CheckPoint 156-215.81.20 Online Practice Questions and Exam Preparation

CheckPoint 156-215.81.20 Online Questions & Answers

• Question 51:

  You can see the following graphic:

  

  What is presented on it?

  A. Properties of personal .p12 certificate file issued for user John.
  B. Shared secret properties of John's password.
  C. VPN certificate properties of the John's gateway.
  D. Expired .p12 certificate properties for user John.
  A. Properties of personal .p12 certificate file issued for user John.

• Question 52:

  Fill in the blank: The R80 SmartConsole, SmartEvent GUI client, and _______ consolidate billions of logs and shows them as prioritized security events.

  A. SmartMonitor
  B. SmartView Web Application
  C. SmartReporter
  D. SmartTracker
  B. SmartView Web Application

  ---

  Explanation/Reference:

  Event Analysis with SmartEvent The SmartEvent Software Blade is a unified security event management and analysis solution that delivers real-time, graphical threat management information. SmartConsole, SmartView Web Application, and the SmartEvent GUI client consolidate billions of logs and show them as prioritized security events so you can immediately respond to security incidents, and do the necessary actions to prevent more attacks. You can customize the views to monitor the events that are most important to you. You can move from a high level view to detailed forensic analysis in a few clicks. With the free-text search and suggestions, you can quickly run data analysis and identify critical security events. Reference: https:// sc1.checkpoint.com/documents/R80/CP_R80_LoggingAndMonitoring/html_frameset.htm?topic=documents/R80/CP_R80_LoggingAndMonitoring/131915

• Question 53:

  Which of these components does NOT require a Security Gateway R77 license?

  A. Security Management Server
  B. Check Point Gateway
  C. SmartConsole
  D. SmartUpdate upgrading/patching
  C. SmartConsole

• Question 54:

  You are going to perform a major upgrade. Which back up solution should you use to ensure your database can be restored on that device?

  A. backup
  B. logswitch
  C. Database Revision
  D. snapshot
  D. snapshot

  ---

  Explanation/Reference:

  The snapshot creates a binary image of the entire root (lv_current) disk partition. This includes Check Point products, configuration, and operating system. Starting in R77.10, exporting an image from one machine and importing that image on

  another machine of the same type is supported.

  The log partition is not included in the snapshot. Therefore, any locally stored FireWall logs will not be saved.

  Reference:

  https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk108902

• Question 55:

  Which of the following technologies extracts detailed information from packets and stores that information in state tables?

  A. INSPECT Engine
  B. Stateful Inspection
  C. Packet Filtering
  D. Application Layer Firewall
  B. Stateful Inspection

  ---

  Explanation/Reference:

  Reference: https://www.checkpoint.com/smb/help/utm1/8.2/7080.htm

• Question 56:

  John Adams is an HR partner in the ACME organization. ACME IT wants to limit access to HR servers to designated IP addresses to minimize malware infection and unauthorized access risks. Thus, gateway policy permits access only from Join's desktop which is assigned an IP address 10.0.0.19 via DHCP.

  John received a laptop and wants to access the HR Web Server from anywhere in the organization. The IT department gave the laptop a static IP address, but the limits him to operating it only from his desk. The current Rule Base contains a

  rule that lets John Adams access the HR Web Server from his laptop. He wants to move around the organization and continue to have access to the HR Web Server.

  To make this scenario work, the IT administrator:

  1) Enables Identity Awareness on a gateway, selects AD Query as one of the Identity Sources.

  2) Adds an access role object to the Firewall Rule Base that lets John Adams PC access the HR Web Server from any machine and from any location.

  John plugged in his laptop to the network on a different network segment and he is not able to connect. How does he solve this problem?

  A. John should install the identity Awareness Agent
  B. The firewall admin should install the Security Policy
  C. John should lock and unlock the computer
  D. Investigate this as a network connectivity issue
  C. John should lock and unlock the computer

• Question 57:

  Kofi, the administrator of the ALPHA Corp network wishes to change the default Gaia WebUI Portal port number currently set on the default HTTPS port. Which CLISH commands are required to be able to change this TCP port?

  

  A. set web ssl-port
  B. set Gaia-portal
  C. set Gaia-portal https-port
  D. set web https-port
  A. set web ssl-port

  ---

  Explanation/Reference:

  In Clish

  A. Connect to command line on Security Gateway / each Cluster member.

  B. Log in to Clish.

  C. Set the desired port (e.g., port 4434): HostName> set web ssl-port

  D. Save the changes: HostName> save config

  E. Verify that the configuration was saved: [Expert@HostName]# grep 'httpd:ssl_port' /config/db/initial

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk83482

• Question 58:

  True or False: More than one administrator can log into the Security Management Server with SmartConsole with write permission at the same time.

  A. True, every administrator works on a different database that is independent of the other administrators
  B. False, only one administrator can login with write permission
  C. True, every administrator works in a session that is independent of the other administrators
  D. False, this feature has to be enabled in the Global Properties
  C. True, every administrator works in a session that is independent of the other administrators

• Question 59:

  Look at the following screenshot and select the BEST answer.

  

  A. Clients external to the Security Gateway can download archive files from FTP_Ext server using FTP.
  B. Internal clients can upload and download any-files to FTP_Ext-server using FTP.
  C. Internal clients can upload and download archive-files to FTP_Ext server using FTP.
  D. Clients external to the Security Gateway can upload any files to the FTP_Ext-server using FTP.
  A. Clients external to the Security Gateway can download archive files from FTP_Ext server using FTP.

• Question 60:

  Which of the following technologies extracts detailed information from packets and stores that information in different tables?

  A. Application Layer Firewall
  B. Packet Filtering
  C. Next-Generation Firewall
  D. Stateful Inspection
  D. Stateful Inspection