CheckPoint Checkpoint Certifications 156-215.81.20 Questions & Answers

• Question 191:

  Which of the following commands is used to verify license installation?

  A. Cplic verify license

  B. Cplic print

  C. Cplic show

  D. Cplic license

  Correct Answer: B

• Question 192:

  To enforce the Security Policy correctly, a Security Gateway requires:

  A. a routing table

  B. awareness of the network topology

  C. a Demilitarized Zone

  D. a Security Policy install

  Correct Answer: B

  The network topology represents the internal network (both the LAN and the DMZ) protected by the gateway. The gateway must be aware of the layout of the network topology to:

  Correctly enforce the Security Policy.

  Ensure the validity of IP addresses for inbound and outbound traffic.

  Configure a special domain for Virtual Private Networks.

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_SecMan_WebAdmin/html_frameset.htm?topic=documents/R76/CP_R76_SecMan_WebAdmin/118037

• Question 193:

  Which configuration element determines which traffic should be encrypted into a VPN tunnel vs. sent in the clear?

  A. The firewall topologies

  B. NAT Rules

  C. The Rule Base

  D. The VPN Domains

  Correct Answer: C

• Question 194:

  You have discovered suspicious activity in your network. What is the BEST immediate action to take?

  A. Create a policy rule to block the traffic.

  B. Create a suspicious action rule to block that traffic.

  C. Wait until traffic has been identified before making any changes.

  D. Contact ISP to block the traffic.

  Correct Answer: B

  Reference: https://sc1.checkpoint.com/documents/R80.10/WebAdminGuides/EN/CP_R80.10_LoggingAndMonitoring_AdminGuide/html_frameset.htm?topic=documents/R80.10/WebAdminGuides/EN/ CP_R80.10_LoggingAndMonitoring_AdminGuide/118300

• Question 195:

  Tom has connected to the R80 Management Server remotely using SmartConsole and is in the process of making some Rule Base changes, when he suddenly loses connectivity. Connectivity is restored shortly afterward. What will happen to the changes already made:

  A. Tom's changes will have been stored on the Management when he reconnects and he will not lose any of this work.

  B. Tom will have to reboot his SmartConsole computer, and access the Management cache store on that computer, which is only accessible after a reboot.

  C. Tom's changes will be lost since he lost connectivity and he will have to start again.

  D. Tom will have to reboot his SmartConsole computer, clear the cache and restore changes.

  Correct Answer: A

• Question 196:

  Which GUI tool can be used to view and apply Check Point licenses?

  A. cpconfig

  B. Management Command Line

  C. SmartConsole

  D. SmartUpdate

  Correct Answer: D

  SmartUpdate GUI is the recommended way of managing licenses.

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_Gaia_AdminWebAdminGuide/html_frameset.htm?topic=documents/R77/CP_R77_Gaia_AdminWebAdminGuide/79993

• Question 197:

  How would you determine the software version from the CLI?

  A. fw ver

  B. fw stat

  C. fw monitor

  D. cpinfo

  Correct Answer: A

• Question 198:

  In R80 Management, apart from using SmartConsole, objects or rules can also be modified using:

  A. 3rd Party integration of CLI and API for Gateways prior to R80.

  B. A complete CLI and API interface using SSH and custom CPCode integration.

  C. 3rd Party integration of CLI and API for Management prior to R80.

  D. A complete CLI and API interface for Management with 3rd Party integration.

  Correct Answer: B

• Question 199:

  When connected to the Check Point R80 Management Server using the SmartConsole the first administrator to connect has a lock on:

  A. Only the objects being modified in the Management Database and other administrators can connect to make changes using a special session as long as they all connect from the same LAN network.

  B. The entire Management Database and other administrators can connect to make changes only if the first administrator switches to Read-only.

  C. The entire Management Database and all sessions and other administrators can connect only as Read-only.

  D. Only the objects being modified in his session of the Management Database and other administrators can connect to make changes using different sessions.

  Correct Answer: D

• Question 200:

  Which is NOT an encryption algorithm that can be used in an IPSEC Security Association (Phase 2)?

  A. AES-GCM-256

  B. AES-CBC-256

  C. AES-GCM-128

  Correct Answer: B

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_VPN_AdminGuide/html_frameset.htm?topic=documents/R77/CP_R77_VPN_AdminGuide/13847