CheckPoint Checkpoint Certifications 156-215.81.20 Questions & Answers

• Question 291:

  How do you manage Gaia?

  A. Through CLI and WebUI

  B. Through CLI only

  C. Through SmartDashboard only

  D. Through CLI, WebUI, and SmartDashboard

  Correct Answer: D

• Question 292:

  What licensing feature is used to verify licenses and activate new licenses added to the License and Contracts repository?

  A. Verification tool

  B. Verification licensing

  C. Automatic licensing

  D. Automatic licensing and Verification tool

  Correct Answer: D

• Question 293:

  The "Hit count" feature allows tracking the number of connections that each rule matches. Will the Hit count feature work independently from logging and Track the hits even if the Track option is set to "None"?

  A. No, it will not work independently. Hit Count will be shown only for rules with Track options set as Log or alert

  B. Yes, it will work independently as long as "analyze all rules" tick box is enabled on the Security Gateway

  C. No, it will not work independently because hit count requires all rules to be logged

  D. Yes, it will work independently because when you enable Hit Count, the SMS collects the data from supported Security Gateways

  Correct Answer: D

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm?topic=documents/R80/CP_R80_SecMGMT/126197

• Question 294:

  How many layers make up the TCP/IP model?

  A. 2

  B. 7

  C. 6

  D. 4

  Correct Answer: D

• Question 295:

  In SmartConsole, objects are used to represent physical and virtual network components and also some logical components. These objects are divided into several categories. Which of the following is NOT an objects category?

  A. Limit

  B. Resource

  C. Custom Application / Site

  D. Network Object

  Correct Answer: B

  Reference: https://sc1.checkpoint.com/documents/R80.10/WebAdminGuides/EN/CP_R80.10_SecurityManagement_AdminGuide/html_frameset.htm?topic=documents/R80.10/WebAdminGuides/EN/ CP_R80.10_SecurityManagement_AdminGuide/162005

• Question 296:

  Which of the following is used to enforce changes made to a Rule Base?

  A. Publish database

  B. Save changes

  C. Install policy

  D. Activate policy

  Correct Answer: A

• Question 297:

  What is UserCheck?

  A. Messaging tool user to verify a user's credentials

  B. Communication tool used to inform a user about a website or application they are trying to access

  C. Administrator tool used to monitor users on their network

  D. Communication tool used to notify an administrator when a new user is created

  Correct Answer: B

• Question 298:

  How many users can have read/write access in Gaia at one time?

  A. Infinite

  B. One

  C. Three

  D. Two

  Correct Answer: B

• Question 299:

  Sally has a Hot Fix Accumulator (HFA) she wants to install on her Security Gateway which operates with GAiA, but she cannot SCP the HFA to the system. She can SSH into the Security Gateway, but she has never been able to SCP files to it. What would be the most likely reason she cannot do so?

  A. She needs to edit /etc/SSHd/SSHd_config and add the Standard Mode account.

  B. She needs to run sysconfig and restart the SSH process.

  C. She needs to edit /etc/scpusers and add the Standard Mode account.

  D. She needs to run cpconfig to enable the ability to SCP files.

  Correct Answer: C

• Question 300:

  John Adams is an HR partner in the ACME organization. ACME IT wants to limit access to HR servers to designated IP addresses to minimize malware infection and unauthorized access risks. Thus, gateway policy permits access only from Join's desktop which is assigned an IP address 10.0.0.19 via DHCP.

  John received a laptop and wants to access the HR Web Server from anywhere in the organization. The IT department gave the laptop a static IP address, but the limits him to operating it only from his desk. The current Rule Base contains a

  rule that lets John Adams access the HR Web Server from his laptop. He wants to move around the organization and continue to have access to the HR Web Server.

  To make this scenario work, the IT administrator:

  1) Enables Identity Awareness on a gateway, selects AD Query as one of the Identity Sources.

  2) Adds an access role object to the Firewall Rule Base that lets John Adams PC access the HR Web Server from any machine and from any location.

  John plugged in his laptop to the network on a different network segment and he is not able to connect. How does he solve this problem?

  A. John should install the identity Awareness Agent

  B. The firewall admin should install the Security Policy

  C. John should lock and unlock the computer

  D. Investigate this as a network connectivity issue

  Correct Answer: C