CheckPoint 156-215.81.20 Online Practice Questions and Exam Preparation

CheckPoint 156-215.81.20 Online Questions & Answers

• Question 431:

  Which R77 GUI would you use to see number of packets accepted since the last policy install?

  A. SmartView Monitor
  B. SmartView Tracker
  C. SmartDashboard
  D. SmartView Status
  A. SmartView Monitor

• Question 432:

  One of major features in R80 SmartConsole is concurrent administration. Which of the following is NOT possible considering that AdminA, AdminB, and AdminC are editing the same Security Policy?

  A. A lock icon shows that a rule or an object is locked and will be available.
  B. AdminA and AdminB are editing the same rule at the same time.
  C. A lock icon next to a rule informs that any Administrator is working on this particular rule.
  D. AdminA, AdminB and AdminC are editing three different rules at the same time.
  C. A lock icon next to a rule informs that any Administrator is working on this particular rule.

  ---

  Explanation/Reference:

  In SmartConsole, administrators work with sessions. A session is created each time an administrator logs into SmartConsole. Changes made in the session are saved automatically. These changes are private and available only to the administrator. To avoid configuration conflicts, other administrators see a lock icon on objects and rules that are being edited in other sessions

  Reference: http://downloads.checkpoint.com/dc/download.htm?ID=65846

• Question 433:

  Which two of these Check Point Protocols are used by _____ ?

  A. ELA and CPD
  B. FWD and LEA
  C. FWD and CPLOG
  D. ELA and CPLOG
  B. FWD and LEA

• Question 434:

  Which of the following Automatically Generated Rules NAT rules have the lowest implementation priority?

  A. Machine Hide NAT
  B. Address Range Hide NAT
  C. Network Hide NAT
  D. Machine Static NAT
  B. Address Range Hide NAT
  C. Network Hide NAT

  ---

  Explanation/Reference:

  SmartDashboard organizes the automatic NAT rules in this order:

  1.

  Static NAT rules for Firewall, or node (computer or server) objects

  2.

  Hide NAT rules for Firewall, or node objects

  3.

  Static NAT rules for network or address range objects

  4.

  Hide NAT rules for network or address range objects

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_Firewall_WebAdmin/6724.htm

• Question 435:

  Which Check Point software blade monitors Check Point devices and provides a picture of network and security performance?

  A. Application Control
  B. Threat Emulation
  C. Logging and Status
  D. Monitoring
  D. Monitoring

  ---

  Explanation/Reference:

  Reference: https://www.checkpoint.com/downloads/product-related/datasheets/DS_Monitoring.pdf

• Question 436:

  True or False: The destination server for Security Gateway logs depends on a Security Management Server configuration.

  A. False, log servers are configured on the Log Server General Properties
  B. True, all Security Gateways will only forward logs with a SmartCenter Server configuration
  C. True, all Security Gateways forward logs automatically to the Security Management Server
  D. False, log servers are enabled on the Security Gateway General Properties
  B. True, all Security Gateways will only forward logs with a SmartCenter Server configuration

• Question 437:

  Identify the ports to which the Client Authentication daemon listens on by default?

  A. 259, 900
  B. 256, 257
  C. 8080, 529
  D. 80, 256
  A. 259, 900

  ---

  Explanation/Reference:

  Reference: http://digitalcrunch.com/check-point-firewall/list-of-check-point-ports/

• Question 438:

  In the Check Point Security Management Architecture, which component(s) can store logs?

  A. SmartConsole
  B. Security Management Server and Security Gateway
  C. Security Management Server
  D. SmartConsole and Security Management Server
  B. Security Management Server and Security Gateway

• Question 439:

  Fill in the blank: With the User Directory Software Blade, you can create R80 user definitions on a(an) ___________ Server.

  A. NT domain
  B. SMTP
  C. LDAP
  D. SecurID
  C. LDAP

  ---

  Explanation/Reference:

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm?topic=documents/R80/CP_R80_SecMGMT/126197

• Question 440:

  What Check Point technologies deny or permit network traffic?

  A. Application Control, DLP
  B. Packet Filtering, Stateful Inspection, Application Layer Firewall.
  C. ACL, SandBlast, MPT
  D. IPS, Mobile Threat Protection
  B. Packet Filtering, Stateful Inspection, Application Layer Firewall.