CheckPoint 156-215.81.20 Online Practice Questions and Exam Preparation

CheckPoint 156-215.81.20 Online Questions & Answers

• Question 661:

  Administrator Kofi has just made some changes on his Management Server and then clicks on the Publish button in SmartConsole but then gets the error message shown in the screenshot below. Where can the administrator check for more information on these errors?

  

  A. The Log and Monitor section in SmartConsole
  B. The Validations section in SmartConsole
  C. The Objects section in SmartConsole
  D. The Policies section in SmartConsole
  B. The Validations section in SmartConsole

  ---

  Explanation/Reference:

  Validation Errors

  The validations pane in SmartConsole shows configuration error messages. Examples of errors are object names that are not unique, and the use of objects that are not valid in the Rule Base.

  To publish, you must fix the errors.

  Reference:

  https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm?topic=documents/R80/CP_R80_SecMGMT/126197

• Question 662:

  At what point is the Internal Certificate Authority (ICA) created?

  A. When an administrator initially logs into SmartConsole.
  B. During the primary Security Management Server deployment process.
  C. Upon creation of a certificate.
  D. When an administrator decides to create one.
  B. During the primary Security Management Server deployment process.

• Question 663:

  Can Check Point and Third-party Gateways establish a certificate-based Site-to-Site VPN tunnel?

  A. No, Certificate based VPNs are only possible between Check Point devices
  B. No, they cannot share certificate authorities
  C. Yes, but they have to have a pre-shared secret key
  D. Yes, but they need to have a mutually trusted certificate authority
  D. Yes, but they need to have a mutually trusted certificate authority

• Question 664:

  What is required for a certificate-based VPN tunnel between two gateways with separate management systems?

  A. Shared Secret Passwords
  B. Unique Passwords
  C. Shared User Certificates
  D. Mutually Trusted Certificate Authorities
  D. Mutually Trusted Certificate Authorities

• Question 665:

  Fill in the blank: A(n) _____ rule is created by an administrator and is located before the first and before last rules in the Rule Base.

  A. Firewall drop
  B. Explicit
  C. Implicit accept
  D. Implicit drop
  E. Implied
  E. Implied

  ---

  Explanation/Reference:

  This is the order that rules are enforced:

  1.

  First Implied Rule: You cannot edit or delete this rule and no explicit rules can be placed before it.

  2.

  Explicit Rules: These are rules that you create.

  3.

  Before Last Implied Rules: These implied rules are applied before the last explicit rule.

  4.

  Last Explicit Rule: We recommend that you use the Cleanup rule as the last explicit rule.

  5.

  Last Implied Rules: Implied rules that are configured as Last in Global Properties.

  6.

  Implied Drop Rule: Drops all packets without logging.

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Firewall_WebAdmin/92703.htm

• Question 666:

  Fill in the blanks: Default port numbers for an LDAP server is ______ for standard connections and _______ SSL connections.

  A. 675, 389
  B. 389, 636
  C. 636, 290
  D. 290, 675
  B. 389, 636

  ---

  Explanation/Reference:

  A client starts an LDAP session by connecting to an LDAP server, called a Directory System Agent (DSA), by default on TCP and UDP port 389, or on port 636 for LDAPS. Global Catalog is available by default on ports 3268, and 3269 for LDAPS.

• Question 667:

  When launching SmartDashboard, what information is required to log into R77?

  A. User Name, Management Server IP, certificate fingerprint file
  B. User Name, Password, Management Server IP
  C. Password, Management Server IP
  D. Password, Management Server IP, LDAP Server IP
  B. User Name, Password, Management Server IP

• Question 668:

  URL Filtering employs a technology, which educates users on web usage policy in real time. What is the name of that technology?

  A. WebCheck
  B. URL categorization
  C. UserCheck
  D. Harmony Endpoint
  C. UserCheck

• Question 669:

  What is the purpose of the CPCA process?

  A. Monitoring the status of processes
  B. Sending and receiving logs
  C. Communication between GUI clients and the SmartCenter server
  D. Generating and modifying certificates
  D. Generating and modifying certificates

  ---

  Explanation/Reference:

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk97638

• Question 670:

  What is the purpose of the Clean-up Rule?

  A. To log all traffic that is not explicitly allowed or denied in the Rule Base
  B. To clean up policies found inconsistent with the compliance blade reports
  C. To remove all rules that could have a conflict with other rules in the database
  D. To eliminate duplicate log entries in the Security Gateway
  A. To log all traffic that is not explicitly allowed or denied in the Rule Base

  ---

  Explanation/Reference:

  These are basic access control rules we recommend for all Rule Bases:

  1.

  Stealth rule that prevents direct access to the Security Gateway.

  2.

  Cleanup rule that drops all traffic that is not allowed by the earlier rules.

  There is also an implied rule that drops all traffic, but you can use the Cleanup rule to log the traffic.

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Firewall_WebAdmin/92703.htm