CheckPoint Checkpoint Certifications 156-215.81.20 Questions & Answers

• Question 141:

  Choose what BEST describes users on Gaia Platform.

  A. There is one default user that can be deleted.

  B. There are two default users and neither can be deleted.

  C. There is only one default user that cannot be deleted.

  D. There are two default users and one cannot be deleted.

  Correct Answer: B

• Question 142:

  What is the purpose of a Stealth Rule?

  A. A rule that allows administrators to access SmartConsole from any device.

  B. To drop any traffic destined for the firewall that is not otherwise explicitly allowed.

  C. A rule at the end of your policy to drop any traffic that is not explicitly allowed.

  D. A rule used to hide a server's IP address from the outside world.

  Correct Answer: B

• Question 143:

  Under which file is the proxy arp configuration stored?

  A. $FWDIR/state/proxy_arp.conf on the management server

  B. $FWDIR/conf/local.arp on the management server

  C. $FWDIR/state/_tmp/proxy.arp on the security gateway

  D. $FWDIR/conf/local.arp on the gateway

  Correct Answer: D

  Reference: https://sc1.checkpoint.com/documents/R76SP.10/CP_R76SP.10_Security_System_AdministrationGuide/105233.htm

• Question 144:

  Customer's R80 management server needs to be upgraded to R80.10. What is the best upgrade method when the management server is not connected to the Internet?

  A. Export R80 configuration, clean install R80.10 and import the configuration

  B. CPUSE online upgrade

  C. CPUSE offline upgrade

  D. SmartUpdate upgrade

  Correct Answer: C

• Question 145:

  SmartEvent does NOT use which of the following procedures to identity events:

  A. Matching a log against each event definition

  B. Create an event candidate

  C. Matching a log against local exclusions

  D. Matching a log against global exclusions

  Correct Answer: C

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_SmartEvent_AdminGuide/17401.htm

• Question 146:

  John is using Management HA. Which Smartcenter should be connected to for making changes?

  A. secondary Smartcenter

  B. active Smartcenter

  C. connect virtual IP of Smartcenter HA

  D. primary Smartcenter

  Correct Answer: B

• Question 147:

  Which path below is available only when CoreXL is enabled?

  A. Slow path

  B. Firewall path

  C. Medium path

  D. Accelerated path

  Correct Answer: C

• Question 148:

  Which of the following describes how Threat Extraction functions?

  A. Detect threats and provides a detailed report of discovered threats

  B. Proactively detects threats

  C. Delivers file with original content

  D. Delivers PDF versions of original files with active content removed

  Correct Answer: B

• Question 149:

  The SmartEvent R80 Web application for real-time event monitoring is called:

  A. SmartView Monitor

  B. SmartEventWeb

  C. There is no Web application for SmartEvent

  D. SmartView

  Correct Answer: B

• Question 150:

  SandBlast offers flexibility in implementation based on their individual business needs. What is an option for deployment of Check Point SandBlast Zero-Day Protection?

  A. Smart Cloud Services

  B. Load Sharing Mode Services

  C. Threat Agent Solution

  D. Public Cloud Services

  Correct Answer: A