CheckPoint 156-215.81.20 Online Practice Questions and Exam Preparation

CheckPoint 156-215.81.20 Online Questions & Answers

• Question 491:

  Check Point licenses come in two forms. What are those forms?

  A. Security Gateway and Security Management.
  B. On-premise and Public Cloud.
  C. Central and Local.
  D. Access Control and Threat Prevention.
  C. Central and Local.

• Question 492:

  Fill in the blank: A _________ VPN deployment is used to provide remote users with secure access to internal corporate resources by authenticating the user through an internet browser.

  A. Clientless remote access
  B. Clientless direct access
  C. Client-based remote access
  D. Direct access
  A. Clientless remote access

  ---

  Explanation/Reference:

  Clientless - Users connect through a web browser and use HTTPS connections. Clientless solutions usually supply access to web-based corporate resources. Reference: https://sc1.checkpoint.com/documents/R80/CP_R80BC_Firewall/html_frameset.htm?topic=documents/R80/CP_R80BC_Firewall/92704

• Question 493:

  Which statement describes what Identity Sharing is in Identity Awareness?

  A. Management servers can acquire and share identities with Security Gateways
  B. Users can share identities with other users
  C. Security Gateways can acquire and share identities with other Security Gateways
  D. Administrators can share identities with other administrators
  C. Security Gateways can acquire and share identities with other Security Gateways

• Question 494:

  You have two rules, ten users, and two user groups in a Security Policy. You create database version 1 for this configuration. You then delete two existing users and add a new user group. You modify one rule and add two new rules to the Rule Base. You save the Security Policy and create database version 2. After a while, you decide to roll back to version 1 to use the Rule Base, but you want to keep your user database. How can you do this?

  A. Run fwm dbexport -1 filename. Restore the database. Then, run fwm dbimport -1 filename to import the users.
  B. Run fwm_dbexport to export the user database. Select restore the entire database in the Database Revision screen. Then, run fwm_dbimport.
  C. Restore the entire database, except the user database, and then create the new user and user group.
  D. Restore the entire database, except the user database.
  D. Restore the entire database, except the user database.

• Question 495:

  After the initial installation the First Time Configuration Wizard should be run. Select the BEST answer.

  A. First Time Configuration Wizard can be run from the Unified SmartConsole.
  B. First Time Configuration Wizard can be run from the command line or from the WebUI.
  C. First time Configuration Wizard can only be run from the WebUI.
  D. Connection to the internet is required before running the First Time Configuration wizard.
  B. First Time Configuration Wizard can be run from the command line or from the WebUI.

  ---

  Explanation/Reference:

  Check Point Security Gateway and Check Point Security Management require running the First Time Configuration Wizard in order to be configured correctly. The First Time Configuration Wizard is available in Gaia Portal and also through

  CLI.

  To invoke the First Time Configuration Wizard through CLI, run the config_system command from the Expert shell.

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk111119

• Question 496:

  The Online Activation method is available for Check Point manufactured appliances. How does the administrator use the Online Activation method?

  A. The cpinfo command must be run on the firewall with the switch -online-license-activation.
  B. Using the Gaia First Time Configuration Wizard, the appliance connects to the Check Point User Center and downloads all necessary licenses and contracts.
  C. The SmartLicensing GUI tool must be launched from the SmartConsole for the Online Activation tool to start automatically.
  D. No action is required if the firewall has internet access and a DNS server to resolve domain names.
  B. Using the Gaia First Time Configuration Wizard, the appliance connects to the Check Point User Center and downloads all necessary licenses and contracts.

• Question 497:

  One of major features in SmartConsole is concurrent administration. Which of the following is NOT possible considering that AdminA, AdminB and AdminC are editing the same Security Policy?

  A. AdminB sees a pencil icon next the rule that AdminB is currently editing.
  B. AdminA, AdminB and AdminC are editing three different rules at the same time.
  C. AdminA and AdminB are editing the same rule at the same time.
  D. AdminC sees a lock icon which indicates that the rule is locked for editing by another administrator.
  C. AdminA and AdminB are editing the same rule at the same time.

• Question 498:

  In which scenario will an administrator need to manually define Proxy ARP?

  A. When they configure an "Automatic Static NAT" which translates to an IP address that does not belong to one of the firewall's interfaces.
  B. When they configure an "Automatic Hide NAT" which translates to an IP address that does not belong to one of the firewall's interfaces.
  C. When they configure a "Manual Static NAT" which translates to an IP address that does not belong to one of the firewall's interfaces.
  D. When they configure a "Manual Hide NAT" which translates to an IP address that belongs to one of the firewall's interfaces.
  C. When they configure a "Manual Static NAT" which translates to an IP address that does not belong to one of the firewall's interfaces.

• Question 499:

  Which of the below is the MOST correct process to reset SIC from SmartDashboard?

  A. Run cpconfig, and click Reset.
  B. Click the Communication button for the firewall object, then click Reset. Run cpconfig on the gateway and type a new activation key.
  C. Run cpconfig, and select Secure Internal Communication > Change One Time Password.
  D. Click Communication > Reset on the Gateway object, and type a new activation key.
  B. Click the Communication button for the firewall object, then click Reset. Run cpconfig on the gateway and type a new activation key.

• Question 500:

  NAT can NOT be configured on which of the following objects?

  A. HTTP Logical Server
  B. Gateway
  C. Address Range
  D. Host
  A. HTTP Logical Server