CheckPoint 156-215.81.20 Online Practice Questions and Exam Preparation

CheckPoint 156-215.81.20 Online Questions & Answers

• Question 281:

  Fill in the blanks: In _____ NAT, Only the _____ is translated.

  A. Hide; source
  B. Simple; source
  C. Static; source
  D. Hide; destination
  A. Hide; source

• Question 282:

  Phase 1 of the two-phase negotiation process conducted by IKE operates in ______ mode.

  A. Main
  B. Authentication
  C. Quick
  D. High Alert
  A. Main

  ---

  Explanation/Reference:

  Phase I modes

  Between Security Gateways, there are two modes for IKE phase I. These modes only apply to IKEv1:

  1.

  Main Mode

  2.

  Aggressive Mode

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_VPN_AdminGuide/13847.htm

• Question 283:

  When URL Filtering is set, what identifying data gets sent to the Check Point Online Web Service?

  A. The full URL, including page data, is sent to the Check Point Online Web Service.
  B. The URL and IP address are sent to the Check Point Online Web Service.
  C. The host part of the URL is sent to the Check Point Online Web Service.
  D. The URL and server certificate are sent to the Check Point Online Web Service.
  C. The host part of the URL is sent to the Check Point Online Web Service.

• Question 284:

  When you upload a package or license to the appropriate repository in SmartUpdate, where is the package or license stored

  A. Security Gateway
  B. Check Point user center
  C. Security Management Server
  D. SmartConsole installed device
  C. Security Management Server

  ---

  Explanation/Reference:

  SmartUpdate installs two repositories on the Security Management server:

  1.

  License and Contract Repository, which is stored on all platforms in the directory $FWDIR\conf\.

  2.

  Package Repository, which is stored:

  - on Windows machines in C:\SUroot.

  - on UNIX machines in /var/suroot.

  The Package Repository requires a separate license, in addition to the license for the Security Management server. This license should stipulate the number of nodes that can be managed in the Package Repository.

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Installation_and_Upgrade_Guide-webAdmin/13128.htm#o13527

• Question 285:

  True or False: In a Distributed Environment, a Central License can be installed via CLI on a Security Gateway.

  A. True, Central Licenses can be installed with CPLIC command on a Security Gateway
  B. True, CLI is the preferred method for Licensing
  C. False, Central Licenses are installed via Gaia on Security Gateways
  D. False, Central Licenses are handled via Security Management Server
  D. False, Central Licenses are handled via Security Management Server

• Question 286:

  To quickly review when Threat Prevention signatures were last updated, which Threat Tool would an administrator use?

  A. Protections
  B. IPS Protections
  C. Profiles
  D. ThreatWiki
  B. IPS Protections

• Question 287:

  Which of the following is NOT a policy type available for each policy package?

  A. Threat Emulation
  B. Access Control
  C. Desktop Security
  D. Threat Prevention
  A. Threat Emulation

  ---

  Explanation/Reference:

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm?topic=documents/R80/CP_R80_SecMGMT/119225

• Question 288:

  How can the changes made by an administrator before publishing the session be seen by a superuser administrator?

  A. By impersonating the administrator with the `Login as...' option
  B. They cannot be seen
  C. From the SmartView Tracker audit log
  D. From Manage and Settings > Sessions, right click on the session and click `View Changes...'
  C. From the SmartView Tracker audit log

• Question 289:

  According to Check Point Best Practice, when adding a non-managed Check Point Gateway to a Check Point security solution what object SHOULD be added? A(n):

  A. Gateway
  B. Interoperable Device
  C. Externally managed gateway
  D. Network Node
  C. Externally managed gateway

• Question 290:

  What are the three main components of Check Point security management architecture?

  A. Smart Console, Standalone, Security Management Server
  B. Policy-Client, Security Management Server, Security Gateway
  C. SmartConsole, Security Policy Server, Logs and Monitoring
  D. SmartConsole, Security Management Server, Security Gateway
  D. SmartConsole, Security Management Server, Security Gateway