CheckPoint 156-215.81.20 Online Practice Questions and Exam Preparation

CheckPoint 156-215.81.20 Online Questions & Answers

• Question 531:

  Mesh and Star are two types of VPN topologies. Which statement below is TRUE about these types of communities?

  A. A star community requires Check Point gateways, as it is a Check Point proprietary technology.
  B. In a star community, satellite gateways cannot communicate with each other.
  C. In a mesh community, member gateways cannot communicate directly with each other.
  D. In a mesh community, all members can create a tunnel with any other member.
  D. In a mesh community, all members can create a tunnel with any other member.

• Question 532:

  View the rule below. What does the lock-symbol in the left column mean? Select the BEST answer.

  

  A. The current administrator has read-only permissions to Threat Prevention Policy.
  B. Another user has locked the rule for editing.
  C. Configuration lock is present. Click the lock symbol to gain read-write access.
  D. The current administrator is logged in as read-only because someone else is editing the policy.
  B. Another user has locked the rule for editing.

  ---

  Explanation/Reference:

  Administrator Collaboration More than one administrator can connect to the Security Management Server at the same time. Every administrator has their own username, and works in a session that is independent of the other administrators. When an administrator logs in to the Security Management Server through SmartConsole, a new editing session starts. The changes that the administrator makes during the session are only available to that administrator. Other administrators see a lock icon on object and rules that are being edited. To make changes available to all administrators, and to unlock the objects and rules that are being edited, the administrator must publish the session. Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/ html_frameset.htm?topic=documents/R80/CP_R80_SecMGMT/124265

• Question 533:

  How many layers make up the TCP/IP model?

  A. 6
  B. 4
  C. 7
  D. 2
  B. 4

• Question 534:

  MyCorp has the following NAT rules. You need to disable the NAT function when Alpha-internal networks try to reach the Google DNS (8.8.8.8) server. What can you do in this case?

  A. Use manual NAT rule to make an exception
  B. Use the NAT settings in the Global Properties
  C. Disable NAT inside the VPN community
  D. Use network exception in the Alpha-internal network object
  D. Use network exception in the Alpha-internal network object

• Question 535:

  Check Point APIs allow system engineers and developers to make changes to their organization's security policy with CLI tools and Web Services for all of the following except:

  A. Create new dashboards to manage 3rd party task
  B. Create products that use and enhance 3rd party solutions
  C. Execute automated scripts to perform common tasks
  D. Create products that use and enhance the Check Point Solution
  A. Create new dashboards to manage 3rd party task

  ---

  Explanation/Reference:

  Reference: http://dl3.checkpoint.com/paid/29/29532b9eec50d0a947719ae631f640d0/CP_R80_CheckPoint_API_ReferenceGuide.pdf?HashKey=1517081623_70199443034f806cf2dd0a7ba15f201candxtn=.pdf

• Question 536:

  Which of the following cannot be configured in an Access Role Object?

  A. Users
  B. Networks
  C. Time
  D. Machines
  C. Time

  ---

  Explanation/Reference:

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Firewall_WebAdmin/92705.htm

• Question 537:

  A client has created a new Gateway object that will be managed at a remote location. When the client attempts to install the Security Policy to the new Gateway object, the object does not appear in the Install On check box. What should you look for?

  A. Secure Internal Communications (SIC) not configured for the object.
  B. A Gateway object created using the Check Point > Externally Managed VPN Gateway option from the Network Objects dialog box.
  C. Anti-spoofing not configured on the interfaces on the Gateway object.
  D. A Gateway object created using the Check Point > Secure Gateway option in the network objects, dialog box, but still needs to configure the interfaces for the Security Gateway object.
  B. A Gateway object created using the Check Point > Externally Managed VPN Gateway option from the Network Objects dialog box.

• Question 538:

  What are the three conflict resolution rules in the Threat Prevention Policy Layers?

  A. Conflict on action, conflict on exception, and conflict on settings
  B. Conflict on scope, conflict on settings, and conflict on exception
  C. Conflict on settings, conflict on address, and conflict on exception
  D. Conflict on action, conflict on destination, and conflict on settings
  C. Conflict on settings, conflict on address, and conflict on exception

• Question 539:

  Ken wants to obtain a configuration lock from other administrator on R80 Security Management Server. He can do this via WebUI or a via CLI. Which command should be use in CLI? Choose the correct answer.

  A. remove database lock
  B. The database feature has one command lock database override.
  C. override database lock
  D. The database feature has two commands: lock database override and unlock database. Both will work.
  D. The database feature has two commands: lock database override and unlock database. Both will work.

  ---

  Explanation/Reference:

  Use the database feature to obtain the configuration lock. The database feature has two commands:

  1.

  lock database [override].

  2.

  unlock database

  The commands do the same thing: obtain the configuration lock from another administrator.

  

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Gaia_WebAdmin/75697.htm#o73091

• Question 540:

  Fill in the blank: The command __________ provides the most complete restoration of a R80 configuration.

  A. upgrade_import
  B. cpconfig
  C. fwm dbimport -p
  D. cpinfo -recover
  A. upgrade_import

  ---

  Explanation/Reference:

  (Should be "migrate import")

  "migrate import" Restores backed up configuration for R80 version, in previous versions the command was " upgrade_import ".

  Reference: http://dl3.checkpoint.com/paid/08/08586e2852acc054809517b267402a35/CP_R80_Gaia_InstallationAndUpgradeGuide.pdf?HashKey=1479700086_4553ede4b53a7882cd8052eed7c347beandxtn=.pdf