CheckPoint 156-215.81.20 Online Practice Questions and Exam Preparation

CheckPoint 156-215.81.20 Online Questions & Answers

• Question 241:

  The SmartEvent R80 Web application for real-time event monitoring is called:

  A. SmartView Monitor
  B. SmartEventWeb
  C. There is no Web application for SmartEvent
  D. SmartView
  B. SmartEventWeb

• Question 242:

  Which software blade enables Access Control policies to accept, drop, or limit web site access based on user, group, and/or machine?

  A. Application Control
  B. Data Awareness
  C. Identity Awareness
  D. Threat Emulation
  A. Application Control

• Question 243:

  Which VPN routing option uses VPN routing for every connection a satellite gateway handles?

  A. To satellites through center only
  B. To center only
  C. To center and to other satellites through center
  D. To center, or through the center to other satellites, to internet and other VPN targets
  D. To center, or through the center to other satellites, to internet and other VPN targets

  ---

  Explanation/Reference:

  On the VPN Routing page, enable the VPN routing for satellites section, by selecting one of these options:

  1.

  To center and to other Satellites through center; this allows connectivity between Gateways; for example, if the spoke Gateways are DAIP Gateways, and the hub is a Gateway with a static IP address

  2.

  To center, or through the center to other satellites, to Internet and other VPN targets; this allows connectivity between the Gateways, as well as the ability to inspect all communication passing through the hub to the Internet. Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk31021

• Question 244:

  What is the main difference between Static NAT and Hide NAT?

  A. Static NAT only allows outgoing connections. Hide NAT allows incoming and outgoing connections.
  B. Hide NAT only allows incoming connections to protect your network.
  C. Static NAT allow incoming and outgoing connections. Hide NAT only allows outgoing connections.
  D. Static NAT only allows incoming connections to protect your network.
  C. Static NAT allow incoming and outgoing connections. Hide NAT only allows outgoing connections.

• Question 245:

  Which Threat Prevention Software Blade provides protection from malicious software that can infect your network computers? Choose the BEST answer.

  A. Anti-Malware
  B. Content Awareness
  C. Anti-Virus
  D. IPS
  C. Anti-Virus

• Question 246:

  The Captive Portal tool:

  A. Acquires identities from unidentified users.
  B. Is only used for guest user authentication.
  C. Allows access to users already identified.
  D. Is deployed from the Identity Awareness page in the Global Properties settings.
  A. Acquires identities from unidentified users.

• Question 247:

  Can multiple administrators connect to a Security Management Server at the same time?

  A. No, only one can be connected
  B. Yes, all administrators can modify a network object at the same time
  C. Yes, every administrator has their own username, and works in a session that is independent of other administrators
  D. Yes, but only one has the right to write
  C. Yes, every administrator has their own username, and works in a session that is independent of other administrators

  ---

  Explanation/Reference:

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm?topic=documents/R80/CP_R80_SecMGMT/124265

• Question 248:

  The most important part of a site-to-site VPN deployment is the ________ .

  A. Internet
  B. Remote users
  C. Encrypted VPN tunnel
  D. VPN gateways
  C. Encrypted VPN tunnel

  ---

  Explanation/Reference:

  Site to Site VPN The basis of Site to Site VPN is the encrypted VPN tunnel. Two Security Gateways negotiate a link and create a VPN tunnel and each tunnel can contain more than one VPN connection. One Security Gateway can maintain more than one VPN tunnel at the same time. Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Firewall_WebAdmin/92709.htm

• Question 249:

  When using LDAP as an authentication method for Identity Awareness, the query:

  A. Requires client and server side software.
  B. Prompts the user to enter credentials.
  C. Requires administrators to specifically allow LDAP traffic to and from the LDAP Server and the Security Gateway.
  D. Is transparent, requiring no client or server side software, or client intervention.
  D. Is transparent, requiring no client or server side software, or client intervention.

• Question 250:

  What licensing feature is used to verify licenses and activate new licenses added to the License and Contracts repository?

  A. Verification tool
  B. Verification licensing
  C. Automatic licensing
  D. Automatic licensing and Verification tool
  D. Automatic licensing and Verification tool