CheckPoint 156-215.81.20 Online Practice Questions and Exam Preparation

CheckPoint 156-215.81.20 Online Questions & Answers

• Question 291:

  Jack works for a managed service provider and he has been tasked to create 17 new policies for several new customers. He does not have much time. What is the BEST way to do this with R80 security management?

  A. Create a text-file with mgmt_cli script that creates all objects and policies. Open the file in SmartConsole Command Line to run it.
  B. Create a text-file with Gaia CLI -commands in order to create all objects and policies. Run the file in CLISH with command load configuration.
  C. Create a text-file with DBEDIT script that creates all objects and policies. Run the file in the command line of the management server using command dbedit -f.
  D. Use Object Explorer in SmartConsole to create the objects and Manage Policies from the menu to create the policies.
  A. Create a text-file with mgmt_cli script that creates all objects and policies. Open the file in SmartConsole Command Line to run it.

  ---

  Explanation/Reference:

  Did you know: mgmt_cli can accept csv files as inputs using the --batch option.

  The first row should contain the argument names and the rows below it should hold the values for these parameters.

  So an equivalent solution to the powershell script could look like this:

  data.csv:

  

  mgmt_cli add host --batch data.csv -u -p -m

  This can work with any type of command not just "add host" : simply replace the column names with the ones relevant to the command you need.

  Reference: https://community.checkpoint.com/thread/1342

  https://sc1.checkpoint.com/documents/R80/APIs/#gui-cli/add-access-rule

• Question 292:

  Which application should you use to install a contract file?

  A. SmartView Monitor
  B. WebUI
  C. SmartUpdate
  D. SmartProvisioning
  C. SmartUpdate

  ---

  Explanation/Reference:

  Using SmartUpdate: If you already use an NGX R65 (or higher) Security Management / Provider-1 / Multi-Domain Management Server, SmartUpdate allows you to import the service contract file that you have downloaded in Step #3. Open SmartUpdate and from the Launch Menu select 'Licenses and Contracts' -> 'Update Contracts' -> 'From File...' and provide the path to the file you have downloaded in Step #3:

  

  Note: If SmartUpdate is connected to the Internet, you can download the service contract file directly from the UserCenter without going through the download and import steps. Reference: https://supportcenter.checkpoint.com/supportcenter/ portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk33089

• Question 293:

  Which of the following is NOT a tracking log option in R81.x?

  A. Full Log
  B. Log
  C. Detailed Log
  D. Extended Log
  A. Full Log

• Question 294:

  Fill in the blanks: The _________ collects logs and sends them to the _________ .

  A. Log server; security management server
  B. Log server; Security Gateway
  C. Security management server; Security Gateway
  D. Security Gateways; log server
  D. Security Gateways; log server

• Question 295:

  To ensure that VMAC mode is enabled, which CLI command you should run on all cluster members? Choose the best answer.

  A. fw ctl set int fwha vmac global param enabled
  B. fw ctl get int fwha vmac global param enabled; result of command should return value 1
  C. cphaprob 璦 if
  D. fw ctl get int fwha_vmac_global_param_enabled; result of command should return value 1
  B. fw ctl get int fwha vmac global param enabled; result of command should return value 1

  ---

  Explanation/Reference:

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_ClusterXL_AdminGuide/7292.htm

• Question 296:

  John is the administrator of a R80 Security Management server managing r R77.30 Check Point Security Gateway. John is currently updating the network objects and amending the rules using SmartConsole. To make John's changes available to other administrators, and to save the database before installing a policy, what must John do?

  A. Logout of the session
  B. File > Save
  C. Install database
  D. Publish the session
  D. Publish the session

  ---

  Explanation/Reference:

  Installing and Publishing

  It is important to understand the differences between publishing and installing.

  You must do this: After you did this:

  Publish Opened a session in SmartConsole and made changes.

  The Publish operation sends all SmartConsole modifications to other

  administrators, and makes the changes you made in a private session

  public.

  Install the database Modified network objects, such as servers, users, services, or IPS

  profiles, but not the Rule Base.

  Updates are installed on management servers and log servers.

  Install a policy Changed the Rule Base.

  The Security Management Server installs the updated policy and the

  entire database on Security Gateways (even if you did not modify any

  network objects).

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm?topic=documents/R80/CP_R80_SecMGMT/119225

• Question 297:

  What does ExternalZone represent in the presented rule?

  

  A. The Internet.
  B. Interfaces that administrator has defined to be part of External Security Zone.
  C. External interfaces on all security gateways.
  D. External interfaces of specific gateways.
  B. Interfaces that administrator has defined to be part of External Security Zone.

  ---

  Explanation/Reference:

  Configuring Interfaces

  Configure the Security Gateway 80 interfaces in the Interfaces tab in the Security Gateway window.

  To configure the interfaces:

  1.

  From the Devices window, double-click the Security Gateway 80. The Security Gateway window opens.

  2.

  Select the Interfaces tab.

  3.

  Select Use the following settings. The interface settings open.

  4.

  Select the interface and click Edit. The Edit window opens.

  5.

  From the IP Assignment section, configure the IP address of the interface:

  1.

  Select Static IP.

  2.

  Enter the IP address and subnet mask for the interface.

  6. In Security Zone, select Wireless, DMS, External, or Internal. Security zone is a type of zone, created by a bridge to easily create segments, while maintaining IP addresses and router configurations. Security zones let you choose if to enable or not the firewall between segments.

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_SmartProvisioning_WebAdmin/16741.htm

• Question 298:

  Fill in the blank: When a policy package is installed, ________ are also distributed to the target installation Security Gateways.

  A. User and objects databases
  B. Network databases
  C. SmartConsole databases
  D. User databases
  A. User and objects databases

  ---

  Explanation/Reference:

  A policy package is a collection of different types of policies. After installation, the Security Gateway enforces all the policies in the package. A policy package can have one or more of these policy types: Access Control - consists of these types of rules:

  -Firewall

  -NAT

  -Application Control and URL Filtering

  -Data Awareness

  QoS

  Desktop Security - the Firewall policy for endpoint computers that have the Endpoint Security VPN remote access client installed as a standalone client.

  Threat Prevention - consists of:

  -IPS - IPS protections continually updated by IPS Services

  -

  Anti-Bot - Detects bot-infected machines, prevents bot damage by blocking bot commands and Control (CandC) communications

  -

  Anti-Virus - Includes heuristic analysis, stops viruses, worms, and other malware at the gateway

  -

  Threat Emulation - detects zero-day and advanced polymorphic attacks by opening suspicious files in a sandbox

  The installation process:

  Runs a heuristic verification on rules to make sure they are consistent and that there are no redundant rules.

  If there are verification errors, the policy is not installed. If there are verification warnings (for example, if anti-spoofing is not enabled for a Security Gateway with multiple interfaces), the policy package is installed with a warning. Makes sure

  that each of the Security Gateways enforces at least one of the rules. If none of the rules are enforced, the default drop rule is enforced.

  Distributes the user database and object database to the selected installation targets.

  Reference:

  https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm?topic=documents/R80/CP_R80_SecMGMT/119225

• Question 299:

  By default, which port does the WebUI listen on?

  A. 80
  B. 4434 C. 443
  D. 8080
  C

  ---

  Explanation/Reference:

  To configure Security Management Server on Gaia:

  Open a browser to the WebUI: https://

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_Gaia_IUG/html_frameset.htm?topic=documents/R80/CP_R80_Gaia_IUG/132120

• Question 300:

  What is the appropriate default Gaia Portal address?

  A. HTTP://[IPADDRESS]
  B. HTTPS://[IPADDRESS]:8080
  C. HTTPS://[IPADDRESS]:4434
  D. HTTPS://[IPADDRESS]
  D. HTTPS://[IPADDRESS]