CheckPoint Checkpoint Certifications 156-215.81.20 Questions & Answers

• Question 501:

  By default, which port does the WebUI listen on?

  A. 80

  B. 4434

  C. 443

  D. 8080

  Correct Answer: C

  To configure Security Management Server on Gaia:

  Open a browser to the WebUI: https://

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_Gaia_IUG/html_frameset.htm?topic=documents/R80/CP_R80_Gaia_IUG/132120

• Question 502:

  When doing a Stand-Alone Installation, you would install the Security Management Server with which other Check Point architecture component?

  A. None, Security Management Server would be installed by itself.

  B. SmartConsole

  C. SecureClient

  D. Security Gateway

  Correct Answer: D

  There are different deployment scenarios for Check Point software products.

  Standalone Deployment - The Security Management Server and the Security Gateway are installed on the same computer or appliance.

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Installation_and_Upgrade_Guide-webAdmin/86429.htm

• Question 503:

  Which options are given on features, when editing a Role on Gaia Platform?

  A. Read/Write, Read Only

  B. Read/Write, Read only, None

  C. Read/Write, None

  D. Read Only, None

  Correct Answer: B

  Roles

  Role-based administration (RBA) lets you create administrative roles for users. With RBA, an administrator can allow Gaia users to access specified features by including those features in a role and assigning that role to users. Each role can

  include a combination of administrative (read/write) access to some features, monitoring (read-only) access to other features, and no access to other features.

  You can also specify which access mechanisms (WebUI or the CLI) are available to the user.

  

  Note - When users log in to the WebUI, they see only those features that they have read-only or read/write access to. If they have read-only access to a feature, they can see the settings pages, but cannot change the settings.

  Gaia includes these predefined roles:

  1.

  adminRole - Gives the user read/write access to all features.

  2.

  monitorRole- Gives the user read-only access to all features. You cannot delete or change the predefined roles.

  

  Note - Do not define a new user for external users. An external user is one that is defined on an authentication server (such as RADIUS or TACACS) and not on the local Gaia system. Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_Gaia_AdminWebAdminGuide/html_frameset.htm?topic=documents/R77/CP_R77_Gaia_AdminWebAdminGuide/75930

• Question 504:

  What is the default time length that Hit Count Data is kept?

  A. 3 month

  B. 4 weeks

  C. 12 months

  D. 6 months

  Correct Answer: D

  Keep Hit Count data up to - Select one of the time range options. The default is 6 months. Data is kept in the Security Management Server database for this period and is shown in the Hits column. Reference: http://dl3.checkpoint.com/paid/74/74d596decb6071a4ee642fbdaae7238f/CP_R80_SecurityManagement_AdminGuide.pdf?HashKey=1479584563_6f823c8ea1514609148aa4fec5425db2andxtn=.pdf

• Question 505:

  Choose the Best place to find a Security Management Server backup file named backup_fw, on a Check Point Appliance.

  A. /var/log/Cpbackup/backups/backup/backup_fw.tgs

  B. /var/log/Cpbackup/backups/backup/backup_fw.tar

  C. /var/log/Cpbackup/backups/backups/backup_fw.tar

  D. /var/log/Cpbackup/backups/backup_fw.tgz

  Correct Answer: D

  Gaia's Backup feature allows backing up the configuration of the Gaia OS and of the Security Management server database, or restoring a previously saved configuration. The configuration is saved to a .tgz file in the following directory:

  

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal?action=portlets.SearchResultMainActionandeventSubmit_doGoviewsolutiondetails=andsolutionid=sk91400

• Question 506:

  With which command can you view the running configuration of Gaia-based system.

  A. show conf-active

  B. show configuration active

  C. show configuration

  D. show running-configuration

  Correct Answer: C

• Question 507:

  Which of the following is TRUE regarding Gaia command line?

  A. Configuration changes should be done in mgmt_cli and use CLISH for monitoring, Expert mode is used only for OS level tasks.

  B. Configuration changes should be done in expert-mode and CLISH is used for monitoring.

  C. Configuration changes should be done in mgmt-cli and use expert-mode for OS-level tasks.

  D. All configuration changes should be made in CLISH and expert-mode should be used for OS-level tasks.

  Correct Answer: D

• Question 508:

  If there are two administrators logged in at the same time to the SmartConsole, and there are objects locked for editing, what must be done to make them available to other administrators? Choose the BEST answer.

  A. Publish or discard the session.

  B. Revert the session.

  C. Save and install the Policy.

  D. Delete older versions of database.

  Correct Answer: A

  To make changes available to all administrators, and to unlock the objects and rules that are being edited, the administrator must publish the session. To make your changes available to other administrators, and to save the database before installing a policy, you must publish the session. When you publish a session, a new database version is created. When you select Install Policy, you are prompted to publish all unpublished changes. You cannot install a policy if the included changes are not published.

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm?topic=documents/R80/CP_R80_SecMGMT/126197

• Question 509:

  Which one of the following is the preferred licensing model? Select the Best answer.

  A. Local licensing because it ties the package license to the IP-address of the gateway and has no dependency of the Security Management Server.

  B. Central licensing because it ties the package license to the IP-address of the Security Management Server and has no dependency of the gateway.

  C. Local licensing because it ties the package license to the MAC-address of the gateway management interface and has no Security Management Server dependency.

  D. Central licensing because it ties the package license to the MAC-address of the Security Management Server Mgmt-interface and has no dependency of the gateway.

  Correct Answer: B

  Central License

  A Central License is a license attached to the Security Management server IP address, rather than the gateway IP address. The benefits of a Central License are:

  1.

  Only one IP address is needed for all licenses.

  2.

  A license can be taken from one gateway and given to another.

  3.

  The new license remains valid when changing the gateway IP address. There is no need to create and install a new license. Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Installation_and_Upgrade_Guide-webAdmin/13128.htm#o13527

• Question 510:

  Tom has been tasked to install Check Point R80 in a distributed deployment. Before Tom installs the systems this way, how many machines will he need if he does NOT include a SmartConsole machine in his calculations?

  A. One machine, but it needs to be installed using SecurePlatform for compatibility purposes.

  B. One machine

  C. Two machines D. Three machines

  Correct Answer: C

  One for Security Management Server and the other one for the Security Gateway.