CheckPoint 156-215.81.20 Online Practice Questions and Exam Preparation

CheckPoint 156-215.81.20 Online Questions & Answers

• Question 261:

  In HTTPS Inspection policy, what actions are available in the "Actions" column of a rule?

  A. "Inspect", "Bypass", "Block"
  B. "Inspect", "Bypass", "Categorize"
  C. "Inspect", "Bypass"
  D. "Detect", "Bypass"
  C. "Inspect", "Bypass"

• Question 262:

  You want to reset SIC between smberlin and sgosaka.

  

  In SmartDashboard, you choose sgosaka, Communication, Reset. On sgosaka, you start cpconfig, choose Secure Internal Communication and enter the new SIC Activation Key. The screen reads The SIC was successfully initialized and jumps back to the menu. When trying to establish a connection, instead of a working connection, you receive this error message:

  

  What is the reason for this behavior?

  A. The Gateway was not rebooted, which is necessary to change the SIC key.
  B. You must first initialize the Gateway object in SmartDashboard (i.e., right-click on the object, choose Basic Setup > Initialize).
  C. The check Point services on the Gateway were not restarted because you are still in the cpconfig utility.
  D. The activation key contains letters that are on different keys on localized keyboards. Therefore, the activation can not be typed in a matching fashion.
  C. The check Point services on the Gateway were not restarted because you are still in the cpconfig utility.

• Question 263:

  Packet acceleration (SecureXL) identifies connections by several attributes. Which of the attributes is NOT used for identifying connection?

  A. Source Address
  B. Destination Address
  C. TCP Acknowledgment Number
  D. Source Port
  C. TCP Acknowledgment Number

  ---

  Explanation/Reference:

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_Firewall_WebAdmin/92711.htm

• Question 264:

  When configuring Anti-Spoofing, which tracking options can an Administrator select?

  A. Log, Alert, None
  B. Drop Packet, Alert, None
  C. Log, Allow Packets, Email
  D. Log, Send SNMP Trap, Email
  A. Log, Alert, None

• Question 265:

  Which of the following is NOT a method used by Identity Awareness for acquiring identity?

  A. RADIUS
  B. Active Directory Query
  C. Remote Access
  D. Certificates
  D. Certificates

  ---

  Explanation/Reference:

  Reference: https://www.checkpoint.com/products/identity-awareness-software-blade/

• Question 266:

  DLP and Mobile Access Policy are examples of what type of Policy?

  A. Shared Policies
  B. Unified Policies
  C. Inspection Policies
  D. Standard Policies
  A. Shared Policies

• Question 267:

  In which deployment is the security management server and Security Gateway installed on the same appliance?

  A. Switch
  B. Standalone
  C. Distributed
  D. Remote
  B. Standalone

• Question 268:

  What is the purpose of a Clean-up Rule?

  A. Clean-up Rules do not server any purpose.
  B. Provide a metric for determining unnecessary rules.
  C. To drop any traffic that is not explicitly allowed.
  D. Used to better optimize a policy.
  C. To drop any traffic that is not explicitly allowed.

  ---

  Explanation/Reference:

  These are basic access control rules we recommend for all Rule Bases:

  1.

  Stealth rule that prevents direct access to the Security Gateway.

  2.

  Cleanup rule that drops all traffic that is not allowed by the earlier rules.

  There is also an implied rule that drops all traffic, but you can use the Cleanup rule to log the traffic.

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Firewall_WebAdmin/92703.htm

• Question 269:

  CPU-level of your Security gateway is peaking to 100% causing problems with traffic. You suspect that the problem might be the Threat Prevention settings. The following Threat Prevention Profile has been created.

  

  How could you tune the profile in order to lower the CPU load still maintaining security at good level? Select the BEST answer.

  A. Set High Confidence to Low and Low Confidence to Inactive.
  B. Set the Performance Impact to Medium or lower.
  C. The problem is not with the Threat Prevention Profile. Consider adding more memory to the appliance.
  D. Set the Performance Impact to Very Low Confidence to Prevent.
  B. Set the Performance Impact to Medium or lower.

• Question 270:

  Which SmartConsole tab shows logs and detects security threats, providing a centralized display of potential attack patterns from all network devices?

  A. Gateway and Servers
  B. Logs and Monitor
  C. Manage Seeting
  D. Security Policies
  B. Logs and Monitor