CheckPoint 156-215.81.20 Online Practice Questions and Exam Preparation

CheckPoint 156-215.81.20 Online Questions & Answers

• Question 441:

  What is the default shell for the Gaia command line interface?

  A. Admin
  B. Clish
  C. Expert
  D. Bash
  B. Clish

• Question 442:

  Using R80 Smart Console, what does a "pencil icon" in a rule mean?

  A. I have changed this rule
  B. Someone else has changed this rule
  C. This rule is managed by check point's SOC
  D. This rule can't be changed as it's an implied rule
  A. I have changed this rule

• Question 443:

  An administrator wishes to enable Identity Awareness on the Check Point firewalls. However they allow users to use company issued or personal laptops. Since the administrator cannot manage the personal laptops, which of the following methods would BEST suit this company?

  A. AD Query
  B. Browser-Based Authentication
  C. Identity Agents
  D. Terminal Servers Agent
  B. Browser-Based Authentication

  ---

  Explanation/Reference:

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_IdentityAwareness_AdminGuide/62007.htm

• Question 444:

  In R80 spoofing is defined as a method of:

  A. Disguising an illegal IP address behind an authorized IP address through Port Address Translation.
  B. Hiding your firewall from unauthorized users.
  C. Detecting people using false or wrong authentication logins
  D. Making packets appear as if they come from an authorized IP address.
  D. Making packets appear as if they come from an authorized IP address.

  ---

  Explanation/Reference:

  IP spoofing replaces the untrusted source IP address with a fake, trusted one, to hijack connections to your network. Attackers use IP spoofing to send malware and bots to your protected network, to execute DoS attacks, or to gain

  unauthorized access.

  Reference:

  http://dl3.checkpoint.com/paid/74/74d596decb6071a4ee642fbdaae7238f/CP_R80_SecurityManagement_AdminGuide.pdf?HashKey=1479584563_6f823c8ea1514609148aa4fec5425db2andxtn=.pdf

• Question 445:

  Application Control/URL filtering database library is known as:

  A. AppWiki
  B. Application-Forensic Database
  C. Application Library
  D. Application database
  A. AppWiki

• Question 446:

  Sticky Decision Function (SDF) is required to prevent which of the following? Assume you set up an Active-Active cluster.

  A. Symmetric routing
  B. Failovers
  C. Asymmetric routing
  D. Anti-Spoofing
  B. Failovers

• Question 447:

  Fill in the blank: ____________ is the Gaia command that turns the server off.

  A. sysdown
  B. exit
  C. halt
  D. shut-down
  C. halt

• Question 448:

  Fill in the blank: ________information is included in the "Full Log" tracking option, but is not included in the "Log" tracking option?

  A. file attributes
  B. application
  C. destination port
  D. data type
  D. data type

  ---

  Explanation/Reference:

  Tracking Options

  Network Log - Generates a log with only basic Firewall information: Source, Destination, Source Port, Destination Port, and Protocol. Log - Equivalent to the Network Log option, but also includes the application name (for example, Dropbox),

  and application information (for example, the URL of the Website). This is the default Tracking option.

  Full Log - Equivalent to the log option, but also records data for each URL request made.

  -

  If suppression is not selected, it generates a complete log (as defined in pre-R80 management).

  -

  If suppression is selected, it generates an extended log (as defined in pre-R80 management).

  None - Do not generate a log.

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_LoggingAndMonitoring/html_frameset.htm?topic=documents/R80/CP_R80_LoggingAndMonitoring/131914

• Question 449:

  As a Security Administrator, you must refresh the Client Authentication authorized time-out every time a new user connection is authorized. How do you do this? Enable the Refreshable Timeout setting:

  A. in the user object's Authentication screen.
  B. in the Gateway object's Authentication screen.
  C. in the Limit tab of the Client Authentication Action Properties screen.
  D. in the Global Properties Authentication screen.
  C. in the Limit tab of the Client Authentication Action Properties screen.

• Question 450:

  In order to modify Security Policies the administrator can use which of the following tools? Select the BEST answer.

  A. Command line of the Security Management Server or mgmt_cli.exe on any Windows computer.
  B. SmartConsole and WebUI on the Security Management Server.
  C. mgmt_cli or WebUI on Security Gateway and SmartConsole on the Security Management Server.
  D. SmartConsole or mgmt_cli on any computer where SmartConsole is installed.
  D. SmartConsole or mgmt_cli on any computer where SmartConsole is installed.