CheckPoint Checkpoint Certifications 156-215.81.20 Questions & Answers

• Question 281:

  Which of the following is NOT a valid configuration screen of an Access Role Object?

  A. Users

  B. Networks

  C. Time

  D. Machines

  Correct Answer: C

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_IdentityAwareness_AdminGuide/62050.htm

• Question 282:

  What is the purpose of the Stealth Rule?

  A. To prevent users from directly connecting to a Security Gateway.

  B. To reduce the number of rules in the database.

  C. To reduce the amount of logs for performance issues.

  D. To hide the gateway from the Internet.

  Correct Answer: A

  Reference: http://www.pearsonitcertification.com/articles/article.aspx?p=387728andseqNum=3

• Question 283:

  What key is used to save the current CPView page in a filename format cpview_"cpview process ID". cap"number of captures"?

  A. S

  B. W

  C. C

  D. Space bar

  Correct Answer: C

  Reference: https://sc1.checkpoint.com/documents/R80.20_GA/WebAdminGuides/EN/CP_R80.20_SecurityManagement_AdminGuide/html_frameset.htm?topic=documents/R80.20_GA/WebAdminGuides/EN/ CP_R80.20_SecurityManagement_AdminGuide/204685

• Question 284:

  Fill in the blank: It is Best Practice to have a _____ rule at the end of each policy layer.

  A. Explicit Drop

  B. Implied Drop

  C. Explicit CleanUp

  D. Implicit Drop

  Correct Answer: C

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_SmartDashboard_OLH/html_frameset.htm?topic=documents/R80/CP_R80_SmartDashboard_OLH/NFHf4E9NLQBJlVkHRpc16w2

• Question 285:

  When defining group-based access in an LDAP environment with Identity Awareness, what is the BEST object type to represent an LDAP group in a Security Policy?

  A. Access Role

  B. User Group

  C. SmartDirectory Group

  D. Group Template

  Correct Answer: A

• Question 286:

  The ______ software blade package uses CPU-level and OS-level sandboxing in order to detect and block malware.

  A. Next Generation Threat Prevention

  B. Next Generation Threat Emulation

  C. Next Generation Threat Extraction

  D. Next Generation Firewall

  Correct Answer: B

• Question 287:

  Fill in the blank: Once a certificate is revoked from the Security GateWay by the Security Management Server, the certificate information is _______.

  A. Sent to the Internal Certificate Authority.

  B. Sent to the Security Administrator.

  C. Stored on the Security Management Server.

  D. Stored on the Certificate Revocation List.

  Correct Answer: D

• Question 288:

  Which type of attack can a firewall NOT prevent?

  A. Network Bandwidth Saturation

  B. Buffer Overflow

  C. SYN Flood

  D. SQL Injection

  Correct Answer: A

• Question 289:

  R80 is supported by which of the following operating systems: A. Windows only

  B. Gaia only

  C. Gaia, SecurePlatform, and Windows

  D. SecurePlatform only

  Correct Answer: B

  Reference: https://community.checkpoint.com/t5/General-Management-Topics/R80-x-FAQ/td-p/39994

• Question 290:

  What Check Point technologies deny or permit network traffic?

  A. Application Control, DLP

  B. Packet Filtering, Stateful Inspection, Application Layer Firewall.

  C. ACL, SandBlast, MPT

  D. IPS, Mobile Threat Protection

  Correct Answer: B