CheckPoint 156-215.81.20 Online Practice Questions and Exam Preparation

CheckPoint 156-215.81.20 Online Questions & Answers

• Question 381:

  What are the software components used by Autonomous Threat Prevention Profiles in R81.20 and higher?

  A. Sandbox, ThreatCloud, Zero Phishing, Sanitization, CandC Protection, IPS, File and URL Reputation
  B. IPS, Threat Emulation and Threat Extraction
  C. Sandbox, ThreatCloud, Sanitization, CandC Protection, IPS
  D. IPS, Anti-Bot, Anti-Virus, SandBlast and Macro Extraction
  A. Sandbox, ThreatCloud, Zero Phishing, Sanitization, CandC Protection, IPS, File and URL Reputation

• Question 382:

  In which VPN community is a satellite VPN gateway not allowed to create a VPN tunnel with another satellite VPN gateway?

  A. Pentagon
  B. Combined
  C. Meshed D. Star
  D

  ---

  Explanation/Reference:

  VPN communities are based on Star and Mesh topologies. In a Mesh community, there are VPN connections between each Security Gateway. In a Star community, satellites have a VPN connection with the center Security Gateway, but not to each other.

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Firewall_WebAdmin/92709.htm

• Question 383:

  You are working with multiple Security Gateways enforcing an extensive number of rules. To simplify security administration, which action would you choose?

  A. Eliminate all possible contradictory rules such as the Stealth or Cleanup rules.
  B. Create a separate Security Policy package for each remote Security Gateway.
  C. Create network object that restrict all applicable rules to only certain networks.
  D. Run separate SmartConsole instances to login and configure each Security Gateway directly.
  B. Create a separate Security Policy package for each remote Security Gateway.

• Question 384:

  Which of the following is NOT an authentication scheme used for accounts created through SmartConsole?

  A. RADIUS
  B. SecurID
  C. Check Point password
  D. Security questions
  D. Security questions

• Question 385:

  Choose what BEST describes the reason why querying logs now is very fast.

  A. New Smart-1 appliances double the physical memory install
  B. Indexing Engine indexes logs for faster search results
  C. SmartConsole now queries results directly from the Security Gateway
  D. The amount of logs been store is less than the usual in older versions
  B. Indexing Engine indexes logs for faster search results

• Question 386:

  Which option will match a connection regardless of its association with a VPN community?

  A. All Site-to-Site VPN Communities
  B. Accept all encrypted traffic
  C. All Connections (Clear or Encrypted)
  D. Specific VPN Communities
  B. Accept all encrypted traffic

• Question 387:

  What is the Manual Client Authentication TELNET port?

  A. 23
  B. 264
  C. 900
  D. 259
  D. 259

• Question 388:

  What is a reason for manual creation of a NAT rule?

  A. In R80 all Network Address Translation is done automatically and there is no need for manually defined NAT-rules.
  B. Network Address Translation of RFC1918-compliant networks is needed to access the Internet.
  C. Network Address Translation is desired for some services, but not for others.
  D. The public IP-address is different from the gateway's external IP
  D. The public IP-address is different from the gateway's external IP

• Question 389:

  Joey is using the computer with IP address 192.168.20.13. He wants to access web page "www.CheckPoint.com", which is hosted on Web server with IP address 203.0.113.111. How many rules on Check Point Firewall are required for this connection?

  A. Two rules ?first one for the HTTP traffic and second one for DNS traffic.
  B. Only one rule, because Check Point firewall is a Packet Filtering firewall
  C. Two rules ?one for outgoing request and second one for incoming replay.
  D. Only one rule, because Check Point firewall is using Stateful Inspection technology.
  D. Only one rule, because Check Point firewall is using Stateful Inspection technology.

• Question 390:

  Which rule is responsible for the user authentication failure?

  

  A. Rule 4
  B. Rule 6
  C. Rule 3
  D. Rule 5
  C. Rule 3