CheckPoint 156-215.81.20 Online Practice Questions and Exam Preparation

CheckPoint 156-215.81.20 Online Questions & Answers

• Question 371:

  Which Check Point feature enables application scanning and the detection?

  A. Application Dictionary
  B. AppWiki
  C. Application Library
  D. CPApp
  B. AppWiki

  ---

  Explanation/Reference:

  AppWiki Application Classification Library

  AppWiki enables application scanning and detection of more than 5,000 distinct applications and over 300,000 Web 2.0 widgets including instant messaging, social networking, video streaming, VoIP, games and more.

  Reference: https://www.checkpoint.com/products/application-control-software-blade/

• Question 372:

  What is the default shell of Gaia CLI?

  A. Monitor
  B. CLI.sh
  C. Read-only
  D. Bash
  B. CLI.sh

  ---

  Explanation/Reference:

  This chapter gives an introduction to the Gaia command line interface (CLI).

  The default shell of the CLI is called clish.

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Gaia_WebAdmin/75697.htm

• Question 373:

  Which type of Check Point license is tied to the IP address of a specific Security Gateway and cannot be transferred to a gateway that has a different IP address?

  A. Formal
  B. Central
  C. Local
  D. Corporate
  C. Local

• Question 374:

  Examine the sample Rule Base.

  

  What will be the result of a verification of the policy from SmartConsole?

  A. No errors or Warnings
  B. Verification Error. Empty Source-List in Rule 5 (Mail Inbound) C. Verification Error. Rule 4 (Web Inbound) hides Rule 6 (Webmaster access)
  D. Verification Error. Rule 7 (Clean-Up Rule) hides Implicit Clean-up Rule
  C

• Question 375:

  Fill in the blank: The R80 utility fw monitor is used to troubleshoot _____________

  A. User data base corruption
  B. LDAP conflicts
  C. Traffic issues
  D. Phase two key negotiation
  C. Traffic issues

  ---

  Explanation/Reference:

  Check Point's FW Monitor is a powerful built-in tool for capturing network traffic at the packet level. The FW Monitor utility captures network packets at multiple capture points along the FireWall inspection chains. These captured packets can be inspected later using the WireShark

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk30583

• Question 376:

  In SmartConsole, objects are used to represent physical and virtual network components and also some logical components. These objects are divided into several categories. Which of the following is NOT an objects category?

  A. Limit
  B. Resource
  C. Custom Application / Site
  D. Network Object
  B. Resource

  ---

  Explanation/Reference:

  Reference: https://sc1.checkpoint.com/documents/R80.10/WebAdminGuides/EN/CP_R80.10_SecurityManagement_AdminGuide/html_frameset.htm?topic=documents/R80.10/WebAdminGuides/EN/

  CP_R80.10_SecurityManagement_AdminGuide/162005

• Question 377:

  In SmartEvent, what are the different types of automatic reactions that the administrator can configure?

  A. Mail, Block Source, Block Event Activity, External Script, SNMP Trap
  B. Mail, Block Source, Block Destination, Block Services, SNMP Trap
  C. Mail, Block Source, Block Destination, External Script, SNMP Trap
  D. Mail, Block Source, Block Event Activity, Packet Capture, SNMP Trap
  A. Mail, Block Source, Block Event Activity, External Script, SNMP Trap

  ---

  Explanation/Reference:

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_SmartEvent_AdminGuide/17401.htm

• Question 378:

  Which authentication scheme requires a user to possess a token?

  A. TACACS
  B. SecurID
  C. Check Point password
  D. RADIUS
  B. SecurID

  ---

  Explanation/Reference:

  SecurID SecurID requires users to both possess a token authenticator and to supply a PIN or password

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_SecurityGatewayTech_WebAdmin/6721.htm

• Question 379:

  What happens if the identity of a user is known?

  A. If the user credentials do not match an Access Role, the system displays the Captive Portal.
  B. If the user credentials do not match an Access Role, the system displays a sandbox.
  C. If the user credentials do not match an Access Role, the traffic is automatically dropped.
  D. If the user credentials match an Access Role, the rule is applied and traffic is accepted or dropped based on the defined action.
  D. If the user credentials match an Access Role, the rule is applied and traffic is accepted or dropped based on the defined action.

• Question 380:

  Where is the "Hit Count" feature enabled or disabled in SmartConsole?

  A. In Global Properties.
  B. On each Security Gateway.
  C. On the Policy layer.
  D. On the Policy Package.
  A. In Global Properties.