CheckPoint 156-215.81.20 Online Practice Questions and Exam Preparation

CheckPoint 156-215.81.20 Online Questions & Answers

• Question 311:

  Which of the following is a new R80.10 Gateway feature that had not been available in R77.X and older?

  A. The rule base can be built of layers, each containing a set of the security rules. Layers are inspected in the order in which they are defined, allowing control over the rule base flow and which security functionalities take precedence.
  B. Limits the upload and download throughput for streaming media in the company to 1 Gbps.
  C. Time object to a rule to make the rule active only during specified times.
  D. Sub Policies are sets of rules that can be created and attached to specific rules. If the rule is matched, inspection will continue in the sub policy attached to it rather than in the next rule.
  D. Sub Policies are sets of rules that can be created and attached to specific rules. If the rule is matched, inspection will continue in the sub policy attached to it rather than in the next rule.

  ---

  Explanation/Reference:

  Reference: http://dl3.checkpoint.com/paid/1f/1f850d1640792cf885336cc6ae8b2743/CP_R80_ReleaseNotes.pdf?HashKey=1517092603_dd917544d92dccc060e5b25d28a46f79andxtn=.pdf

• Question 312:

  How do you manage Gaia?

  A. Through CLI and WebUI
  B. Through CLI only
  C. Through SmartDashboard only
  D. Through CLI, WebUI, and SmartDashboard
  D. Through CLI, WebUI, and SmartDashboard

• Question 313:

  Consider the Global Properties following settings:

  

  The selected option "Accept Domain Name over UDP (Queries)" means:

  A. UDP Queries will be accepted by the traffic allowed only through interfaces with external anti-spoofing topology and this will be done before first explicit rule written by Administrator in a Security Policy.
  B. All UDP Queries will be accepted by the traffic allowed through all interfaces and this will be done before first explicit rule written by Administrator in a Security Policy.
  C. No UDP Queries will be accepted by the traffic allowed through all interfaces and this will be done before first explicit rule written by Administrator in a Security Policy.
  D. All UDP Queries will be accepted by the traffic allowed by first explicit rule written by Administrator in a Security Policy.
  A. UDP Queries will be accepted by the traffic allowed only through interfaces with external anti-spoofing topology and this will be done before first explicit rule written by Administrator in a Security Policy.

• Question 314:

  What are the two deployment options available for a security gateway?

  A. Bridge and Switch
  B. Local and Remote
  C. Cloud and Router
  D. Standalone and Distributed
  D. Standalone and Distributed

• Question 315:

  In a Distributed deployment, the Security Gateway and the Security Management software are installed on what platforms?

  A. The installation can be done on virtual machines only, but not on appliances and not in mixed environments.
  B. The installation is done on different computers or appliances.
  C. The installation is done on the same computer or appliance.
  D. The installation is allowed in Azure only but not in AWS cloud environments.
  B. The installation is done on different computers or appliances.

• Question 316:

  Which of the following is an authentication method used for Identity Awareness?

  A. SSL
  B. Captive Portal
  C. PKI
  D. RSA
  B. Captive Portal

• Question 317:

  Which command shows the installed licenses?

  A. cplic print
  B. print cplic
  C. fwlic print
  D. show licenses
  A. cplic print

• Question 318:

  Which of the following technologies extracts detailed information from packets and stores that information in state tables?

  A. INSPECT Engine
  B. Next-Generation Firewall
  C. Packet Filtering D. Application Layer Firewall
  B. Next-Generation Firewall

• Question 319:

  To fully enable Dynamic Dispatcher on a Security Gateway:

  A. run fw ctl multik set_mode 9 in Expert mode and then reboot
  B. Using cpconfig, update the Dynamic Dispatcher value to "full" under the CoreXL menu
  C. Edit /proc/interrupts to include multik set_mode 1 at the bottom of the file, save, and reboot
  D. run fw ctl multik set_mode 1 in Expert mode and then reboot
  A. run fw ctl multik set_mode 9 in Expert mode and then reboot

  ---

  Explanation/Reference:

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk105261#Configuration%20R80.10

• Question 320:

  What is the default shell for the command line interface?

  A. Expert
  B. Clish
  C. Admin
  D. Normal
  B. Clish

  ---

  Explanation/Reference:

  The default shell of the CLI is called clish Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Gaia_WebAdmin/75697.htm