CheckPoint 156-215.81.20 Online Practice Questions and Exam Preparation

CheckPoint 156-215.81.20 Online Questions & Answers

• Question 581:

  What component of R80 Management is used for indexing?

  A. DBSync
  B. API Server
  C. fwm
  D. SOLR
  D. SOLR

  ---

  Explanation/Reference:

  Reference: https://www.checkpoint.com/downloads/product-related/r80.10-mgmt-architecture-overview.pdf

• Question 582:

  Which set of objects have an Authentication tab?

  A. Templates, Users
  B. Users, Networks
  C. Users, User Group
  D. Networks, Hosts
  A. Templates, Users

• Question 583:

  Which software blade does NOT accompany the Threat Prevention policy?

  A. Anti-virus
  B. IPS
  C. Threat Emulation
  D. Application Control and URL Filtering
  D. Application Control and URL Filtering

  ---

  Explanation/Reference:

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Firewall_WebAdmin/92707.htm

• Question 584:

  Office mode means that:

  A. SecureID client assigns a routable MAC address. After the user authenticates for a tunnel, the VPN gateway assigns a routable IP address to the remote client.
  B. Users authenticate with an Internet browser and use secure HTTPS connection.
  C. Local ISP (Internet service Provider) assigns a non-routable IP address to the remote user.
  D. Allows a security gateway to assign a remote client an IP address. After the user authenticates for a tunnel, the VPN gateway assigns a routable IP address to the remote client.
  D. Allows a security gateway to assign a remote client an IP address. After the user authenticates for a tunnel, the VPN gateway assigns a routable IP address to the remote client.

  ---

  Explanation/Reference:

  Office Mode enables a Security Gateway to assign internal IP addresses to SecureClient users. This IP address will not be exposed to the public network, but is encapsulated inside the VPN tunnel between the client and the Gateway. The IP to be used externally should be assigned to the client in the usual way by the Internet Service provider used for the Internet connection. This mode allows a Security Administrator to control which addresses are used by remote clients inside the local network and makes them part of the local network. The mechanism is based on an IKE protocol extension through which the Security Gateway can send an internal IP address to the client. Reference: https:// supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk30545

• Question 585:

  For Automatic Hide NAT rules created by the administrator what is a TRUE statement?

  A. Source Port Address Translation (PAT) is enabled by default.
  B. Source Port Address Translation (PAT) is disabled by default.
  C. Automatic NAT rules are supported for Network objects only.
  D. Automatic NAT rules are supported for Host objects only.
  A. Source Port Address Translation (PAT) is enabled by default.

• Question 586:

  Using ClusterXL, what statement is true about the Sticky Decision Function?

  A. Can only be changed for Load Sharing implementations
  B. All connections are processed and synchronized by the pivot
  C. Is configured using cpconfig
  D. Is only relevant when using SecureXL
  A. Can only be changed for Load Sharing implementations

• Question 587:

  Can a Check Point gateway translate both source IP address and destination IP address in a given packet?

  A. Yes.
  B. No.
  C. Yes, but only when using Automatic NAT.
  D. Yes, but only when using Manual NAT.
  A. Yes.

• Question 588:

  In SmartView Tracker, which rule shows when a packet is dropped due to anti-spoofing?

  A. Rule 0
  B. Blank field under Rule Number
  C. Rule 1
  D. Cleanup Rule
  A. Rule 0

• Question 589:

  How do logs change when the "Accounting" tracking option is enabled on a traffic rule?

  A. Involved traffic logs are updated every 10 minutes to show how much data has passed on the connection.
  B. Involved traffic logs will be forwarded to a log server.
  C. Provides additional information to the connected user.
  D. Provides log details view email to the Administrator.
  A. Involved traffic logs are updated every 10 minutes to show how much data has passed on the connection.

• Question 590:

  Fill in the blank: Backup and restores can be accomplished through _____.

  A. CLI, SmartUpdate, or SmartBackup
  B. SmartUpdate, SmartBackup, or SmartConsole
  C. SmartConsole, WebUI, or CLI
  D. WebUI, CLI, or SmartUpdate
  C. SmartConsole, WebUI, or CLI