CheckPoint Checkpoint Certifications 156-215.81.20 Questions & Answers

• Question 451:

  Which one of these features is NOT associated with the Check Point URL Filtering and Application Control Blade?

  A. Detects and blocks malware by correlating multiple detection engines before users are affected.

  B. Configure rules to limit the available network bandwidth for specified users or groups.

  C. Use UserCheck to help users understand that certain websites are against the company's security policy.

  D. Make rules to allow or block applications and Internet sites for individual applications, categories, and risk levels.

  Correct Answer: A

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_AppControl_WebAdmin/60902.htm

• Question 452:

  You want to store the GAiA configuration in a file for later reference. What command should you use?

  A. write mem

  B. show config -f

  C. save config -o

  D. save configuration

  Correct Answer: D

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk102234

• Question 453:

  Traffic from source 192.168.1.1 is going to www.google.com. The Application Control Blade on the gateway is inspecting the traffic. Assuming acceleration is enable which path is handling the traffic?

  A. Slow Path

  B. Medium Path

  C. Fast Path

  D. Accelerated Path

  Correct Answer: A

• Question 454:

  From SecureXL perspective, what are the tree paths of traffic flow:

  A. Initial Path; Medium Path; Accelerated Path

  B. Layer Path; Blade Path; Rule Path

  C. Firewall Path; Accept Path; Drop Path

  D. Firewall Path; Accelerated Path; Medium Path

  Correct Answer: D

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Firewall_WebAdmin/92711.htm

• Question 455:

  You are asked to check the status of several user-mode processes on the management server and gateway. Which of the following processes can only be seen on a Management Server?

  A. fwd

  B. fwm

  C. cpd D. cpwd

  Correct Answer: B

• Question 456:

  R80.10 management server can manage gateways with which versions installed?

  A. Versions R77 and higher

  B. Versions R76 and higher

  C. Versions R75.20 and higher

  D. Version R75 and higher

  Correct Answer: B

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk113113

• Question 457:

  You want to verify if there are unsaved changes in GAiA that will be lost with a reboot. What command can be used?

  A. show unsaved

  B. show save-state

  C. show configuration diff

  D. show config-state

  Correct Answer: D

• Question 458:

  In what way is Secure Network Distributor (SND) a relevant feature of the Security Gateway?

  A. SND is a feature to accelerate multiple SSL VPN connections

  B. SND is an alternative to IPSec Main Mode, using only 3 packets

  C. SND is used to distribute packets among Firewall instances

  D. SND is a feature of fw monitor to capture accelerated packets

  Correct Answer: C

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_PerformanceTuning_WebAdmin/6731.htm

• Question 459:

  Sticky Decision Function (SDF) is required to prevent which of the following? Assume you set up an Active-Active cluster.

  A. Symmetric routing

  B. Failovers

  C. Asymmetric routing

  D. Anti-Spoofing

  Correct Answer: B

• Question 460:

  What are the steps to configure the HTTPS Inspection Policy?

  A. Go to ManageandSettings > Blades > HTTPS Inspection > Configure in SmartDashboard

  B. Go to Applicationandurl filtering blade > Advanced > Https Inspection > Policy

  C. Go to ManageandSettings > Blades > HTTPS Inspection > Policy

  D. Go to Applicationandurl filtering blade > Https Inspection > Policy

  Correct Answer: C