CheckPoint Checkpoint Certifications 156-215.81.20 Questions & Answers

• Question 171:

  Which of the following is NOT a tracking option? (Select three)

  A. Partial log

  B. Log

  C. Network log

  D. Full log

  Correct Answer: ACD

  Reference: https://sc1.checkpoint.com/documents/R80.10/WebAdminGuides/EN/CP_R80.10_LoggingAndMonitoring_AdminGuide/html_frameset.htm?topic=documents/R80.10/WebAdminGuides/EN/ CP_R80.10_LoggingAndMonitoring_AdminGuide/131914

• Question 172:

  Which command shows the installed licenses?

  A. cplic print

  B. print cplic

  C. fwlic print

  D. show licenses

  Correct Answer: A

• Question 173:

  Of all the Check Point components in your network, which one changes most often and should be backed up most frequently?

  A. SmartManager

  B. SmartConsole

  C. Security Gateway

  D. Security Management Server

  Correct Answer: D

• Question 174:

  Which option would allow you to make a backup copy of the OS and Check Point configuration, without stopping Check Point processes?

  A. All options stop Check Point processes

  B. backup

  C. migrate export

  D. snapshot

  Correct Answer: D

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk106127

• Question 175:

  What is the Transport layer of the TCP/IP model responsible for?

  A. It transports packets as datagrams along different routes to reach their destination.

  B. It manages the flow of data between two hosts to ensure that the packets are correctly assembled and delivered to the target application.

  C. It defines the protocols that are used to exchange data between networks and how host programs interact with the Application layer.

  D. It deals with all aspects of the physical components of network connectivity and connects with different network types.

  Correct Answer: B

• Question 176:

  What needs to be configured if the NAT property `Translate destination on client side' is not enabled in Global properties?

  A. A host route to route to the destination IP

  B. Use the file local.arp to add the ARP entries for NAT to work

  C. Nothing, the Gateway takes care of all details necessary

  D. Enabling `Allow bi-directional NAT' for NAT to work correctly

  Correct Answer: C

• Question 177:

  In the Check Point Security Management Architecture, which component(s) can store logs?

  A. SmartConsole

  B. Security Management Server and Security Gateway

  C. Security Management Server

  D. SmartConsole and Security Management Server

  Correct Answer: B

• Question 178:

  Fill in the blank: In order to install a license, it must first be added to the ____________.

  A. User Center

  B. Package repository

  C. Download Center Web site

  D. License and Contract repository

  Correct Answer: B

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_Non_Gaia_Installation_and_Upgrade_Guide/13128.htm

• Question 179:

  When logging in for the first time to a Security management Server through SmartConsole, a fingerprint is saved to the:

  A. Security Management Server's /home/.fgpt file and is available for future SmartConsole authentications.

  B. Windows registry is available for future Security Management Server authentications.

  C. There is no memory used for saving a fingerprint anyway.

  D. SmartConsole cache is available for future Security Management Server authentications.

  Correct Answer: D

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_SecMan_WebAdmin/html_frameset.htm?topic=documents/R76/CP_R76_SecMan_WebAdmin/118037

• Question 180:

  Fill in the blank: By default, the SIC certificates issued by R80 Management Server are based on the ____________ algorithm.

  A. SHA-256

  B. SHA-200

  C. MD5

  D. SHA-128

  Correct Answer: A