CheckPoint 156-215.81.20 Online Practice Questions and Exam Preparation

CheckPoint 156-215.81.20 Online Questions & Answers

• Question 331:

  Bob and Joe both have Administrator Roles on their Gaia Platform. Bob logs in on the WebUI and then Joe logs in through CLI. Choose what BEST describes the following scenario, where Bob and Joe are both logged in:

  A. When Joe logs in, Bob will be log out automatically.
  B. Since they both are log in on different interfaces, they both will be able to make changes.
  C. If Joe tries to make changes, he won't, database will be locked.
  D. Bob will be prompt that Joe logged in.
  C. If Joe tries to make changes, he won't, database will be locked.

• Question 332:

  Fill in the blank: The IPS policy for pre-R80 gateways is installed during the _______ .

  A. Firewall policy install
  B. Threat Prevention policy install
  C. Anti-bot policy install
  D. Access Control policy install
  B. Threat Prevention policy install

  ---

  Explanation/Reference:

  https://sc1.checkpoint.com/documents/R80/CP_R80BC_ThreatPrevention/html_frameset.htm?topic=documents/R80/CP_R80BC_ThreatPrevention/136486

• Question 333:

  What Check Point tool is used to automatically update Check Point products for the Gaia OS?

  A. Check Point INSPECT Engine
  B. Check Point Upgrade Service Engine
  C. Check Point Update Engine
  D. Check Point Upgrade Installation Service
  B. Check Point Upgrade Service Engine

  ---

  Explanation/Reference:

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_Gaia_Installation_and_Upgrade_Guide/html_frameset.htm?topic=documents/R77/CP_R77_Gaia_Installation_and_Upgrade_Guide/129978

• Question 334:

  You have just installed your Gateway and want to analyze the packet size distribution of your traffic with SmartView Monitor.

  

  Unfortunately, you get the message:

  "There are no machines that contain Firewall Blade and SmartView Monitor".

  What should you do to analyze the packet size distribution of your traffic? Give the BEST answer.

  

  A. Purchase the SmartView Monitor license for your Security Management Server.
  B. Enable Monitoring on your Security Management Server.
  C. Purchase the SmartView Monitor license for your Security Gateway.
  D. Enable Monitoring on your Security Gateway.
  D. Enable Monitoring on your Security Gateway.

• Question 335:

  Which one of the following is true about Threat Extraction?

  A. Always delivers a file to user
  B. Works on all MS Office, Executables, and PDF files
  C. Can take up to 3 minutes to complete
  D. Delivers file only if no threats found
  B. Works on all MS Office, Executables, and PDF files

• Question 336:

  Fill in the blank: The __________ is used to obtain identification and security information about network users.

  A. User Directory
  B. User server
  C. UserCheck
  D. User index
  A. User Directory

  ---

  Explanation/Reference:

  Reference: https://www.checkpoint.com/downloads/product-related/datasheets/DS_UserDirectorySWB.pdf

• Question 337:

  Which of the following statements is TRUE about R80 management plug-ins?

  A. The plug-in is a package installed on the Security Gateway.
  B. Installing a management plug-in requires a Snapshot, just like any upgrade process.
  C. A management plug-in interacts with a Security Management Server to provide new features and support for new products.
  D. Using a plug-in offers full central management only if special licensing is applied to specific features of the plug-in.
  C. A management plug-in interacts with a Security Management Server to provide new features and support for new products.

• Question 338:

  How Capsule Connect and Capsule Workspace differ?

  A. Capsule Connect provides a Layer3 VPN. Capsule Workspace provides a Desktop with usable applications
  B. Capsule Workspace can provide access to any application
  C. Capsule Connect provides Business data isolation D. Capsule Connect does not require an installed application at client
  A. Capsule Connect provides a Layer3 VPN. Capsule Workspace provides a Desktop with usable applications

• Question 339:

  Two administrators Dave and Jon both manage R80 Management as administrators for ABC Corp. Jon logged into the R80 Management and then shortly after Dave logged in to the same server. They are both in the Security Policies view. From the screenshots below, why does Dave not have the rule no.6 in his SmartConsole view even though Jon has it his in his SmartConsole view?

  

  A. Jon is currently editing rule no.6 but has Published part of his changes.
  B. Dave is currently editing rule no.6 and has marked this rule for deletion.
  C. Dave is currently editing rule no.6 and has deleted it from his Rule Base.
  D. Jon is currently editing rule no.6 but has not yet Published his changes.
  D. Jon is currently editing rule no.6 but has not yet Published his changes.

  ---

  Explanation/Reference:

  When an administrator logs in to the Security Management Server through SmartConsole, a new editing session starts. The changes that the administrator makes during the session are only available to that administrator. Other administrators see a lock icon on object and rules that are being edited. To make changes available to all administrators, and to unlock the objects and rules that are being edited, the administrator must publish the session.

  Reference: http://dl3.checkpoint.com/paid/74/74d596decb6071a4ee642fbdaae7238f/CP_R80_SecurityManagement_AdminGuide.pdf?HashKey=1479584563_6f823c8ea1514609148aa4fec5425db2andxtn=.pdf

• Question 340:

  You are about to integrate RSA SecurID users into the Check Point infrastructure. What kind of users are to be defined via SmartDashboard?

  A. A group with generic user
  B. All users
  C. LDAP Account Unit Group
  D. Internal user Group
  A. A group with generic user