CheckPoint 156-215.81.20 Online Practice Questions and Exam Preparation

CheckPoint 156-215.81.20 Online Questions & Answers

• Question 621:

  Fill in the blanks: VPN gateways authenticate using ___________ and ___________ .

  A. Passwords; tokens
  B. Certificates; pre-shared secrets
  C. Certificates; passwords
  D. Tokens; pre-shared secrets
  B. Certificates; pre-shared secrets

  ---

  Explanation/Reference:

  VPN gateways authenticate using Digital Certificates and Pre-shared secrets.

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_VPN_AdminGuide/85469.htm

• Question 622:

  Your internal networks 10.1.1.0/24, 10.2.2.0/24 and 192.168.0.0/16 are behind the Internet Security Gateway. Considering that Layer 2 and Layer 3 setup is correct, what are the steps you will need to do in SmartConsole in order to get the connection working?

  A. 1. Define an accept rule in Security Policy. 2. Define Security Gateway to hide all internal networks behind the gateway's external IP. 3. Publish and install the policy.
  B. 1. Define an accept rule in Security Policy. 2. Define automatic NAT for each network to NAT the networks behind a public IP. 3. Publish the policy.
  C. 1. Define an accept rule in Security Policy. 2. Define automatic NAT for each network to NAT the networks behind a public IP. 3. Publish and install the policy.
  D. 1. Define an accept rule in Security Policy. 2. Define Security Gateway to hide all internal networks behind the gateway's external IP. 3. Publish the policy.
  C. 1. Define an accept rule in Security Policy. 2. Define automatic NAT for each network to NAT the networks behind a public IP. 3. Publish and install the policy.

• Question 623:

  You have enabled “Extended Log” as a tracking option to a security rule. However, you are still not seeing any data type information. What is the MOST likely reason?

  A. Log Trimming is enabled.
  B. Content Awareness is not enabled.
  C. Logging has disk space issues.
  D. Identity Awareness is not enabled.
  B. Content Awareness is not enabled.

• Question 624:

  You noticed that CPU cores on the Security Gateway are usually 100% utilized and many packets were dropped. You don't have a budget to perform a hardware upgrade at this time. To optimize drops you decide to use Priority Queues and fully enable Dynamic Dispatcher. How can you enable them?

  A. fw ctl multik dynamic_dispatching on
  B. fw ctl multik dynamic_dispatching set_mode 9
  C. fw ctl multik set_mode 9
  D. fw ctl miltik pq enable
  A. fw ctl multik dynamic_dispatching on

• Question 625:

  What is the purpose of the Stealth Rule?

  A. To prevent users from directly connecting to a Security Gateway.
  B. To reduce the number of rules in the database.
  C. To reduce the amount of logs for performance issues.
  D. To hide the gateway from the Internet.
  A. To prevent users from directly connecting to a Security Gateway.

  ---

  Explanation/Reference:

  Reference: http://www.pearsonitcertification.com/articles/article.aspx?p=387728andseqNum=3

• Question 626:

  In order to see real-time and historical graph views of Security Gateway statistics in SmartView Monitor, what feature needs to be enabled on the Security Gateway?

  A. Monitoring Blade
  B. SNMP
  C. None - the data is available by default
  D. Logging and Monitoring
  A. Monitoring Blade

• Question 627:

  Fill in the blank: When tunnel test packets no longer invoke a response, SmartView Monitor displays _____________ for the given VPN tunnel.

  A. Down
  B. No Response
  C. Inactive
  D. Failed
  A. Down

  ---

  Explanation/Reference:

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_VPN_AdminGuide/html_frameset.htm?topic=documents/R77/CP_R77_VPN_AdminGuide/14018

• Question 628:

  When a Security Gateway communicates about its status to an IP address other than its own, which deployment option was chosen?

  A. Targeted
  B. Bridge Mode
  C. Distributed
  D. Standalone
  C. Distributed

• Question 629:

  Which is a suitable command to check whether Drop Templates are activated or not?

  A. fw ctl get int activate_drop_templates
  B. fwaccel stat
  C. fwaccel stats
  D. fw ctl templates璬
  B. fwaccel stat

  ---

  Explanation/Reference:

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk71200

• Question 630:

  What is the purpose of a Stealth Rule?

  A. A rule used to hide a server's IP address from the outside world.
  B. A rule that allows administrators to access SmartDashboard from any device.
  C. To drop any traffic destined for the firewall that is not otherwise explicitly allowed.
  D. A rule at the end of your policy to drop any traffic that is not explicitly allowed.
  C. To drop any traffic destined for the firewall that is not otherwise explicitly allowed.

  ---

  Explanation/Reference:

  Reference: http://www.pearsonitcertification.com/articles/article.aspx?p=387728andseqNum=3