CheckPoint 156-215.81.20 Online Practice Questions and Exam Preparation

CheckPoint 156-215.81.20 Online Questions & Answers

• Question 501:

  Which option, when applied to a rule, allows traffic to VPN gateways in specific VPN communities?

  A. All Connections (Clear or Encrypted)
  B. Accept all encrypted traffic
  C. Specific VPN Communities
  D. All Site-to-Site VPN Communities
  B. Accept all encrypted traffic

  ---

  Explanation/Reference:

  The first rule is the automatic rule for the Accept All Encrypted Traffic feature. The Firewalls for the Security Gateways in the BranchOffices and LondonOffices VPN communities allow all VPN traffic from hosts in clients in these communities. Traffic to the Security Gateways is dropped. This rule is installed on all Security Gateways in these communities.

  2.

  Site to site VPN - Connections between hosts in the VPN domains of all Site to Site VPN communities are allowed. These are the only protocols that are allowed: FTP, HTTP, HTTPS and SMTP.

  3.

  Remote access - Connections between hosts in the VPN domains of RemoteAccess VPN community are allowed. These are the only protocols that are allowed: HTTP, HTTPS, and IMAP.

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Firewall_WebAdmin/92709.htm

• Question 502:

  A security zone is a group of one or more network interfaces from different centrally managed gateways. What is considered part of the zone?

  A. Security Zones are not supported by Check Point firewalls.
  B. The firewall rule can be configured to include one or more subnets in a zone.
  C. The zone is based on the network topology and determined according to where the interface leads to.
  D. The local directly connected subnet defined by the subnet IP and subnet mask.
  C. The zone is based on the network topology and determined according to where the interface leads to.

• Question 503:

  Choose what BEST describes users on Gaia Platform.

  A. There is one default user that can be deleted.
  B. There are two default users and neither can be deleted.
  C. There is only one default user that cannot be deleted.
  D. There are two default users and one cannot be deleted.
  B. There are two default users and neither can be deleted.

• Question 504:

  AdminA and AdminB are both logged in on SmartConsole. What does it mean if AdminB sees a locked icon on a rule? Choose the BEST answer.

  A. Rule is locked by AdminA, because the save bottom has not been press.
  B. Rule is locked by AdminA, because an object on that rule is been edited.
  C. Rule is locked by AdminA, and will make it available if session is published.
  D. Rule is locked by AdminA, and if the session is saved, rule will be available
  C. Rule is locked by AdminA, and will make it available if session is published.

• Question 505:

  What port is used for delivering logs from the gateway to the management server?

  A. Port 258
  B. Port 18209
  C. Port 257
  D. Port 981
  C. Port 257

• Question 506:

  Which of the following is considered to be the more secure and preferred VPN authentication method?

  A. Password
  B. Certificate
  C. MD5
  D. Pre-shared secret
  B. Certificate

  ---

  Explanation/Reference:

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_VPN_AdminGuide/13894.htm

• Question 507:

  Where can alerts be viewed?

  A. Alerts can be seen in SmartView Monitor.
  B. Alerts can be seen in SmartUpdate.
  C. Alerts can be seen in the Threat Prevention policy.
  D. Alerts can be seen from the CLI of the gateway.
  A. Alerts can be seen in SmartView Monitor.

• Question 508:

  True or False: In R80, more than one administrator can login to the Security Management Server with write permission at the same time.

  A. False, this feature has to be enabled in the Global Properties.
  B. True, every administrator works in a session that is independent of the other administrators.
  C. True, every administrator works on a different database that is independent of the other administrators.
  D. False, only one administrator can login with write permission.
  B. True, every administrator works in a session that is independent of the other administrators.

  ---

  Explanation/Reference:

  More than one administrator can connect to the Security Management Server at the same time. Every administrator has their own username, and works in a session that is independent of the other administrators. Reference: https:// sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm?topic=documents/R80/CP_R80_SecMGMT/124265

• Question 509:

  What action can be performed from SmartUpdate R77?

  A. upgrade_export
  B. fw stat -1
  C. cpinfo
  D. remote_uninstall_verifier
  C. cpinfo

• Question 510:

  What are the two elements of address translation rules?

  A. Original packet and translated packet
  B. Manipulated packet and original packet
  C. Untranslated packet and manipulated packet
  D. Translated packet and untranslated packet
  A. Original packet and translated packet