CheckPoint Checkpoint Certifications 156-215.81.20 Questions & Answers

• Question 421:

  In SmartEvent, what are the different types of automatic reactions that the administrator can configure?

  A. Mail, Block Source, Block Event Activity, External Script, SNMP Trap

  B. Mail, Block Source, Block Destination, Block Services, SNMP Trap

  C. Mail, Block Source, Block Destination, External Script, SNMP Trap

  D. Mail, Block Source, Block Event Activity, Packet Capture, SNMP Trap

  Correct Answer: A

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_SmartEvent_AdminGuide/17401.htm

• Question 422:

  Identify the API that is not supported by Check Point currently.

  A. R80 Management API

  B. Identity Awareness Web Services API

  C. Open REST API

  D. OPSEC SDK

  Correct Answer: C

  Reference: http://dl3.checkpoint.com/paid/29/29532b9eec50d0a947719ae631f640d0/CP_R80_CheckPoint_API_ReferenceGuide.pdf?HashKey=1517091458_be29bd4732d8d22283df32ccaaffc482andxtn=.pdf

• Question 423:

  Using mgmt_cli, what is the correct syntax to import a host object called Server_1 from the CLI?

  A. mgmt_cli add-host "Server_1" ip_address "10.15.123.10" --format txt

  B. mgmt_cli add host name "Server_1" ip_address "10.15.123.10" --format json

  C. mgmt_cli add object-host "Server_1" ip_address "10.15.123.10" --format json

  D. mgmt_cli add object "Server_1" ip_address "10.15.123.10" --format json

  Correct Answer: A

  Reference: https://sc1.checkpoint.com/documents/latest/APIs/index.html#cli/add-host~v1.1

• Question 424:

  SandBlast has several functional components that work together to ensure that attacks are prevented in real-time. Which the following is NOT part of the SandBlast component?

  A. Threat Emulation

  B. Mobile Access

  C. Mail Transfer Agent

  D. Threat Cloud

  Correct Answer: C

  Reference: https://www.checkpoint.com/products-solutions/zero-day-protection/

• Question 425:

  Vanessa is expecting a very important Security Report. The Document should be sent as an attachment via e-mail. An e-mail with Security_report.pdf file was delivered to her e-mail inbox. When she opened the PDF file, she noticed that the file is basically empty and only few lines of text are in it. The report is missing some graphs, tables and links. Which component of SandBlast protection is her company using on a Gateway?

  A. SandBlast Threat Emulation

  B. SandBlast Agent

  C. Check Point Protect

  D. SandBlast Threat Extraction

  Correct Answer: D

• Question 426:

  What is the command to see cluster status in cli expert mode?

  A. fw ctl stat

  B. clusterXL stat

  C. clusterXL status

  D. cphaprob stat

  Correct Answer: A

• Question 427:

  On R80.10 when configuring Third-Party devices to read the logs using the LEA (Log Export API) the default Log Server uses port:

  A. 18210

  B. 18184

  C. 257

  D. 18191

  Correct Answer: B

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_LoggingAndMonitoring/html_frameset.htm?topic=documents/R80/CP_R80_LoggingAndMonitoring/120829

• Question 428:

  If the first packet of an UDP session is rejected by a security policy, what does the firewall send to the client?

  A. Nothing

  B. TCP FIN

  C. TCP RST

  D. ICMP unreachable

  Correct Answer: A

• Question 429:

  What is the mechanism behind Threat Extraction?

  A. This is a new mechanism which extracts malicious files from a document to use it as a counter-attack against its sender

  B. This is a new mechanism which is able to collect malicious files out of any kind of file types to destroy it prior to sending it to the intended recipient

  C. This is a new mechanism to identify the IP address of the sender of malicious codes and to put it into the SAM database (Suspicious Activity Monitoring).

  D. Any active contents of a document, such as JavaScripts, macros and links will be removed from the document and forwarded to the intended recipient, which makes this solution very fast

  Correct Answer: D

• Question 430:

  What is the benefit of Manual NAT over Automatic NAT?

  A. If you create a new Security Policy, the Manual NAT rules will be transferred to this new policy

  B. There is no benefit since Automatic NAT has in any case higher priority over Manual NAT

  C. You have the full control about the priority of the NAT rules

  D. On IPSO and GAIA Gateways, it is handled in a Stateful manner

  Correct Answer: C