CheckPoint 156-215.81.20 Online Practice Questions and Exam Preparation

CheckPoint 156-215.81.20 Online Questions & Answers

• Question 31:

  Which feature is NOT provided by all Check Point Mobile Access solutions?

  A. Support for IPv6
  B. Granular access control
  C. Strong user authentication
  D. Secure connectivity
  A. Support for IPv6

  ---

  Explanation/Reference:

  Types of Solutions

  All of Check Point's Remote Access solutions provide:

  1.

  Enterprise-grade, secure connectivity to corporate resources.

  2.

  Strong user authentication.

  3.

  Granular access control.

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_VPN_AdminGuide/83586.htm

• Question 32:

  Fill in the blank: An LDAP server holds one or more ______________.

  A. Server Units
  B. Administrator Units
  C. Account Units
  D. Account Servers
  C. Account Units

  ---

  Explanation/Reference:

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_SecurityManagement_WebAdminGuide/html_frameset.htm?topic=documents/R77/CP_R77_SecurityManagement_WebAdminGuide/94041

• Question 33:

  Packages and licenses are loaded from all of these sources EXCEPT

  A. Download Center Web site
  B. UserUpdate
  C. User Center
  D. Check Point DVD
  B. UserUpdate

  ---

  Explanation/Reference:

  Packages and licenses are loaded into these repositories from several sources:

  1.

  the Download Center web site (packages)

  2.

  the Check Point DVD (packages)

  3.

  the User Center (licenses)

  4.

  by importing a file (packages and licenses)

  5.

  by running the cplic command line Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Installation_and_Upgrade_Guide-webAdmin/13128.htm

• Question 34:

  When defining group-based access in an LDAP environment with Identity Awareness, what is the BEST object type to represent an LDAP group in a Security Policy?

  A. Access Role
  B. User Group
  C. SmartDirectory Group
  D. Group Template
  A. Access Role

• Question 35:

  Fill in the blank: SmartConsole, SmartEvent GUI client, and _____ allow viewing of billions of consolidated logs and shows them as prioritized security events.

  A. SmartMonitor
  B. SmartReporter
  C. SmartTracker
  D. SmartView Web Application
  D. SmartView Web Application

• Question 36:

  The technical-support department has a requirement to access an intranet server. When configuring a User Authentication rule to achieve this, which of the following should you remember?

  A. You can only use the rule for Telnet, FTP, SMPT, and rlogin services.
  B. The Security Gateway first checks if there is any rule that does not require authentication for this type of connection before invoking the Authentication Security Server.
  C. Once a user is first authenticated, the user will not be prompted for authentication again until logging out.
  D. You can limit the authentication attempts in the User Properties' Authentication tab.
  B. The Security Gateway first checks if there is any rule that does not require authentication for this type of connection before invoking the Authentication Security Server.

• Question 37:

  Which of the following is NOT an option to calculate the traffic direction?

  A. Incoming
  B. Internal
  C. External
  D. Outgoing
  D. Outgoing

• Question 38:

  A Check Point Software license consists of two components, the Software Blade and the Software Container. There are _____ types of Software Containers: _____.

  A. Two; Security Management and Endpoint Security
  B. Three; Security Management, Security Gateway, and Endpoint Security
  C. Three; Security Gateway, Endpoint Security, and Gateway Management
  D. Two; Endpoint Security and Security Gateway
  B. Three; Security Management, Security Gateway, and Endpoint Security

• Question 39:

  Which of the following commands can be used to remove site-to-site IPSEC Security Associations (SA)?

  A. vpn tu
  B. vpn ipsec remove -l
  C. vpn debug ipsec D. fw ipsec tu
  A. vpn tu

  ---

  Explanation/Reference:

  vpn tu Description Launch the TunnelUtil tool which is used to control VPN tunnels. Usage vpn tu vpn tunnelutil Example vpn tu Output

  

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_CLI_WebAdmin/12467.htm#o12627

• Question 40:

  You find a suspicious connection from a problematic host. You decide that you want to block everything from that whole network, not just the problematic host. You want to block this for an hour while you investigate further, but you do not want to add any rules to the Rule Base. How do you achieve this?

  A. Use dbedit to script the addition of a rule directly into the Rule Bases_5_0.fws configuration file.
  B. Select Block intruder from the Tools menu in SmartView Tracker.
  C. Create a Suspicious Activity Rule in Smart Monitor.
  D. Add a temporary rule using SmartDashboard and select hide rule.
  C. Create a Suspicious Activity Rule in Smart Monitor.