CheckPoint Checkpoint Certifications 156-215.81.20 Questions & Answers

• Question 591:

  Which of the following is NOT an element of VPN Simplified Mode and VPN Communities?

  A. "Encrypt" action in the Rule Base

  B. Permanent Tunnels

  C. "VPN" column in the Rule Base

  D. Configuration checkbox "Accept all encrypted traffic"

  Correct Answer: A

  Migrating from Traditional Mode to Simplified Mode

  To migrate from Traditional Mode VPN to Simplified Mode:

  1.

  On the Global Properties > VPN page, select one of these options: Simplified mode to all new Firewall Policies Traditional or Simplified per new Firewall Policy

  2.

  Click OK.

  3.

  From the R80 SmartConsole Menu, select Manage policies.

  The Manage Policies window opens.

  4.

  Click New.

  The New Policy window opens.

  5.

  Give a name to the new policy and select Access Control.

  In the Security Policy Rule Base, a new column marked VPN shows and the Encrypt option is no longer available in the Action column. You are now working in Simplified Mode.

  Reference: http://dl3.checkpoint.com/paid/05/05e695b2012b4fd1d2bdfeccecd29290/CP_R80BC_VPN_AdminGuide.pdf?HashKey=1479823792_55fbc10656c87db4fcf742f4899ba90dandxtn=.pdf

• Question 592:

  Fill in the blanks: A Check Point software license consists of a _______ and _______ .

  A. Software container; software package

  B. Software blade; software container

  C. Software package; signature

  D. Signature; software blade

  Correct Answer: B

  Check Point's licensing is designed to be scalable and modular. To this end, Check Point offers both predefined packages as well as the ability to custom build a solution tailored to the needs of the Network Administrator. This is accomplished by the use of the following license components:

  1.

  Software Blades

  2.

  Container Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk11054

• Question 593:

  Fill in the blank: Once a license is activated, a ________ should be installed.

  A. License Management file

  B. Security Gateway Contract file

  C. Service Contract file

  D. License Contract file

  Correct Answer: C

  Service Contract File Following the activation of the license, a Service Contract File should be installed. This file contains important information about all subscriptions purchased for a specific device and is installed via SmartUpdate. A detailed explanation of the Service Contract File can be found in sk33089. Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk11054

• Question 594:

  Which policy type is used to enforce bandwidth and traffic control rules?

  A. Threat Emulation

  B. Access Control

  C. QoS

  D. Threat Prevention

  Correct Answer: C

  Check Point's QoS Solution QoS is a policy-based QoS management solution from Check Point Software Technologies Ltd., satisfies your needs for a bandwidth management solution. QoS is a unique, software-only based application that manages traffic end-to-end across networks, by distributing enforcement throughout network hardware and software. Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_QoS_AdminGuide/index.html

• Question 595:

  Bob and Joe both have Administrator Roles on their Gaia Platform. Bob logs in on the WebUI and then Joe logs in through CLI. Choose what BEST describes the following scenario, where Bob and Joe are both logged in:

  A. When Joe logs in, Bob will be log out automatically.

  B. Since they both are log in on different interfaces, they both will be able to make changes.

  C. If Joe tries to make changes, he won't, database will be locked.

  D. Bob will be prompt that Joe logged in.

  Correct Answer: C

• Question 596:

  Fill in the blank: When LDAP is integrated with Check Point Security Management, it is then referred to as _______

  A. UserCheck

  B. User Directory

  C. User Administration

  D. User Center

  Correct Answer: B

  Check Point User Directory integrates LDAP, and other external user management technologies, with the Check Point solution. If you have a large user count, we recommend that you use an external user management database such as LDAP for enhanced Security Management Server performance.

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm?topic=documents/R80/CP_R80_SecMGMT/118981

• Question 597:

  Which Check Point software blade provides protection from zero-day and undiscovered threats?

  A. Firewall

  B. Threat Emulation

  C. Application Control

  D. Threat Extraction

  Correct Answer: B

• Question 598:

  Which of the completed statements is NOT true? The WebUI can be used to manage user accounts and:

  A. assign privileges to users.

  B. edit the home directory of the user.

  C. add users to your Gaia system.

  D. assign user rights to their home directory in the Security Management Server

  Correct Answer: D

  Users

  Use the WebUI and CLI to manage user accounts. You can:

  1.

  Add users to your Gaia system.

  2.

  Edit the home directory of the user.

  3.

  Edit the default shell for a user.

  4.

  Give a password to a user.

  5.

  Give privileges to users.

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Gaia_WebAdmin/73101.htm

• Question 599:

  Look at the following screenshot and select the BEST answer.

  

  A. Clients external to the Security Gateway can download archive files from FTP_Ext server using FTP.

  B. Internal clients can upload and download any-files to FTP_Ext-server using FTP.

  C. Internal clients can upload and download archive-files to FTP_Ext server using FTP.

  D. Clients external to the Security Gateway can upload any files to the FTP_Ext-server using FTP.

  Correct Answer: A

• Question 600:

  Fill in the blanks: A security Policy is created in _________ , stored in the _________ , and Distributed to the various __________ .

  A. Rule base, Security Management Server, Security Gateways

  B. SmartConsole, Security Gateway, Security Management Servers

  C. SmartConsole, Security Management Server, Security Gateways

  D. The Check Point database, SmartConsole, Security Gateways

  Correct Answer: C