CheckPoint 156-215.81.20 Online Practice Questions and Exam Preparation

CheckPoint 156-215.81.20 Online Questions & Answers

• Question 471:

  What type of NAT is a one-to-one relationship where each host is translated to a unique address?

  A. Source
  B. Static
  C. Hide
  D. Destination
  B. Static

• Question 472:

  Fill in the blank: By default, the SIC certificates issued by R80 Management Server are based on the ____________ algorithm.

  A. SHA-256
  B. SHA-200
  C. MD5
  D. SHA-128
  A. SHA-256

• Question 473:

  To install a brand new Check Point Cluster, the MegaCorp IT department bought 1 Smart-1 and 2 Security Gateway Appliances to run a cluster. Which type of cluster is it?

  A. Full HA Cluster
  B. High Availability
  C. Standalone
  D. Distributed
  B. High Availability

• Question 474:

  What are two basic rules Check Point recommends for building an effective security policy?

  A. Accept Rule and Drop Rule
  B. Explicit Rule and Implied Rule
  C. Cleanup Rule and Stealth Rule
  D. NAT Rule and Reject Rule
  C. Cleanup Rule and Stealth Rule

• Question 475:

  What is the order of NAT priorities?

  A. Static NAT, IP pool NAT, hide NAT
  B. IP pool NAT, static NAT, hide NAT
  C. Static NAT, automatic NAT, hide NAT
  D. Static NAT, hide NAT, IP pool NAT
  A. Static NAT, IP pool NAT, hide NAT

  ---

  Explanation/Reference:

  The order of NAT priorities is:

  1.

  Static NAT

  2.

  IP Pool NAT

  3.

  Hide NAT Since Static NAT has all of the advantages of IP Pool NAT and more, it has a higher priority than the other NAT methods. Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_Firewall_WebAdmin/6724.htm#o6919

• Question 476:

  Which type of the Check Point license ties the package license to the IP address of the Security Management Server?

  A. Local
  B. Central
  C. Corporate
  D. Formal
  B. Central

• Question 477:

  The WebUI offers three methods for downloading Hotfixes via CPUSE. One of them is Automatic method. How many times per day will CPUSE agent check for hotfixes and automatically download them?

  A. Six times per day
  B. Seven times per day
  C. Every two hours
  D. Every three hours
  D. Every three hours

  ---

  Explanation/Reference:

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_Gaia_AdminWebAdminGuide/html_frameset.htm?topic=documents/R77/CP_R77_Gaia_AdminWebAdminGuide/112109

• Question 478:

  What does it mean if Deyra sees the gateway status:

  

  Choose the BEST answer.

  A. SmartCenter Server cannot reach this Security Gateway
  B. There is a blade reporting a problem
  C. VPN software blade is reporting a malfunction
  D. Security Gateway's MGNT NIC card is disconnected.
  B. There is a blade reporting a problem

  ---

  Explanation/Reference:

  

  Reference: https://sc1.checkpoint.com/sc/SolutionsStatics/NEW_SK_NOID1493612962436/active1704302237.fw.png

• Question 479:

  Which limitation of CoreXL is overcome by using (mitigated by) Multi-Queue?

  A. There is no traffic queue to be handled
  B. Several NICs can use one traffic queue by one CPU
  C. Each NIC has several traffic queues that are handled by multiple CPU cores
  D. Each NIC has one traffic queue that is handled by one CPU
  A. There is no traffic queue to be handled
  C. Each NIC has several traffic queues that are handled by multiple CPU cores

• Question 480:

  When dealing with policy layers, what two layer types can be utilized?

  A. Inbound Layers and Outbound Layers
  B. Ordered Layers and Inline Layers
  C. Structured Layers and Overlap Layers
  D. R81.X does not support Layers
  B. Ordered Layers and Inline Layers