CheckPoint 156-215.81.20 Online Practice Questions and Exam Preparation

CheckPoint 156-215.81.20 Online Questions & Answers

• Question 361:

  Which tool is used to enable cluster membership on a Gateway?

  A. SmartUpdate
  B. cpconfig
  C. SmartConsole
  D. sysconfig
  B. cpconfig

  ---

  Explanation/Reference:

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_ClusterXL_WebAdminGuide/html_frameset.htm?topic=documents/R77/CP_R77_ClusterXL_WebAdminGuide/161105

• Question 362:

  To enforce the Security Policy correctly, a Security Gateway requires:

  A. a routing table
  B. that each Security Gateway enforces at least one rule
  C. a Demilitarized Zone
  D. a Security Policy install
  B. that each Security Gateway enforces at least one rule

• Question 363:

  Which utility shows the security gateway general system information statistics like operating system information and resource usage, and individual software blade statistics of VPN, Identity Awareness and DLP?

  A. cpconfig
  B. fw ctl pstat
  C. cpview
  D. fw ctl multik stat
  C. cpview

  ---

  Explanation/Reference:

  CPView Utility is a text based built-in utility that can be run ('cpview' command) on Security Gateway / Security Management Server / Multi-Domain Security Management Server. CPView Utility shows statistical data that contain both general system information (CPU, Memory, Disk space) and information for different Software Blades (only on Security Gateway). The data is continuously updated in easy to access views. Reference: https://supportcenter.checkpoint.com/ supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk101878

• Question 364:

  You are the administrator for Alpha Corp. You have logged into your R80 Management server. You are making some changes in the Rule Base and notice that rule No.6 has a pencil icon next to it.

  

  What does this mean?

  A. The rule No.6 has been marked for deletion in your Management session.
  B. The rule No.6 has been marked for deletion in another Management session.
  C. The rule No.6 has been marked for editing in your Management session.
  D. The rule No.6 has been marked for editing in another Management session.
  C. The rule No.6 has been marked for editing in your Management session.

• Question 365:

  What is UserCheck?

  A. Messaging tool user to verify a user's credentials
  B. Communication tool used to inform a user about a website or application they are trying to access
  C. Administrator tool used to monitor users on their network
  D. Communication tool used to notify an administrator when a new user is created
  B. Communication tool used to inform a user about a website or application they are trying to access

• Question 366:

  Which of the following is NOT a valid deployment option for R80?

  A. All-in-one (stand-alone)
  B. Log server
  C. SmartEvent
  D. Multi-domain management server
  D. Multi-domain management server

• Question 367:

  The CPD daemon is a Firewall Kernel Process that does NOT do which of the following?

  A. Secure Internal Communication (SIC)
  B. Restart Daemons if they fail
  C. Transfer messages between Firewall processes
  D. Pulls application monitoring status
  D. Pulls application monitoring status

  ---

  Explanation/Reference:

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk97638

• Question 368:

  In the R80 SmartConsole, on which tab are Permissions and Administrators defined?

  A. Security Policies
  B. Logs and Monitor
  C. Manage and Settings
  D. Gateway and Servers
  C. Manage and Settings

• Question 369:

  Fill in the blank: To build an effective Security Policy, use a ________ and _______ rule.

  A. Cleanup; stealth
  B. Stealth; implicit
  C. Cleanup; default
  D. Implicit; explicit
  A. Cleanup; stealth

• Question 370:

  You have enabled "Full Log" as a tracking option to a security rule. However, you are still not seeing any data type information. What is the MOST likely reason?

  A. Logging has disk space issues. Change logging storage options on the logging server or Security Management Server properties and install database.
  B. Data Awareness is not enabled.
  C. Identity Awareness is not enabled.
  D. Logs are arriving from Pre-R80 gateways.
  A. Logging has disk space issues. Change logging storage options on the logging server or Security Management Server properties and install database.

  ---

  Explanation/Reference:

  The most likely reason for the logs data to stop is the low disk space on the logging device, which can be the Management Server or the Gateway Server.