• Question 136:

  Look at the screenshot below. What CLISH command provides this output?

  

  A. show configuration all
  B. show confd configuration
  C. show confd configuration all
  D. show configuration
  D. show configuration

  ---

  Explanation/Reference:

  

  Reference: http://dl3.checkpoint.com/paid/0c/0caa9c0daa67e0c1f2af3dd06790bc81/CP_R77_Gaia_AdminGuide.pdf?HashKey=1479835768_76058f0fc4209e38bc801cd58a85d7c5andxtn=.pdf

• Question 137:

  What port is used for communication to the User Center with SmartUpdate?

  A. CPMI 200
  B. TCP 8080
  C. HTTP 80
  D. HTTPS 443
  D. HTTPS 443

• Question 138:

  Which path below is available only when CoreXL is enabled?

  A. Slow path
  B. Firewall path
  C. Medium path D. Accelerated path
  C. Medium path D. Accelerated path

• Question 139:

  Which command shows detailed information about VPN tunnels?

  A. cat $FWDIR/conf/vpn.conf
  B. vpn tu tlist
  C. vpn tu
  D. cpview
  B. vpn tu tlist

• Question 140:

  If there is an Accept Implied Policy set to "First", what is the reason Jorge cannot see any logs?

  A. Log Implied Rule was not selected on Global Properties.
  B. Log Implied Rule was not set correctly on the track column on the rules base.
  C. Track log column is set to none.
  D. Track log column is set to Log instead of Full Log.
  A. Log Implied Rule was not selected on Global Properties.

  ---

  Explanation/Reference:

  Implied Rules are configured only on Global Properties.