CheckPoint 156-215.81.20 Online Practice Questions and Exam Preparation

CheckPoint 156-215.81.20 Online Questions & Answers

• Question 561:

  Which part of SmartConsole allows administrators to add, edit, delete, and clone objects?

  A. Object Explorer
  B. Object Navigator
  C. Object Editor
  D. Object Browser
  A. Object Explorer

• Question 562:

  What is NOT an advantage of Packet Filtering?

  A. Low Security and No Screening above Network Layer
  B. Application Independence
  C. High Performance
  D. Scalability
  A. Low Security and No Screening above Network Layer

  ---

  Explanation/Reference:

  Packet Filter Advantages and Disadvantages

  

  Reference: https://www.checkpoint.com/smb/help/utm1/8.2/7078.htm

• Question 563:

  Access roles allow the firewall administrator to configure network access according to:

  A. a combination of computer groups and network
  B. users and user groups
  C. all of above
  D. remote access clients
  C. all of above

  ---

  Explanation/Reference:

  To create an access role:

  1.

  Select Users and Administrators in the Objects Tree.

  2.

  Right-click Access Roles > New Access Role.

  The Access Role window opens.

  3.

  Enter a Name and Comment (optional) for the access role.

  4.

  In the Networks tab, select one of these:

  Any network

  Specific networks - Click the plus sign and select a network.

  Your selection is shown in the Networks node in the Role Preview pane.

  5.

  In the Users tab, select one of these:

  Any user

  All identified users - Includes users identified by a supported authentication method (internal users, AD users or LDAP users).

  Specific users - Click the plus sign.

  A window opens. You can search for Active Directory entries or select them from the list.

  6.

  In the Machines tab, select one of these:

  Any machine

  All identified machines - Includes machines identified by a supported authentication method (AD).

  Specific machines - Click the plus sign.

  You can search for AD entries or select them from the list.

  7.

  Optional: For computers that use Full Identity Agents, from the Machines tab select Enforce IP spoofing protection.

  8.

  Click OK.

  The access role is added to the Users and Administrators tree.

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Firewall_WebAdmin/92705.htm

• Question 564:

  Which Check Point software blade provides visibility of users, groups and machines while also providing access control through identity-based policies?

  A. Firewall
  B. Identity Awareness
  C. Application Control
  D. URL Filtering
  B. Identity Awareness

  ---

  Explanation/Reference:

  Check Point Identity Awareness Software Blade provides granular visibility of users, groups and machines, providing unmatched application and access control through the creation of accurate, identity-based policies. Centralized

  management and monitoring allows for policies to be managed from a single, unified console.

  Reference: https://www.checkpoint.com/products/identity-awareness-software-blade/

• Question 565:

  Which Check Point software blade provides protection from zero-day and undiscovered threats?

  A. Firewall
  B. Threat Emulation
  C. Application Control
  D. Threat Extraction
  B. Threat Emulation

• Question 566:

  John is using Management HA. Which Smartcenter should be connected to for making changes?

  A. secondary Smartcenter
  B. active Smartcenter
  C. connect virtual IP of Smartcenter HA
  D. primary Smartcenter
  B. active Smartcenter

• Question 567:

  To enforce the Security Policy correctly, a Security Gateway requires:

  A. a routing table
  B. awareness of the network topology
  C. a Demilitarized Zone
  D. a Security Policy install
  B. awareness of the network topology

  ---

  Explanation/Reference:

  The network topology represents the internal network (both the LAN and the DMZ) protected by the gateway. The gateway must be aware of the layout of the network topology to:

  Correctly enforce the Security Policy.

  Ensure the validity of IP addresses for inbound and outbound traffic.

  Configure a special domain for Virtual Private Networks.

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_SecMan_WebAdmin/html_frameset.htm?topic=documents/R76/CP_R76_SecMan_WebAdmin/118037

• Question 568:

  Which of the following is TRUE regarding Gaia command line?

  A. Configuration changes should be done in mgmt_cli and use CLISH for monitoring, Expert mode is used only for OS level tasks.
  B. Configuration changes should be done in expert-mode and CLISH is used for monitoring.
  C. Configuration changes should be done in mgmt-cli and use expert-mode for OS-level tasks.
  D. All configuration changes should be made in CLISH and expert-mode should be used for OS-level tasks.
  D. All configuration changes should be made in CLISH and expert-mode should be used for OS-level tasks.

• Question 569:

  What is the BEST command to view configuration details of all interfaces in Gaia CLISH?

  A. ifconfig -a
  B. show interfaces
  C. show interfaces detail
  D. show configuration interface
  D. show configuration interface

• Question 570:

  Fill in the blanks: In the Network policy layer, the default action for the Implied last rule is ________ all traffic. However, in the Application Control policy layer, the default action is ________ all traffic.

  A. Accept; redirect
  B. Accept; drop
  C. Redirect; drop
  D. Drop; accept
  D. Drop; accept