CheckPoint 156-215.81.20 Online Practice Questions and Exam Preparation

CheckPoint 156-215.81.20 Online Questions & Answers

• Question 631:

  URL Filtering cannot be used to:

  A. Control Data Security
  B. Decrease legal liability
  C. Improve organizational security
  D. Control Bandwidth issues
  A. Control Data Security

• Question 632:

  Harriet wants to protect sensitive information from intentional loss when users browse to a specific URL: https://personal.mymail.com, which blade will she enable to achieve her goal?

  A. DLP
  B. SSL Inspection
  C. Application Control
  D. URL Filtering
  A. DLP

  ---

  Explanation/Reference:

  Check Point revolutionizes DLP by combining technology and processes to move businesses from passive detection to active Data Loss Prevention. Innovative MultiSpectTM data classification combines user, content and process information to make accurate decisions, while UserCheckTM technology empowers users to remediate incidents in real time. Check Point's self-educating network-based DLP solution frees IT/security personnel from incident handling and educates users on proper data handling policies--protecting sensitive corporate information from both intentional and unintentional loss.

  Reference: https://www.checkpoint.com/downloads/product-related/datasheets/DLP-software-blade-datasheet.pdf

• Question 633:

  Which two Identity Awareness commands are used to support identity sharing?

  A. Policy Decision Point (PDP) and Policy Enforcement Point (PEP)
  B. Policy Enforcement Point (PEP) and Policy Manipulation Point (PMP)
  C. Policy Manipulation Point (PMP) and Policy Activation Point (PAP)
  D. Policy Activation Point (PAP) and Policy Decision Point (PDP)
  A. Policy Decision Point (PDP) and Policy Enforcement Point (PEP)

  ---

  Explanation/Reference:

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_IdentityAwareness_AdminGuide/66477.htm

• Question 634:

  You are the Check Point administrator for Alpha Corp. You received a call that one of the users is unable to browse the Internet on their new tablet which is connected to the company wireless, which goes through a Check Point Gateway. How would you review the logs to see what is blocking this traffic?

  A. Open SmartLog and connect remotely to the wireless controller
  B. Open SmartEvent to see why they are being blocked
  C. Open SmartDashboard and review the logs tab
  D. Open SmartLog and filter for the IP address of the tablet
  D. Open SmartLog and filter for the IP address of the tablet

• Question 635:

  Fill in the blank: A _______ is used by a VPN gateway to send traffic as if it were a physical interface.

  A. VPN Tunnel Interface
  B. VPN community
  C. VPN router
  D. VPN interface
  A. VPN Tunnel Interface

  ---

  Explanation/Reference:

  Route Based VPN VPN traffic is routed according to the routing settings (static or dynamic) of the Security Gateway operating system. The Security Gateway uses a VTI (VPN Tunnel Interface) to send the VPN traffic as if it were a physical interface. The VTIs of Security Gateways in a VPN community connect and can support dynamic routing protocols. Reference: http://sc1.checkpoint.com/documents/R77/CP_R77_VPN_AdminGuide/13868.htm

• Question 636:

  What needs to be configured if the NAT property `Translate destination on client side' is not enabled in Global properties?

  A. A host route to route to the destination IP
  B. Use the file local.arp to add the ARP entries for NAT to work
  C. Nothing, the Gateway takes care of all details necessary
  D. Enabling `Allow bi-directional NAT' for NAT to work correctly
  C. Nothing, the Gateway takes care of all details necessary

• Question 637:

  Which options are given on features, when editing a Role on Gaia Platform?

  A. Read/Write, Read Only
  B. Read/Write, Read only, None
  C. Read/Write, None
  D. Read Only, None
  B. Read/Write, Read only, None

  ---

  Explanation/Reference:

  Roles

  Role-based administration (RBA) lets you create administrative roles for users. With RBA, an administrator can allow Gaia users to access specified features by including those features in a role and assigning that role to users. Each role can

  include a combination of administrative (read/write) access to some features, monitoring (read-only) access to other features, and no access to other features.

  You can also specify which access mechanisms (WebUI or the CLI) are available to the user.

  

  Note - When users log in to the WebUI, they see only those features that they have read-only or read/write access to. If they have read-only access to a feature, they can see the settings pages, but cannot change the settings.

  Gaia includes these predefined roles:

  1.

  adminRole - Gives the user read/write access to all features.

  2.

  monitorRole- Gives the user read-only access to all features. You cannot delete or change the predefined roles.

  

  Note - Do not define a new user for external users. An external user is one that is defined on an authentication server (such as RADIUS or TACACS) and not on the local Gaia system. Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_Gaia_AdminWebAdminGuide/html_frameset.htm?topic=documents/R77/CP_R77_Gaia_AdminWebAdminGuide/75930

• Question 638:

  Which type of Check Point license ties the package license to the IP address of the Security Management Server?

  A. Formal
  B. Corporate
  C. Central
  D. Local
  C. Central

• Question 639:

  Which one of these features is NOT associated with the Check Point URL Filtering and Application Control Blade?

  A. Detects and blocks malware by correlating multiple detection engines before users are affected.
  B. Configure rules to limit the available network bandwidth for specified users or groups.
  C. Use UserCheck to help users understand that certain websites are against the company's security policy.
  D. Make rules to allow or block applications and Internet sites for individual applications, categories, and risk levels.
  A. Detects and blocks malware by correlating multiple detection engines before users are affected.

  ---

  Explanation/Reference:

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_AppControl_WebAdmin/60902.htm

• Question 640:

  When configuring Spoof Tracking, which tracking actions can an administrator select to be done when spoofed packets are detected?

  A. Log, send snmp trap, email
  B. Drop packet, alert, none
  C. Log, alert, none
  D. Log, allow packets, email
  C. Log, alert, none

  ---

  Explanation/Reference:

  Configure Spoof Tracking - select the tracking action that is done when spoofed packets are detected:

  1.

  Log - Create a log entry (default)

  2.

  Alert - Show an alert

  3.

  None - Do not log or alert

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm?topic=documents/R80/CP_R80_SecMGMT/126197