CheckPoint 156-215.81.20 Online Practice Questions and Exam Preparation

CheckPoint 156-215.81.20 Online Questions & Answers

• Question 551:

  What kind of NAT enables Source Port Address Translation by default?

  A. Automatic Hide NAT
  B. Automatic Static NAT
  C. Manual Static NAT
  D. Manual Hide NAT
  A. Automatic Hide NAT

• Question 552:

  Which feature in R77 permits blocking specific IP addresses for a specified time period?

  A. Suspicious Activity Monitoring
  B. HTTP Methods
  C. Local Interface Spoofing
  D. Block Port Overflow
  A. Suspicious Activity Monitoring

• Question 553:

  What SmartEvent component creates events?

  A. Consolidation Policy
  B. Correlation Unit
  C. SmartEvent Policy
  D. SmartEvent GUI
  B. Correlation Unit

• Question 554:

  Which of the following is NOT a VPN routing option available in a star community?

  A. To satellites through center only
  B. To center, or through the center to other satellites, to Internet and other VPN targets
  C. To center and to other satellites through center
  D. To center only
  A. To satellites through center only
  D. To center only

  ---

  Explanation/Reference:

  SmartConsole

  For simple hubs and spokes (or if there is only one Hub), the easiest way is to configure a VPN star community in R80 SmartConsole:

  1. On the Star Community window, in the:

  a.

  Center Gateways section, select the Security Gateway that functions as the "Hub".

  b.

  Satellite Gateways section, select Security Gateways as the "spokes", or satellites.

  2. On the VPN Routing page, Enable VPN routing for satellites section, select one of these options:

  a.

  To center and to other Satellites through center - This allows connectivity between the Security Gateways, for example if the spoke Security Gateways are DAIP Security Gateways, and the Hub is a Security Gateway with a static IP

  address.

  b.

  To center, or through the center to other satellites, to internet and other VPN targets - This allows connectivity between the Security Gateways as well as the ability to inspect all communication passing through the Hub to the Internet.

  3.

  Create an appropriate Access Control Policy rule.

  4.

  NAT the satellite Security Gateways on the Hub if the Hub is used to route connections from Satellites to the Internet.

  The two Dynamic Objects (DAIP Security Gateways) can securely route communication through the Security Gateway with the static IP address.

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80BC_VPN/html_frameset.htm

• Question 555:

  The Firewall kernel is replicated multiple times, therefore:

  A. The Firewall kernel only touches the packet if the connection is accelerated
  B. The Firewall can run different policies per core
  C. The Firewall kernel is replicated only with new connections and deletes itself once the connection times out
  D. The Firewall can run the same policy on all cores
  D. The Firewall can run the same policy on all cores

• Question 556:

  You want to store the GAiA configuration in a file for later reference. What command should you use?

  A. write mem
  B. show config -f
  C. save config -o
  D. save configuration
  D. save configuration

  ---

  Explanation/Reference:

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk102234

• Question 557:

  Jennifer McHanry is CEO of ACME. She recently bought her own personal iPad. She wants use her iPad to access the internal Finance Web server. Because the iPad is not a member of the Active Directory domain, she cannot identify seamlessly with AD Query. However, she can enter her AD credentials in the Captive Portal and then get the same access as on her office computer. Her access to resources is based on rules in the R77 Firewall Rule Base.

  To make this scenario work, the IT administrator must:

  1) Enable Identity Awareness on a gateway and select Captive Portal as one of the Identity Sources.

  2) In the Portal Settings window in the User Access section, make sure that Name and password login is selected.

  3) Create a new rule in the Firewall Rule Base to let Jennifer McHanry access network destinations. Select accept as the Action.

  4) Install policy.

  Ms McHanry tries to access the resource but is unable. What should she do?

  A. Have the security administrator select the Action field of the Firewall Rule "Redirect HTTP connections to an authentication (captive) portal".
  B. Have the security administrator reboot the firewall.
  C. Have the security administrator select Any for the Machines tab in the appropriate Access Role.
  D. Install the Identity Awareness agent on her iPad.
  A. Have the security administrator select the Action field of the Firewall Rule "Redirect HTTP connections to an authentication (captive) portal".

• Question 558:

  Fill in the blanks: Gaia can be configured using the ______ or ______.

  A. GaiaUI; command line interface (serial console only)
  B. Gaia Interface; Gaia Ultimate Shell
  C. Command line interface; GAiA Portal
  D. Web Ultimate Interface; Gaia Interface (SSH)
  C. Command line interface; GAiA Portal

• Question 559:

  Log query results can be exported to what file format?

  A. Comma Separated Value (csv).
  B. Word Document (docx).
  C. Text (txt).
  D. Portable Document Format (pdf).
  A. Comma Separated Value (csv).

• Question 560:

  Fill in the blank: Authentication rules are defined for ____________.

  A. User groups
  B. Users using UserCheck
  C. Individual users
  D. All users in the database
  A. User groups

  ---

  Explanation/Reference:

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_SGW_WebAdmin/6721.htm