CheckPoint 156-215.81.20 Online Practice Questions and Exam Preparation

CheckPoint 156-215.81.20 Online Questions & Answers

• Question 21:

  Match the following commands to their correct function. Each command has one function only listed.

  

  A. C1>F6; C2>F4; C3>F2; C4>F5
  B. C1>F2; C2>F1; C3>F6; C4>F4
  C. C1>F2; C2>F4; C3>F1; C4>F5
  D. C1>F4; C2>F6; C3>F3; C4>F5
  A. C1>F6; C2>F4; C3>F2; C4>F5

• Question 22:

  What is the Transport layer of the TCP/IP model responsible for?

  A. It transports packets as datagrams along different routes to reach their destination.
  B. It manages the flow of data between two hosts to ensure that the packets are correctly assembled and delivered to the target application.
  C. It defines the protocols that are used to exchange data between networks and how host programs interact with the Application layer.
  D. It deals with all aspects of the physical components of network connectivity and connects with different network types.
  B. It manages the flow of data between two hosts to ensure that the packets are correctly assembled and delivered to the target application.

• Question 23:

  What is a role of Publishing?

  A. The Publish operation sends the modifications made via SmartConsole in the private session and makes them public
  B. The Security Management Server installs the updated policy and the entire database on Security Gateways
  C. The Security Management Server installs the updated session and the entire Rule Base on Security Gateways
  D. Modifies network objects, such as servers, users, services, or IPS profiles, but not the Rule Base
  A. The Publish operation sends the modifications made via SmartConsole in the private session and makes them public

  ---

  Explanation/Reference:

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm?topic=documents/R80/CP_R80_SecMGMT/119225

• Question 24:

  Fill in the blank: Once a certificate is revoked from the Security GateWay by the Security Management Server, the certificate information is _______.

  A. Sent to the Internal Certificate Authority.
  B. Sent to the Security Administrator.
  C. Stored on the Security Management Server.
  D. Stored on the Certificate Revocation List.
  D. Stored on the Certificate Revocation List.

• Question 25:

  How would you determine the software version from the CLI?

  A. fw ver
  B. fw stat
  C. fw monitor
  D. cpinfo
  A. fw ver

• Question 26:

  By default, which port is used to connect to the GAiA Portal?

  A. 4434
  B. 80
  C. 8080
  D. 443
  D. 443

• Question 27:

  Which option in tracking allows you to see the amount of data passed in the connection?

  A. Advanced
  B. Accounting
  C. Data
  D. Logs
  B. Accounting

• Question 28:

  Which of the following is NOT a license activation method?

  A. SmartConsole Wizard
  B. Online Activation
  C. License Activation Wizard
  D. Offline Activation
  A. SmartConsole Wizard

• Question 29:

  What is the BEST method to deploy Identity Awareness for roaming users?

  A. Use Office Mode
  B. Use identity agents
  C. Share user identities between gateways
  D. Use captive portal
  B. Use identity agents

  ---

  Explanation/Reference:

  Using Endpoint Identity Agents give you:

  1.

  User and machine identity

  2.

  Minimal user intervention ?all necessary configuration is done by administrators and does not require user input.

  3.

  Seamless connectivity ?transparent authentication using Kerberos Single Sign-On (SSO) when users are logged in to the domain. If you do not want to use SSO, users enter their credentials manually. You can let them save these credentials.

  4.

  Connectivity through roaming ?users stay automatically identified when they move between networks, as the client detects the movement and reconnects.

  Reference: https://www.checkpoint.com/products/identity-awareness-software-blade/

• Question 30:

  What are the three types of UserCheck messages?

  A. ask, block, and notify
  B. block, action, and warn
  C. action, inform, and ask
  D. inform, ask, and drop
  D. inform, ask, and drop