CheckPoint Checkpoint Certifications 156-215.81.20 Questions & Answers

• Question 271:

  Which tool is used to enable ClusterXL?

  A. SmartUpdate

  B. cpconfig

  C. SmartConsole

  D. sysconfig

  Correct Answer: B

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_ClusterXL_WebAdminGuide/html_frameset.htm?topic=documents/R77/CP_R77_ClusterXL_WebAdminGuide/161105

• Question 272:

  What type of NAT is a one-to-one relationship where each host is translated to a unique address?

  A. Source

  B. Static

  C. Hide

  D. Destination

  Correct Answer: B

• Question 273:

  Which one of the following is a way that the objects can be manipulated using the new API integration in R80 Management?

  A. Microsoft Publisher

  B. JSON

  C. Microsoft Word

  D. RC4 Encryption

  Correct Answer: B

• Question 274:

  True or False: In a Distributed Environment, a Central License can be installed via CLI on a Security Gateway

  A. True, CLI is the prefer method for Licensing

  B. False, Central License are handled via Security Management Server

  C. False, Central License are installed via Gaia on Security Gateways

  D. True, Central License can be installed with CPLIC command on a Security Gateway

  Correct Answer: D

• Question 275:

  Which of the following is NOT an identity source used for Identity Awareness?

  A. Remote Access

  B. UserCheck

  C. AD Query

  D. RADIUS

  Correct Answer: B

  Reference: https://www.checkpoint.com/products/identity-awareness-software-blade/

• Question 276:

  Fill in the blanks: Default port numbers for an LDAP server is ______ for standard connections and _______ SSL connections.

  A. 675, 389

  B. 389, 636

  C. 636, 290

  D. 290, 675

  Correct Answer: B

  A client starts an LDAP session by connecting to an LDAP server, called a Directory System Agent (DSA), by default on TCP and UDP port 389, or on port 636 for LDAPS. Global Catalog is available by default on ports 3268, and 3269 for LDAPS.

• Question 277:

  Which of the following is NOT supported by Bridge Mode Check Point Security Gateway

  A. Antivirus

  B. Data Loss Prevention

  C. NAT

  D. Application Control

  Correct Answer: C

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_SGW_WebAdmin/96332.htm

• Question 278:

  Which option, when applied to a rule, allows all encrypted and non-VPN traffic that matches the rule?

  A. All Site-to-Site VPN Communities

  B. Accept all encrypted traffic

  C. All Connections (Clear or Encrypted)

  D. Specific VPN Communities

  Correct Answer: B

• Question 279:

  In which scenario is it a valid option to transfer a license from one hardware device to another?

  A. From a 4400 Appliance to an HP Open Server

  B. From an IBM Open Server to an HP Open Server

  C. From an 4400 Appliance to a 2200 Appliance

  D. From an IBM Open Server to a 2200 Appliance

  Correct Answer: B

• Question 280:

  Fill in the blanks: A ____ license requires an administrator to designate a gateway for attachment whereas a _____ license is automatically attached to a Security Gateway.

  A. Formal; corporate

  B. Local; formal

  C. Local; central

  D. Central; local

  Correct Answer: D

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Installation_and_Upgrade_Guide-webAdmin/13128.htm