CheckPoint 156-215.81.20 Online Practice Questions and Exam Preparation

CheckPoint 156-215.81.20 Online Questions & Answers

• Question 181:

  When should you generate new licenses?

  A. Before installing contract files.
  B. After a device upgrade.
  C. When the existing license expires, license is upgraded or the IP-address associated with the license changes.
  D. Only when the license is upgraded.
  B. After a device upgrade.

• Question 182:

  In large organizations where there are a number of managed Check Point firewalls that generate a lot of logs it is recommended to install the Log Server on a dedicated computer. Which statement is FALSE?

  A. The dedicated Log Server must be the same version as the Security Management Server.
  B. A Log Server has a SIC certificate which allows secure communication with the SMS and Security Gateways.
  C. More than one Log Server can be installed.
  D. A dedicated SmartEvent server is required for a separate Log Server to be deployed in the SmartEvent server.
  D. A dedicated SmartEvent server is required for a separate Log Server to be deployed in the SmartEvent server.

• Question 183:

  When an Admin logs into SmartConsole and sees a lock icon on a gateway object and cannot edit that object, what does that indicate?

  A. Incorrect routing to reach the gateway.
  B. The Admin would need to login to Read-Only mode.
  C. The gateway is not powered on.
  D. Another Admin has made an edit to that object and has yet to publish the change.
  D. Another Admin has made an edit to that object and has yet to publish the change.

• Question 184:

  When should you generate new licenses?

  A. Before installing contract files.
  B. After an RMA procedure when the MAC address or serial number of the appliance changes.
  C. When the existing license expires, license is upgraded or the IP-address where the license is tied changes.
  D. Only when the license is upgraded.
  B. After an RMA procedure when the MAC address or serial number of the appliance changes.

  ---

  Explanation/Reference:

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk84802

• Question 185:

  In R80 Management, apart from using SmartConsole, objects or rules can also be modified using:

  A. 3rd Party integration of CLI and API for Gateways prior to R80.
  B. A complete CLI and API interface using SSH and custom CPCode integration.
  C. 3rd Party integration of CLI and API for Management prior to R80.
  D. A complete CLI and API interface for Management with 3rd Party integration.
  B. A complete CLI and API interface using SSH and custom CPCode integration.

• Question 186:

  Where do we need to reset the SIC on a gateway object?

  A. SmartDashboard > Edit Gateway Object > General Properties > Communication
  B. SmartUpdate > Edit Security Management Server Object > SIC
  C. SmartUpdate > Edit Gateway Object > Communication
  D. SmartDashboard > Edit Security Management Server Object > SIC
  A. SmartDashboard > Edit Gateway Object > General Properties > Communication

• Question 187:

  Which of the following is NOT a tracking log option in R80.x?

  A. Log
  B. Full Log
  C. Detailed Log
  D. Extended Log
  C. Detailed Log

• Question 188:

  A digital signature:

  A. Guarantees the authenticity and integrity of a message.
  B. Automatically exchanges shared keys.
  C. Decrypts data to its original form.
  D. Provides a secure key exchange mechanism over the Internet.
  A. Guarantees the authenticity and integrity of a message.

• Question 189:

  Review the following screenshot and select the BEST answer.

  

  A. Data Center Layer is an inline layer in the Access Control Policy.
  B. By default all layers are shared with all policies.
  C. If a connection is dropped in Network Layer, it will not be matched against the rules in Data Center Layer.
  D. If a connection is accepted in Network-layer, it will not be matched against the rules in Data Center Layer.
  C. If a connection is dropped in Network Layer, it will not be matched against the rules in Data Center Layer.

• Question 190:

  DLP and Geo Policy are examples of what type of Policy?

  A. Standard Policies
  B. Shared Policies
  C. Inspection Policies
  D. Unified Policies
  B. Shared Policies

  ---

  Explanation/Reference:

  The Shared policies are installed with the Access Control Policy.

  

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm?topic=documents/R80/CP_R80_SecMGMT/126197