CheckPoint 156-215.81.20 Online Practice Questions and Exam Preparation

CheckPoint 156-215.81.20 Online Questions & Answers

• Question 321:

  John Adams is an HR partner in the ACME organization. ACME IT wants to limit access to HR servers to designated IP addresses to minimize malware infection and unauthorized access risks. Thus, the gateway policy permits access only

  from John's desktop which is assigned a static IP address 10.0.0.19.

  John received a laptop and wants to access the HR Web Server from anywhere in the organization. The IT department gave the laptop a static IP address, but that limits him to operating it only from his desk. The current Rule Base contains a

  rule that lets John Adams access the HR Web Server from his desktop with a static IP (10.0.0.19). He wants to move around the organization and continue to have access to the HR Web Server.

  To make this scenario work, the IT administrator:

  1) Enables Identity Awareness on a gateway, selects AD Query as one of the Identity Sources installs the policy.

  2) Adds an access role object to the Firewall Rule Base that lets John Adams PC access the HR Web Server from any machine and from any location.

  3) Changes from static IP address to DHCP for the client PC.

  What should John request when he cannot access the web server from his laptop?

  A. John should lock and unlock his computer
  B. Investigate this as a network connectivity issue
  C. The access should be changed to authenticate the user instead of the PC
  D. John should install the Identity Awareness Agent
  C. The access should be changed to authenticate the user instead of the PC

• Question 322:

  If there is an Accept Implied Policy set to “First”, what is the reason Jorge cannot see any logs?

  A. Track log column is set to Log instead of Full Log.
  B. Log Implied Rule was not selected on Global Properties.
  C. Track log column is set to none.
  D. Log Implied Rule was not set correctly on the track column on the rules base.
  B. Log Implied Rule was not selected on Global Properties.

• Question 323:

  On the following picture an administrator configures Identity Awareness:

  

  After clicking "Next" the above configuration is supported by:

  A. Kerberos SSO which will be working for Active Directory integration
  B. Based on Active Directory integration which allows the Security Gateway to correlate Active Directory users and machines to IP addresses in a method that is completely transparent to the user
  C. Obligatory usage of Captive Portal
  D. The ports 443 or 80 what will be used by Browser-Based and configured Authentication
  B. Based on Active Directory integration which allows the Security Gateway to correlate Active Directory users and machines to IP addresses in a method that is completely transparent to the user

  ---

  Explanation/Reference:

  To enable Identity Awareness:

  1.

  Log in to R80 SmartConsole.

  2.

  From the Gateways and Servers view, double-click the Security Gateway on which to enable Identity Awareness.

  3.

  On the Network Security tab, select Identity Awareness. The Identity Awareness Configuration wizard opens.

  4.

  Select one or more options. These options set the methods for acquiring identities of managed and unmanaged assets. AD Query - Lets the Security Gateway seamlessly identify Active Directory users and computers.

  

  Browser-Based Authentication - Sends users to a Web page to acquire identities from unidentified users. If Transparent Kerberos Authentication is configured, AD users may be identified transparently.

  

  Terminal Servers - Identify users in a Terminal Server environment (originating from one IP address).

  

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80BC_IdentityAwareness/html_frameset.htm?topic=documents/R80/CP_R80BC_IdentityAwareness/62050

• Question 324:

  Fill in the blank: The _________ software blade enables Application Security policies to allow, block, or limit website access based on user, group, and machine identities.

  A. Application Control
  B. Data Awareness
  C. URL Filtering
  D. Threat Emulation
  A. Application Control

• Question 325:

  Which of the following is NOT a valid option when configuring access for Captive Portal?

  A. From the Internet
  B. Through internal interfaces
  C. Through all interfaces
  D. According to the Firewall Policy
  A. From the Internet

• Question 326:

  Administrator Dave logs into R80 Management Server to review and makes some rule changes. He notices that there is a padlock sign next to the DNS rule in the Rule Base.

  

  What is the possible explanation for this?

  A. DNS Rule is using one of the new feature of R80 where an administrator can mark a rule with the padlock icon to let other administrators know it is important.
  B. Another administrator is logged into the Management and currently editing the DNS Rule.
  C. DNS Rule is a placeholder rule for a rule that existed in the past but was deleted.
  D. This is normal behavior in R80 when there are duplicate rules in the Rule Base.
  B. Another administrator is logged into the Management and currently editing the DNS Rule.

• Question 327:

  What are the two high availability modes?

  A. Load Sharing and Legacy
  B. Traditional and New
  C. Active and Standby
  D. New and Legacy
  D. New and Legacy

  ---

  Explanation/Reference:

  ClusterXL has four working modes. This section briefly describes each mode and its relative advantages and disadvantages.

  1.

  Load Sharing Multicast Mode

  2.

  Load Sharing Unicast Mode

  3.

  New High Availability Mode

  4.

  High Availability Legacy Mode

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_ClusterXL_AdminGuide/7292.htm#o7363

• Question 328:

  Fill in the blanks: A Check Point software license consists of a _______ and _______ .

  A. Software container; software package
  B. Software blade; software container
  C. Software package; signature
  D. Signature; software blade
  B. Software blade; software container

  ---

  Explanation/Reference:

  Check Point's licensing is designed to be scalable and modular. To this end, Check Point offers both predefined packages as well as the ability to custom build a solution tailored to the needs of the Network Administrator. This is accomplished by the use of the following license components:

  1.

  Software Blades

  2.

  Container Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk11054

• Question 329:

  Fill in the blanks: A security Policy is created in _________ , stored in the _________ , and Distributed to the various __________ .

  A. Rule base, Security Management Server, Security Gateways
  B. SmartConsole, Security Gateway, Security Management Servers
  C. SmartConsole, Security Management Server, Security Gateways
  D. The Check Point database, SmartConsole, Security Gateways
  C. SmartConsole, Security Management Server, Security Gateways

• Question 330:

  Which of the following actions do NOT take place in IKE Phase 1?

  A. Peers agree on encryption method.
  B. Diffie-Hellman key is combined with the key material to produce the symmetrical IPsec key.
  C. Peers agree on integrity method.
  D. Each side generates a session key from its private key and peer's public key.
  B. Diffie-Hellman key is combined with the key material to produce the symmetrical IPsec key.