CheckPoint 156-215.81.20 Online Practice Questions and Exam Preparation

CheckPoint 156-215.81.20 Online Questions & Answers

• Question 641:

  An administrator is creating an IPsec site-to-site VPN between his corporate office and branch office. Both offices are protected by Check Point Security Gateway managed by the same Security Management Server (SMS). While configuring the VPN community to specify the pre-shared secret, the administrator did not find a box to input the pre-shared secret. Why does it not allow him to specify the pre-shared secret?

  A. The Gateway is an SMB device
  B. The checkbox "Use only Shared Secret for all external members" is not checked
  C. Certificate based Authentication is the only authentication method available between two Security Gateway managed by the same SMS
  D. Pre-shared secret is already configured in Global Properties
  C. Certificate based Authentication is the only authentication method available between two Security Gateway managed by the same SMS

• Question 642:

  You work as a security administrator for a large company. CSO of your company has attended a security conference where he has learnt how hackers constantly modify their strategies and techniques to evade detection and reach corporate resources. He wants to make sure that his company has the right protections in place. Check Point has been selected for the security vendor. Which Check Point products protects BEST against malware and zero-day attacks while ensuring quick delivery of safe content to your users?

  A. IPS and Application Control
  B. IPS, anti-virus and anti-bot
  C. IPS, anti-virus and e-mail security
  D. SandBlast
  D. SandBlast

  ---

  Explanation/Reference:

  SandBlast Zero-Day Protection

  Hackers constantly modify their strategies and techniques to evade detection and reach corporate resources. Zero-day exploit protection from Check Point provides a deeper level of inspection so you can prevent more malware and zero-day

  attacks, while ensuring quick delivery of safe content to your users.

  Reference: https://www.checkpoint.com/products-solutions/zero-day-protection/

• Question 643:

  Which application is used for the central management and deployment of licenses and packages?

  A. Deployment Agent
  B. SmartLicense
  C. SmartProvisioning
  D. SmartUpdate
  D. SmartUpdate

• Question 644:

  When configuring LDAP User Directory integration, Changes applied to a User Directory template are:

  A. Reflected immediately for all users who are using template.
  B. Not reflected for any users unless the local user template is changed.
  C. Reflected for all users who are using that template and if the local user template is changed as well.
  D. Not reflected for any users who are using that template.
  A. Reflected immediately for all users who are using template.

  ---

  Explanation/Reference:

  The users and user groups are arranged on the Account Unit in the tree structure of the LDAP server. User management in User Directory is external, not local. You can change the User Directory templates. Users associated with this template get the changes immediately. You can change user definitions manually in SmartDashboard, and the changes are immediate on the server. Reference: https://sc1.checkpoint.com/documents/R77/ CP_R77_SecurityManagement_WebAdminGuide/html_frameset.htm?topic=documents/R77/CP_R77_SecurityManagement_WebAdminGuide/94041

• Question 645:

  Which of the following is NOT supported by Bridge Mode Check Point Security Gateway

  A. Antivirus
  B. Data Loss Prevention
  C. NAT
  D. Application Control
  C. NAT

  ---

  Explanation/Reference:

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_SGW_WebAdmin/96332.htm

• Question 646:

  How many users can have read/write access in Gaia at one time?

  A. Infinite
  B. One
  C. Three
  D. Two
  B. One

• Question 647:

  When logging in for the first time to a Security management Server through SmartConsole, a fingerprint is saved to the:

  A. Security Management Server's /home/.fgpt file and is available for future SmartConsole authentications.
  B. Windows registry is available for future Security Management Server authentications.
  C. There is no memory used for saving a fingerprint anyway.
  D. SmartConsole cache is available for future Security Management Server authentications.
  D. SmartConsole cache is available for future Security Management Server authentications.

  ---

  Explanation/Reference:

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_SecMan_WebAdmin/html_frameset.htm?topic=documents/R76/CP_R76_SecMan_WebAdmin/118037

• Question 648:

  Which of the following is NOT a valid configuration screen of an Access Role Object?

  A. Users
  B. Networks
  C. Time
  D. Machines
  C. Time

  ---

  Explanation/Reference:

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_IdentityAwareness_AdminGuide/62050.htm

• Question 649:

  You want to verify if there are unsaved changes in GAiA that will be lost with a reboot. What command can be used?

  A. show unsaved
  B. show save-state
  C. show configuration diff
  D. show config-state
  D. show config-state

• Question 650:

  When a Security Gateways sends its logs to an IP address other than its own, which deployment option is installed?

  A. Distributed
  B. Standalone
  C. Bridge
  A. Distributed