CheckPoint 156-215.81.20 Online Practice Questions and Exam Preparation

CheckPoint 156-215.81.20 Online Questions & Answers

• Question 151:

  Which method below is NOT one of the ways to communicate using the Management API's?

  A. Typing API commands using the "mgmt_cli" command
  B. Typing API commands from a dialog box inside the SmartConsole GUI application
  C. Typing API commands using Gaia's secure shell (clash)19+
  D. Sending API commands over an http connection using web-services
  D. Sending API commands over an http connection using web-services

  ---

  Explanation/Reference:

  Reference: https://sc1.checkpoint.com/documents/R80/APIs/#introduction

• Question 152:

  A layer can support different combinations of blades. What are the supported blades:

  A. Firewall, NAT, Content Awareness and Mobile Access
  B. Firewall, URLF, Content Awareness and Mobile Access
  C. Firewall (Network Access Control), Application and URL Filtering and Content Awareness
  D. Firewall (Network Access Control), Application and URL Filtering, Content Awareness and Mobile Access
  D. Firewall (Network Access Control), Application and URL Filtering, Content Awareness and Mobile Access

• Question 153:

  When connected to the Check Point R80 Management Server using the SmartConsole the first administrator to connect has a lock on:

  A. Only the objects being modified in the Management Database and other administrators can connect to make changes using a special session as long as they all connect from the same LAN network.
  B. The entire Management Database and other administrators can connect to make changes only if the first administrator switches to Read-only.
  C. The entire Management Database and all sessions and other administrators can connect only as Read-only.
  D. Only the objects being modified in his session of the Management Database and other administrators can connect to make changes using different sessions.
  D. Only the objects being modified in his session of the Management Database and other administrators can connect to make changes using different sessions.

• Question 154:

  The purpose of the Communication Initialization process is to establish a trust between the Security Management Server (SMS) to other Check Point Gateways and Servers. Which statement best describes this Secure Internal Communication (SIC)?

  A. After successful initialization, the gateway can communicate with any Check Point node that possesses a SIC certificate signed by the same ICA.
  B. New firewalls can easily establish the trust by using the expert password defined on the SMS and the SMS IP address.
  C. A SIC certificate is automatically generated on the gateway because the gateway hosts a subordinate CA to the SMS ICA.
  D. Secure Internal Communications authenticates the security gateway to the SMS before http communications are allowed.
  A. After successful initialization, the gateway can communicate with any Check Point node that possesses a SIC certificate signed by the same ICA.

• Question 155:

  Which SmartConsole tab shows logs and detected security threats, providing a centralized display of potential attack patterns from all network devices?

  A. LOGS and MONITOR
  B. SECURITY POLICIES
  C. GATEWAYS and SERVERS
  D. MANAGE and SETTINGS
  A. LOGS and MONITOR

• Question 156:

  Which of the following blades is NOT subscription-based and therefore does not have to be renewed on a regular basis?

  A. Threat Emulation
  B. Anti-Virus
  C. Advanced Networking Blade
  D. Application Control
  C. Advanced Networking Blade

• Question 157:

  What are the three essential components of the Check Point Security Management Architecture?

  A. SmartConsole, Security Management Server, Security Gateway
  B. SmartConsole, SmartUpdate, Security Gateway
  C. Security Management Server, Security Gateway, Command Line Interface
  D. WebUI, SmartConsole, Security Gateway
  A. SmartConsole, Security Management Server, Security Gateway

  ---

  Explanation/Reference:

  Deployments

  Basic deployments:

  1.

  Standalone deployment - Security Gateway and the Security Management server are installed on the same machine.

  2.

  Distributed deployment - Security Gateway and the Security Management server are installed on different machines.

  

  Assume an environment with gateways on different sites. Each Security Gateway connects to the Internet on one side, and to a LAN on the other.

  You can create a Virtual Private Network (VPN) between the two Security Gateways, to secure all communication between them.

  The Security Management server is installed in the LAN, and is protected by a Security Gateway. The Security Management server manages the Security Gateways and lets remote users connect securely to the corporate network.

  SmartDashboard can be installed on the Security Management server or another computer.

  There can be other OPSEC-partner modules (for example, an Anti-Virus Server) to complete the network security with the Security Management server and its Security Gateways. Reference: https://sc1.checkpoint.com/documents/R77/

  CP_R77_SecurityManagement_WebAdminGuide/html_frameset.htm?topic=documents/R77/CP_R77_SecurityManagement_WebAdminGuide/118037

• Question 158:

  What are the three types of UserCheck messages?

  A. inform, ask, and block
  B. block, action, and warn
  C. action, inform, and ask
  D. ask, block, and notify
  A. inform, ask, and block

  ---

  Explanation/Reference:

  Reference: https://sc1.checkpoint.com/documents/R80.10/WebAdminGuides/EN/CP_R80.10_DataLossPrevention_AdminGuide/html_frameset.htm?topic=documents/R80.10/WebAdminGuides/EN/ CP_R80.10_DataLossPrevention_AdminGuide/94711

• Question 159:

  What are the three deployment considerations for a secure network?

  A. Distributed, Bridge Mode, and Remote
  B. Bridge Mode, Remote, and Standalone
  C. Remote, Standalone, and Distributed
  D. Standalone, Distributed, and Bridge Mode
  A. Distributed, Bridge Mode, and Remote

• Question 160:

  Which component functions as the Internal Certificate Authority for R77?

  A. Security Gateway
  B. Management Server
  C. Policy Server
  D. SmartLSM
  B. Management Server