CheckPoint 156-215.81.20 Online Practice Questions and Exam Preparation

CheckPoint 156-215.81.20 Online Questions & Answers

• Question 301:

  The ______ software blade package uses CPU-level and OS-level sandboxing in order to detect and block malware.

  A. Next Generation Threat Prevention
  B. Next Generation Threat Emulation
  C. Next Generation Threat Extraction
  D. Next Generation Firewall
  B. Next Generation Threat Emulation

• Question 302:

  Your manager requires you to setup a VPN to a new business partner site. The administrator from the partner site gives you his VPN settings and you notice that he setup AES 128 for IKE phase 1 and AES 256 for IKE phase 2. Why is this a problematic setup?

  A. The two algorithms do not have the same key length and so don't work together. You will get the error ... No proposal chosen...
  B. All is fine as the longest key length has been chosen for encrypting the data and a shorter key length for higher performance for setting up the tunnel.
  C. Only 128 bit keys are used for phase 1 keys which are protecting phase 2, so the longer key length in phase 2 only costs performance and does not add security due to a shorter key in phase 1.
  D. All is fine and can be used as is.
  C. Only 128 bit keys are used for phase 1 keys which are protecting phase 2, so the longer key length in phase 2 only costs performance and does not add security due to a shorter key in phase 1.

• Question 303:

  When a Security Gateway sends its logs to an IP address other than its own, which deployment option is installed?

  A. Distributed
  B. Standalone
  C. Bridge Mode
  D. Targeted
  A. Distributed

  ---

  Explanation/Reference:

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Installation_and_Upgrade_Guide-webAdmin/86429.htm

• Question 304:

  Which remote Access Solution is clientless?

  A. Checkpoint Mobile
  B. Endpoint Security Suite
  C. SecuRemote
  D. Mobile Access Portal
  D. Mobile Access Portal

  ---

  Explanation/Reference:

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_Firewall_WebAdmin/92708.htm

• Question 305:

  If the first packet of an UDP session is rejected by a security policy, what does the firewall send to the client?

  A. Nothing
  B. TCP FIN
  C. TCP RST
  D. ICMP unreachable
  A. Nothing

• Question 306:

  Which is a main component of the Check Point security management architecture?

  A. Proxy Server
  B. Endpoint VPN client
  C. Identity Collector
  D. SmartConsole
  D. SmartConsole

• Question 307:

  Which of the following uses the same key to decrypt as it does to encrypt?

  A. Asymmetric encryption
  B. Dynamic encryption
  C. Certificate-based encryption
  D. Symmetric encryption
  D. Symmetric encryption

• Question 308:

  Using the SmartConsole, which pre-defined Permission Profile should be assigned to an administrator that requires full access to audit all configurations without modifying them?

  A. Read Only All
  B. Full Access
  C. Editor
  D. Super User
  A. Read Only All

• Question 309:

  The "Hit count" feature allows tracking the number of connections that each rule matches. Will the Hit count feature work independently from logging and Track the hits even if the Track option is set to "None"?

  A. No, it will not work independently. Hit Count will be shown only for rules with Track options set as Log or alert
  B. Yes, it will work independently as long as "analyze all rules" tick box is enabled on the Security Gateway
  C. No, it will not work independently because hit count requires all rules to be logged
  D. Yes, it will work independently because when you enable Hit Count, the SMS collects the data from supported Security Gateways
  D. Yes, it will work independently because when you enable Hit Count, the SMS collects the data from supported Security Gateways

  ---

  Explanation/Reference:

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm?topic=documents/R80/CP_R80_SecMGMT/126197

• Question 310:

  Which Check Point software blade monitors Check Point devices and provides a picture of network and security performance?

  A. Logging and Status
  B. Monitoring
  C. Threat Emulation
  D. Application Control
  B. Monitoring