CheckPoint 156-215.81.20 Online Practice Questions and Exam Preparation

CheckPoint 156-215.81.20 Online Questions & Answers

• Question 411:

  Full synchronization between cluster members is handled by Firewall Kernel. Which port is used for this?

  A. UDP port 265
  B. TCP port 265
  C. UDP port 256
  D. TCP port 256
  B. TCP port 265

• Question 412:

  Fill in the blank: It is Best Practice to have a _____ rule at the end of each policy layer.

  A. Explicit Drop
  B. Implied Drop
  C. Explicit CleanUp
  D. Implicit Drop
  C. Explicit CleanUp

  ---

  Explanation/Reference:

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_SmartDashboard_OLH/html_frameset.htm?topic=documents/R80/CP_R80_SmartDashboard_OLH/NFHf4E9NLQBJlVkHRpc16w2

• Question 413:

  While in SmartView Tracker, Brady has noticed some very odd network traffic that he thinks could be an intrusion. He decides to block the traffic for 60 minutes, but cannot remember all the steps. What is the correct order of steps needed to

  set up the block?

  1) Select Active Mode tab in SmartView Tracker.

  2) Select Tools > Block Intruder.

  3) Select Log Viewing tab in SmartView Tracker.

  4) Set Blocking Timeout value to 60 minutes.

  5) Highlight connection that should be blocked.

  A. 1, 2, 5, 4
  B. 3, 2, 5, 4
  C. 1, 5, 2, 4
  D. 3, 5, 2, 4
  C. 1, 5, 2, 4

• Question 414:

  Tom has connected to the Management Server remotely using SmartConsole and is in the process of making some Rule Base changes, when he suddenly loses connectivity. Connectivity is restored shortly afterward. What will happen to the changes already made?

  A. Tom will have to reboot his SmartConsole computer, and access the Management cache store on that computer, which is only accessible after a reboot.
  B. Tom will have to reboot his SmartConsole computer, clear the cache, and restore changes.
  C. Tom's changes will have been stored on the Management when he reconnects and he will not lose any of his work.
  D. Tom's changes will be lost since he lost connectivity and he will have to start again.
  C. Tom's changes will have been stored on the Management when he reconnects and he will not lose any of his work.

• Question 415:

  What is the default shell of Gaia CLI?

  A. Read-only
  B. Expert
  C. Clish
  D. Bash
  C. Clish

• Question 416:

  Which information is included in the "Extended Log" tracking option, but is not included in the "Log" tracking option?

  A. file attributes
  B. application information
  C. destination port
  D. data type information
  B. application information

• Question 417:

  If there are two administrators logged in at the same time to the SmartConsole, and there are objects locked for editing, what must be done to make them available to other administrators? Choose the BEST answer.

  A. Publish or discard the session.
  B. Revert the session.
  C. Save and install the Policy.
  D. Delete older versions of database.
  A. Publish or discard the session.

  ---

  Explanation/Reference:

  To make changes available to all administrators, and to unlock the objects and rules that are being edited, the administrator must publish the session. To make your changes available to other administrators, and to save the database before installing a policy, you must publish the session. When you publish a session, a new database version is created. When you select Install Policy, you are prompted to publish all unpublished changes. You cannot install a policy if the included changes are not published.

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm?topic=documents/R80/CP_R80_SecMGMT/126197

• Question 418:

  Fill in the blank: Each cluster, at a minimum, should have at least ___________ interfaces.

  A. Five
  B. Two
  C. Three
  D. Four
  C. Three

  ---

  Explanation/Reference:

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_ClusterXL_AdminGuide/7292.htm

• Question 419:

  You installed Security Management Server on a computer using GAiA in the MegaCorp home office. You use IP address 10.1.1.1. You also installed the Security Gateway on a second GAiA computer, which you plan to ship to another Administrator at a MegaCorp hub office. What is the correct order for pushing SIC certificates to the Gateway before shipping it?

  1.

  Run cpconfig on the Gateway, select Secure Internal Communication, enter the activation key, and reconfirm.

  2.

  Initialize Internal Certificate Authority (ICA) on the Security Management Server.

  3.

  Configure the Gateway object with the host name and IP addresses for the remote site.

  4.

  Click the Communication button in the Gateway object's General screen, enter the activation key, and click Initialize and OK.

  5.

  Install the Security Policy.

  A. 2, 3, 4, 1, 5
  B. 2, 1, 3, 4, 5
  C. 1, 3, 2, 4, 5
  D. 2, 3, 4, 5, 1
  B. 2, 1, 3, 4, 5

• Question 420:

  Fill in the blank: Each cluster has __________ interfaces.

  A. Five
  B. Two
  C. Three
  D. Four
  C. Three

  ---

  Explanation/Reference:

  Each cluster member has three interfaces: one external interface, one internal interface, and one for synchronization. Cluster member interfaces facing in each direction are connected via a switch, router, or VLAN switch.

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_ClusterXL_AdminGuide/7292.htm