CheckPoint Checkpoint Certifications 156-215.81.20 Questions & Answers

• Question 381:

  What happens if the identity of a user is known?

  A. If the user credentials do not match an Access Role, the traffic is automatically dropped.

  B. If the user credentials do not match an Access Role, the system displays a sandbox.

  C. If the user credentials do not match an Access Role, the gateway moves onto the next rule.

  D. If the user credentials do not match an Access Role, the system displays the Captive Portal.

  Correct Answer: C

• Question 382:

  Your company enforces a strict change control policy. Which of the following would be MOST effective for quickly dropping an attacker's specific active connection?

  A. Change the Rule Base and install the Policy to all Security Gateways

  B. Block Intruder feature of SmartView Tracker

  C. Intrusion Detection System (IDS) Policy install

  D. SAM ?Suspicious Activity Rules feature of SmartView Monitor

  Correct Answer: B

• Question 383:

  What port is used for communication to the User Center with SmartUpdate?

  A. CPMI 200

  B. TCP 8080

  C. HTTP 80

  D. HTTPS 443

  Correct Answer: D

• Question 384:

  How do you configure an alert in SmartView Monitor?

  A. An alert cannot be configured in SmartView Monitor.

  B. By choosing the Gateway, and Configure Thresholds.

  C. By right-clicking on the Gateway, and selecting Properties.

  D. By right-clicking on the Gateway, and selecting System Information.

  Correct Answer: B

• Question 385:

  Where would an administrator enable Implied Rules logging?

  A. In Smart Log Rules View

  B. In SmartDashboard on each rule

  C. In Global Properties under Firewall

  D. In Global Properties under log and alert

  Correct Answer: B

• Question 386:

  Which of these attributes would be critical for a site-to-site VPN?

  A. Scalability to accommodate user groups

  B. Centralized management

  C. Strong authentication

  D. Strong data encryption

  Correct Answer: D

• Question 387:

  You have just installed your Gateway and want to analyze the packet size distribution of your traffic with SmartView Monitor.

  

  Unfortunately, you get the message:

  "There are no machines that contain Firewall Blade and SmartView Monitor".

  What should you do to analyze the packet size distribution of your traffic? Give the BEST answer.

  

  A. Purchase the SmartView Monitor license for your Security Management Server.

  B. Enable Monitoring on your Security Management Server.

  C. Purchase the SmartView Monitor license for your Security Gateway.

  D. Enable Monitoring on your Security Gateway.

  Correct Answer: D

• Question 388:

  You believe Phase 2 negotiations are failing while you are attempting to configure a site-to-site VPN with one of your firm's business partners. Which SmartConsole application should you use to confirm your suspicious?

  A. SmartDashboard

  B. SmartUpdate

  C. SmartView Status

  D. SmartView Tracker

  Correct Answer: D

• Question 389:

  Which of the following uses the same key to decrypt as it does to encrypt?

  A. Asymmetric encryption

  B. Dynamic encryption

  C. Certificate-based encryption

  D. Symmetric encryption

  Correct Answer: D

• Question 390:

  How do you configure the Security Policy to provide uses access to the Captive Portal through an external (Internet) interface?

  A. Change the gateway settings to allow Captive Portal access via an external interface.

  B. No action is necessary. This access is available by default.

  C. Change the Identity Awareness settings under Global Properties to allow Captive Policy access on all interfaces.

  D. Change the Identity Awareness settings under Global Properties to allow Captive Policy access for an external interface.

  Correct Answer: A