CheckPoint 156-215.81.20 Online Practice Questions and Exam Preparation

CheckPoint 156-215.81.20 Online Questions & Answers

• Question 141:

  Traffic from source 192.168.1.1 is going to www.google.com. The Application Control Blade on the gateway is inspecting the traffic. Assuming acceleration is enable which path is handling the traffic?

  A. Slow Path
  B. Medium Path
  C. Fast Path
  D. Accelerated Path
  A. Slow Path

• Question 142:

  Choose what BEST describes the Policy Layer Traffic Inspection.

  A. If a packet does not match any of the inline layers, the matching continues to the next Layer.
  B. If a packet matches an inline layer, it will continue matching the next layer.
  C. If a packet does not match any of the inline layers, the packet will be matched against the Implicit Clean-up Rule.
  D. If a packet does not match a Network Policy Layer, the matching continues to its inline layer.
  B. If a packet matches an inline layer, it will continue matching the next layer.

  ---

  Explanation/Reference:

  Reference: https://community.checkpoint.com/thread/1092

• Question 143:

  True or False: In a Distributed Environment, a Central License can be installed via CLI on a Security Gateway

  A. True, CLI is the prefer method for Licensing
  B. False, Central License are handled via Security Management Server
  C. False, Central License are installed via Gaia on Security Gateways
  D. True, Central License can be installed with CPLIC command on a Security Gateway
  D. True, Central License can be installed with CPLIC command on a Security Gateway

• Question 144:

  Customer's R80 management server needs to be upgraded to R80.10. What is the best upgrade method when the management server is not connected to the Internet?

  A. Export R80 configuration, clean install R80.10 and import the configuration
  B. CPUSE online upgrade
  C. CPUSE offline upgrade
  D. SmartUpdate upgrade
  C. CPUSE offline upgrade

• Question 145:

  VPN gateways must authenticate to each other prior to exchanging information. What are the two types of credentials used for authentication?

  A. 3DES and MD5
  B. Certificates and IPsec
  C. Certificates and pre-shared secret
  D. IPsec and VPN Domains
  C. Certificates and pre-shared secret

• Question 146:

  Which icon in the WebUI indicates that read/write access is enabled?

  A. Eyeglasses
  B. Pencil
  C. Padlock
  D. Book
  B. Pencil

• Question 147:

  Which of the following is NOT a role of the SmartCenter:

  A. Status monitoring
  B. Policy configuration
  C. Certificate authority
  D. Address translation
  C. Certificate authority

  ---

  Explanation/Reference:

  Reference: www.checkfirewalls.com/datasheets/smartcenter_datasheet.pdf

• Question 148:

  Fill in the blanks: A Check Point software license consists of a _____ and _____.

  A. Software container; software package
  B. Software package; signature
  C. Signature; software blade
  D. Software blade; software container
  D. Software blade; software container

• Question 149:

  The organization's security manager wishes to back up just the Gaia operating system parameters. Which command can be used to back up only Gaia operating system parameters like interface details, Static routes and Proxy ARP entries?

  A. show configuration
  B. backup
  C. migrate export
  D. upgrade export
  B. backup

  ---

  Explanation/Reference:

  System Backup (and System Restore)

  System Backup can be used to backup current system configuration. A backup creates a compressed file that contains the Check Point configuration including the networking and operating system parameters, such as routing and interface

  configuration etc., but unlike a snapshot, it does not include the operating system, product binaries, and hotfixes.

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk108902

• Question 150:

  Where does the security administrator activate Identity Awareness within SmartDashboard?

  A. Gateway Object > General Properties
  B. Security Management Server > Identity Awareness
  C. Policy > Global Properties > Identity Awareness
  D. LDAP Server Object > General Properties
  A. Gateway Object > General Properties