CheckPoint Checkpoint Certifications 156-215.81.20 Questions & Answers

• Question 471:

  Fill in the blank: The __________ is used to obtain identification and security information about network users.

  A. User Directory

  B. User server

  C. UserCheck

  D. User index

  Correct Answer: A

  Reference: https://www.checkpoint.com/downloads/product-related/datasheets/DS_UserDirectorySWB.pdf

• Question 472:

  Which Check Point feature enables application scanning and the detection?

  A. Application Dictionary

  B. AppWiki

  C. Application Library

  D. CPApp

  Correct Answer: B

  AppWiki Application Classification Library

  AppWiki enables application scanning and detection of more than 5,000 distinct applications and over 300,000 Web 2.0 widgets including instant messaging, social networking, video streaming, VoIP, games and more.

  Reference: https://www.checkpoint.com/products/application-control-software-blade/

• Question 473:

  DLP and Geo Policy are examples of what type of Policy?

  A. Standard Policies

  B. Shared Policies

  C. Inspection Policies

  D. Unified Policies

  Correct Answer: B

  The Shared policies are installed with the Access Control Policy.

  

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm?topic=documents/R80/CP_R80_SecMGMT/126197

• Question 474:

  In which deployment is the security management server and Security Gateway installed on the same appliance?

  A. Bridge Mode

  B. Remote

  C. Standalone

  D. Distributed

  Correct Answer: C

  Installing Standalone

  Standalone Deployment - The Security Management Server and the Security Gateway are installed on the same computer or appliance.

  

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Installation_and_Upgrade_Guide-webAdmin/89230.htm#o98246

• Question 475:

  Fill in the blank: A _________ VPN deployment is used to provide remote users with secure access to internal corporate resources by authenticating the user through an internet browser.

  A. Clientless remote access

  B. Clientless direct access

  C. Client-based remote access

  D. Direct access

  Correct Answer: A

  Clientless - Users connect through a web browser and use HTTPS connections. Clientless solutions usually supply access to web-based corporate resources. Reference: https://sc1.checkpoint.com/documents/R80/CP_R80BC_Firewall/html_frameset.htm?topic=documents/R80/CP_R80BC_Firewall/92704

• Question 476:

  Which of the following statements is TRUE about R80 management plug-ins?

  A. The plug-in is a package installed on the Security Gateway.

  B. Installing a management plug-in requires a Snapshot, just like any upgrade process.

  C. A management plug-in interacts with a Security Management Server to provide new features and support for new products.

  D. Using a plug-in offers full central management only if special licensing is applied to specific features of the plug-in.

  Correct Answer: C

• Question 477:

  Fill in the blank: Gaia can be configured using the _______ or ______ .

  A. Gaia; command line interface

  B. WebUI; Gaia Interface

  C. Command line interface; WebUI

  D. Gaia Interface; GaiaUI

  Correct Answer: C

  Configuring Gaia for the First Time In This Section: Running the First Time Configuration Wizard in WebUI Running the First Time Configuration Wizard in CLI After you install Gaia for the first time, use the First Time Configuration Wizard to configure the system and the Check Point products on it.

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_Gaia_AdminWebAdminGuide/html_frameset.htm?topic=documents/R77/CP_R77_Gaia_AdminWebAdminGuide/112568

• Question 478:

  Where can you trigger a failover of the cluster members?

  1.

  Log in to Security Gateway CLI and run command clusterXL_admin down.

  2.

  In SmartView Monitor right-click the Security Gateway member and select Cluster member down.

  3.

  Log into Security Gateway CLI and run command cphaprob down.

  A. 1, 2, and 3

  B. 2 and 3

  C. 1 and 2

  D. 1 and 3

  Correct Answer: C

  How to Initiate Failover Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_ClusterXL_AdminGuide/7298.htm

  

• Question 479:

  Which utility allows you to configure the DHCP service on GAIA from the command line?

  A. ifconfig

  B. dhcp_cfg

  C. sysconfig

  D. cpconfig

  Correct Answer: C

  Sysconfig Configuration Options

  

  Refrence: https://sc1.checkpoint.com/documents/R76/CP_R76_Splat_AdminGuide/51548.htm

  NOTE:Question must be wrong because no answer is possible for GAIA system, this must be SPLAT version.

  DHCP CLI configuration for GAIA reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Gaia_WebAdmin/73181.htm#o80096

• Question 480:

  Which VPN routing option uses VPN routing for every connection a satellite gateway handles?

  A. To satellites through center only

  B. To center only

  C. To center and to other satellites through center

  D. To center, or through the center to other satellites, to internet and other VPN targets

  Correct Answer: D

  On the VPN Routing page, enable the VPN routing for satellites section, by selecting one of these options:

  1.

  To center and to other Satellites through center; this allows connectivity between Gateways; for example, if the spoke Gateways are DAIP Gateways, and the hub is a Gateway with a static IP address

  2.

  To center, or through the center to other satellites, to Internet and other VPN targets; this allows connectivity between the Gateways, as well as the ability to inspect all communication passing through the hub to the Internet. Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk31021