CheckPoint 156-215.81.20 Online Practice Questions and Exam Preparation

CheckPoint 156-215.81.20 Online Questions & Answers

• Question 651:

  Choose the SmartLog property that is TRUE.

  A. SmartLog has been an option since release R71.10.
  B. SmartLog is not a Check Point product.
  C. SmartLog and SmartView Tracker are mutually exclusive.
  D. SmartLog is a client of SmartConsole that enables enterprises to centrally track log records and security activity with Google-like search.
  D. SmartLog is a client of SmartConsole that enables enterprises to centrally track log records and security activity with Google-like search.

• Question 652:

  When defining QoS global properties, which option below is not valid?

  A. Weight
  B. Authenticated timeout
  C. Schedule
  D. Rate
  C. Schedule

  ---

  Explanation/Reference:

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_QoS_AdminGuide/14871.htm

• Question 653:

  Fill in the blanks: A ____ license requires an administrator to designate a gateway for attachment whereas a _____ license is automatically attached to a Security Gateway.

  A. Formal; corporate
  B. Local; formal
  C. Local; central
  D. Central; local
  D. Central; local

  ---

  Explanation/Reference:

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Installation_and_Upgrade_Guide-webAdmin/13128.htm

• Question 654:

  What is the default time length that Hit Count Data is kept?

  A. 3 month
  B. 4 weeks
  C. 12 months
  D. 6 months
  D. 6 months

  ---

  Explanation/Reference:

  Keep Hit Count data up to - Select one of the time range options. The default is 6 months. Data is kept in the Security Management Server database for this period and is shown in the Hits column. Reference: http://dl3.checkpoint.com/paid/74/74d596decb6071a4ee642fbdaae7238f/CP_R80_SecurityManagement_AdminGuide.pdf?HashKey=1479584563_6f823c8ea1514609148aa4fec5425db2andxtn=.pdf

• Question 655:

  SandBlast offers flexibility in implementation based on their individual business needs. What is an option for deployment of Check Point SandBlast Zero-Day Protection?

  A. Smart Cloud Services
  B. Load Sharing Mode Services
  C. Threat Agent Solution
  D. Public Cloud Services
  A. Smart Cloud Services

• Question 656:

  The security Gateway is installed on GAiA R80 The default port for the WEB User Interface is _______ .

  A. TCP 18211
  B. TCP 257
  C. TCP 4433
  D. TCP 443
  D. TCP 443

• Question 657:

  To optimize Rule Base efficiency the most hit rules should be where?

  A. Removed from the Rule Base.
  B. Towards the middle of the Rule Base.
  C. Towards the top of the Rule Base.
  D. Towards the bottom of the Rule Base.
  C. Towards the top of the Rule Base.

  ---

  Explanation/Reference:

  It is logical that if lesser rules are checked for the matched rule to be found the lesser CPU cycles the device is using. Checkpoint match a session from the first rule on top till the last on the bottom.

• Question 658:

  What is the best sync method in the ClusterXL deployment?

  A. Use 1 cluster + 1st sync
  B. Use 1 dedicated sync interface
  C. Use 3 clusters + 1st sync + 2nd sync + 3rd sync
  D. Use 2 clusters + 1st sync + 2nd sync
  B. Use 1 dedicated sync interface

• Question 659:

  Which Threat Prevention Software Blade provides protection from malicious software that can infect your network computers?

  A. Anti-Malware
  B. IPS
  C. Anti-bot
  D. Anti-Spam
  C. Anti-bot

  ---

  Explanation/Reference:

  Anti-Bot The Need for Anti-Bot There are two emerging trends in today's threat landscape:

  1.

  A profit-driven cybercrime industry that uses different tools to meet its goals. This industry includes cyber-criminals, malware operators, tool providers, coders, and affiliate programs. Their "products" can be easily ordered online from

  numerous sites (for example, do-it-yourself malware kits, spam sending, data theft, and denial of service attacks) and organizations are finding it difficult to fight off these attacks.

  2.

  Ideological and state driven attacks that target people or organizations to promote a political cause or carry out a cyber-warfare campaign.

  Both of these trends are driven by bot attacks.

  A bot is malicious software that can invade your computer. There are many infection methods. These include opening attachments that exploit a vulnerability and accessing a web site that results in a malicious download.

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_ThreatPrevention_WebAdmin/102176.htm

• Question 660:

  In Unified SmartConsole Gateways and Servers tab you can perform the following functions EXCEPT

  A. Upgrade the software version
  B. Open WebUI
  C. Open SSH
  D. Open service request with Check Point Technical Support
  C. Open SSH