CheckPoint 156-215.81.20 Online Practice Questions and Exam Preparation

CheckPoint 156-215.81.20 Online Questions & Answers

• Question 481:

  Which of the following firewall modes DOES NOT allow for Identity Awareness to be deployed?

  A. Bridge
  B. Load Sharing
  C. High Availability
  D. Fail Open
  A. Bridge

• Question 482:

  What is the purpose of a Stealth Rule?

  A. A rule that allows administrators to access SmartConsole from any device.
  B. To drop any traffic destined for the firewall that is not otherwise explicitly allowed.
  C. A rule at the end of your policy to drop any traffic that is not explicitly allowed.
  D. A rule used to hide a server's IP address from the outside world.
  B. To drop any traffic destined for the firewall that is not otherwise explicitly allowed.

• Question 483:

  You are going to upgrade from R77 to R80. Before the upgrade, you want to back up the system so that, if there are any problems, you can easily restore to the old version with all configuration and management files intact. What is the BEST backup method in this scenario?

  A. backup
  B. Database Revision
  C. snapshot
  D. migrate export
  C. snapshot

  ---

  Explanation/Reference:

  Snapshot Management The snapshot creates a binary image of the entire root (lv_current) disk partition. This includes Check Point products, configuration, and operating system. Starting in R77.10, exporting an image from one machine and importing that image on another machine of the same type is supported. The log partition is not included in the snapshot. Therefore, any locally stored FireWall logs will not be saved. Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk108902

• Question 484:

  Fill in the blank: The position of an Implied rule is manipulated in the _____ window.

  A. Firewall
  B. Object Explorer
  C. Global Properties
  D. NAT
  A. Firewall

• Question 485:

  R80.10 management server can manage gateways with which versions installed?

  A. Versions R77 and higher
  B. Versions R76 and higher
  C. Versions R75.20 and higher
  D. Version R75 and higher
  B. Versions R76 and higher

  ---

  Explanation/Reference:

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk113113

• Question 486:

  When should you generate new licenses?

  A. Only when the license is upgraded.
  B. After a device upgrade.
  C. When the existing license expires, the license is upgraded, or the IP address associated with the license changes.
  D. Before installing contract files.
  C. When the existing license expires, the license is upgraded, or the IP address associated with the license changes.

• Question 487:

  What is the difference between SSL VPN and IPSec VPN?

  A. IPSec VPN does not require installation of a resident VPN client
  B. SSL VPN requires installation of a resident VPN client
  C. SSL VPN and IPSec VPN are the same
  D. IPSec VPN requires installation of a resident VPN client and SSL VPN requires only an installed Browser
  D. IPSec VPN requires installation of a resident VPN client and SSL VPN requires only an installed Browser

  ---

  Explanation/Reference:

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Mobile_Access_WebAdmin/83586.htm

• Question 488:

  Which product correlates logs and detects security threats, providing a centralized display of potential attack patterns from all network devices?

  A. SmartView Monitor
  B. SmartEvent
  C. SmartDashboard
  D. SmartUpdate
  B. SmartEvent

• Question 489:

  In what way is Secure Network Distributor (SND) a relevant feature of the Security Gateway?

  A. SND is a feature to accelerate multiple SSL VPN connections
  B. SND is an alternative to IPSec Main Mode, using only 3 packets
  C. SND is used to distribute packets among Firewall instances
  D. SND is a feature of fw monitor to capture accelerated packets
  C. SND is used to distribute packets among Firewall instances

  ---

  Explanation/Reference:

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_PerformanceTuning_WebAdmin/6731.htm

• Question 490:

  In which deployment is the security management server and Security Gateway installed on the same appliance?

  A. Bridge Mode
  B. Remote
  C. Standalone
  D. Distributed
  C. Standalone

  ---

  Explanation/Reference:

  Installing Standalone

  Standalone Deployment - The Security Management Server and the Security Gateway are installed on the same computer or appliance.

  

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Installation_and_Upgrade_Guide-webAdmin/89230.htm#o98246