CheckPoint 156-215.81.20 Online Practice Questions and Exam Preparation

CheckPoint 156-215.81.20 Online Questions & Answers

• Question 421:

  During the Check Point Stateful Inspection Process, for packets that do not pass Firewall Kernel Inspection and are rejected by the rule definition, packets are:

  A. Dropped without sending a negative acknowledgment
  B. Dropped without logs and without sending a negative acknowledgment
  C. Dropped with negative acknowledgment
  D. Dropped with logs and without sending a negative acknowledgment
  D. Dropped with logs and without sending a negative acknowledgment

• Question 422:

  You find that Users are not prompted for authentication when they access their Web servers, even though you have created an HTTP rule via User Authentication. Choose the BEST reason why.

  A. You checked the cache password on desktop option in Global Properties.
  B. Another rule that accepts HTTP without authentication exists in the Rule Base.
  C. You have forgotten to place the User Authentication Rule before the Stealth Rule.
  D. Users must use the SecuRemote Client, to use the User Authentication Rule.
  B. Another rule that accepts HTTP without authentication exists in the Rule Base.

• Question 423:

  What Check Point tool is used to automatically update Check Point products for the Gaia OS?

  A. Check Point Update Engine
  B. Check Point Upgrade Installation Service
  C. Check Point Upgrade Service Engine (CPUSE)
  D. Check Point INSPECT Engine
  C. Check Point Upgrade Service Engine (CPUSE)

• Question 424:

  What does it mean if Bob gets this result on an object search? Refer to the image below. Choose the BEST answer.

  

  A. Search detailed is missing the subnet mask.
  B. There is no object on the database with that name or that IP address.
  C. There is no object on the database with that IP address.
  D. Object does not have a NAT IP address.
  B. There is no object on the database with that name or that IP address.

• Question 425:

  Examine the following Rule Base.

  

  What can we infer about the recent changes made to the Rule Base?

  A. Rule 7 was created by the 'admin' administrator in the current session
  B. 8 changes have been made by administrators since the last policy installation
  C. Te rules 1, 5 and 6 cannot be edited by the 'admin' administrator
  D. Rule 1 and object webserver are locked by another administrator
  D. Rule 1 and object webserver are locked by another administrator

  ---

  Explanation/Reference:

  Explantation:

  On top of the print screen there is a number "8" which consists for the number of changes made and not saved.

  Session Management Toolbar (top of SmartConsole)

  

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm?topic=documents/R80/CP_R80_SecMGMT/117948

• Question 426:

  What data MUST be supplied to the SmartConsole System Restore window to restore a backup?

  A. Server, Username, Password, Path, Version
  B. Username, Password, Path, Version
  C. Server, Protocol, Username, Password, Destination Path
  D. Server, Protocol, Username, Password, Path
  D. Server, Protocol, Username, Password, Path

  ---

  Explanation/Reference:

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_SmartDashboard_OLH/html_frameset.htm?topic=documents/R80/CP_R80_SmartDashboard_OLH/ud_B7RJG2xrUQywsBK5buA2

• Question 427:

  Which is the correct order of a log flow processed by SmartEvent components:

  A. Firewall > Correlation Unit > Log Server > SmartEvent Server Database > SmartEvent Client
  B. Firewall > SmartEvent Server Database > Correlation Unit > Log Server > SmartEvent Client
  C. Firewall > Log Server > SmartEvent Server Database > Correlation Unit > SmartEvent Client
  D. Firewall > Log Server > Correlation Unit > SmartEvent Server Database > SmartEvent Client
  D. Firewall > Log Server > Correlation Unit > SmartEvent Server Database > SmartEvent Client

• Question 428:

  Which tool allows automatic update of Gaia OS and Check Point products installed on Gaia OS?

  A. CPDAS - Check Point Deployment Agent Service
  B. CPUSE - Check Point Upgrade Service Engine
  C. CPASE - Check Point Automatic Service Engine
  D. CPAUE - Check Point Automatic Update Engine
  B. CPUSE - Check Point Upgrade Service Engine

• Question 429:

  From SecureXL perspective, what are the tree paths of traffic flow:

  A. Initial Path; Medium Path; Accelerated Path
  B. Layer Path; Blade Path; Rule Path
  C. Firewall Path; Accept Path; Drop Path
  D. Firewall Path; Accelerated Path; Medium Path
  D. Firewall Path; Accelerated Path; Medium Path

  ---

  Explanation/Reference:

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Firewall_WebAdmin/92711.htm

• Question 430:

  Which Check Point software blade provides Application Security and identity control?

  A. Identity Awareness
  B. Data Loss Prevention
  C. URL Filtering
  D. Application Control
  D. Application Control

  ---

  Explanation/Reference:

  Check Point Application Control provides the industry's strongest application security and identity control to organizations of all sizes.

  Reference: https://www.checkpoint.com/products/application-control-software-blade/