CheckPoint 156-215.81.20 Online Practice Questions and Exam Preparation

CheckPoint 156-215.81.20 Online Questions & Answers

• Question 341:

  What is the potential downside or drawback to choosing the Standalone deployment option instead of the Distributed deployment option?

  A. degrades performance as the Security Policy grows in size
  B. requires additional Check Point appliances
  C. requires additional software subscription
  D. increases cost
  A. degrades performance as the Security Policy grows in size

• Question 342:

  Which message indicates IKE Phase 2 has completed successfully?

  A. Quick Mode Complete
  B. Aggressive Mode Complete
  C. Main Mode Complete
  D. IKE Mode Complete
  A. Quick Mode Complete

• Question 343:

  Due to high CPU workload on the Security Gateway, the security administrator decided to purchase a new multicore CPU to replace the existing single core CPU. After installation, is the administrator required to perform any additional tasks?

  A. Go to clash-Run cpstop | Run cpstart
  B. Go to clash-Run cpconfig | Configure CoreXL to make use of the additional Cores | Exit cpconfig | Reboot Security Gateway
  C. Administrator does not need to perform any task. Check Point will make use of the newly installed CPU and Cores
  D. Go to clash-Run cpconfig | Configure CoreXL to make use of the additional Cores | Exit cpconfig | Reboot Security Gateway | Install Security Policy
  B. Go to clash-Run cpconfig | Configure CoreXL to make use of the additional Cores | Exit cpconfig | Reboot Security Gateway

• Question 344:

  Which command shows the installed licenses in Expert mode?

  A. show licenses
  B. fwlic print
  C. cplic print
  D. print cplic
  C. cplic print

• Question 345:

  What default layers are included when creating a new policy layer?

  A. Application Control, URL Filtering and Threat Prevention
  B. Firewall, Application Control and IPSec VPN
  C. Firewall, Application Control and IPS
  D. Access Control, Threat Prevention and HTTPS Inspection
  D. Access Control, Threat Prevention and HTTPS Inspection

• Question 346:

  Fill in the blank: RADIUS Accounting gets ______ data from requests generated by the accounting client

  A. Destination
  B. Identity
  C. Payload
  D. Location
  B. Identity

  ---

  Explanation/Reference:

  How RADIUS Accounting Works with Identity Awareness RADIUS Accounting gets identity data from RADIUS Accounting Requests generated by the RADIUS accounting client. Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_IdentityAwareness_WebAdminGuide/html_frameset.htm?topic=documents/R77/CP_R77_IdentityAwareness_WebAdminGuide/62050

• Question 347:

  Which the following type of authentication on Mobile Access can NOT be used as the first authentication method?

  A. Dynamic ID
  B. RADIUS
  C. Username and Password
  D. Certificate
  A. Dynamic ID

  ---

  Explanation/Reference:

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_Mobile_Access_WebAdmin/41587.htm

• Question 348:

  You have discovered suspicious activity in your network. What is the BEST immediate action to take?

  A. Create a policy rule to block the traffic.
  B. Create a suspicious action rule to block that traffic.
  C. Wait until traffic has been identified before making any changes.
  D. Contact ISP to block the traffic.
  B. Create a suspicious action rule to block that traffic.

  ---

  Explanation/Reference:

  Reference: https://sc1.checkpoint.com/documents/R80.10/WebAdminGuides/EN/CP_R80.10_LoggingAndMonitoring_AdminGuide/html_frameset.htm?topic=documents/R80.10/WebAdminGuides/EN/ CP_R80.10_LoggingAndMonitoring_AdminGuide/118300

• Question 349:

  What happens if the identity of a user is known?

  A. If the user credentials do not match an Access Role, the traffic is automatically dropped.
  B. If the user credentials do not match an Access Role, the system displays a sandbox.
  C. If the user credentials do not match an Access Role, the gateway moves onto the next rule.
  D. If the user credentials do not match an Access Role, the system displays the Captive Portal.
  C. If the user credentials do not match an Access Role, the gateway moves onto the next rule.

• Question 350:

  Which directory holds the SmartLog index files by default?

  A. $SMARTLOGDIR/data
  B. $SMARTLOG/dir
  C. $FWDIR/smartlog
  D. $FWDIR/log
  A. $SMARTLOGDIR/data