CheckPoint 156-215.81.20 Online Practice Questions and Exam Preparation

CheckPoint 156-215.81.20 Online Questions & Answers

• Question 671:

  After trust has been established between the Check Point components, what is TRUE about name and IP-address changes?

  A. Security Gateway IP-address cannot be changed without re-establishing the trust
  B. The Security Gateway name cannot be changed in command line without re-establishing trust
  C. The Security Management Server name cannot be changed in SmartConsole without re-establishing trust
  D. The Security Management Server IP-address cannot be changed without re-establishing the trust
  A. Security Gateway IP-address cannot be changed without re-establishing the trust

• Question 672:

  You want to define a selected administrator's permission to edit a layer. However, when you click the + sign in the "Select additional profile that will be able edit this layer" you do not see anything. What is the most likely cause of this problem? Select the BEST answer.

  

  A. "Edit layers by Software Blades" is unselected in the Permission Profile
  B. There are no permission profiles available and you need to create one first.
  C. All permission profiles are in use.
  D. "Edit layers by selected profiles in a layer editor" is unselected in the Permission profile.
  B. There are no permission profiles available and you need to create one first.

• Question 673:

  Fill in the blank: A new license should be generated and installed in all of the following situations EXCEPT when ________ .

  A. The license is attached to the wrong Security Gateway
  B. The existing license expires
  C. The license is upgraded
  D. The IP address of the Security Management or Security Gateway has changed
  A. The license is attached to the wrong Security Gateway

  ---

  Explanation/Reference:

  There is no need to generate new license in this situation, just need to detach license from wrong Security Gateway and attach it to the right one.

• Question 674:

  How are the backups stored in Check Point appliances?

  A. Saved as*.tar under /var/log/CPbackup/backups
  B. Saved as*tgz under /var/CPbackup
  C. Saved as*tar under /var/CPbackup
  D. Saved as*tgz under /var/log/CPbackup/backups
  B. Saved as*tgz under /var/CPbackup

  ---

  Explanation/Reference:

  Backup configurations are stored in: /var/CPbackup/backups/

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_Gaia_Installation_and_Upgrade_Guide/html_frameset.htm?topic=documents/R77/CP_R77_Gaia_Installation_and_Upgrade_Guide/107104

• Question 675:

  In ____________ NAT, the ____________ is translated.

  A. Hide; source
  B. Static; source
  C. Simple; source
  D. Hide; destination
  A. Hide; source

• Question 676:

  Administrator wishes to update IPS from SmartConsole by clicking on the option "update now" under the IPS tab. Which device requires internet access for the update to work?

  A. Security Gateway
  B. Device where SmartConsole is installed
  C. SMS
  D. SmartEvent
  B. Device where SmartConsole is installed

  ---

  Explanation/Reference:

  Updating IPS Manually

  You can immediately update IPS with real-time information on attacks and all the latest protections from the IPS website. You can only manually update IPS if a proxy is defined in Internet Explorer settings.

  To obtain updates of all the latest protections from the IPS website:

  1.

  Configure the settings for the proxy server in Internet Explorer.

  1.In Microsoft Internet Explorer, open Tools > Internet Options > Connections tab > LAN Settings.

  The LAN Settings window opens.

  2.Select Use a proxy server for your LAN.

  3.Configure the IP address and port number for the proxy server.

  4.Click OK.

  The settings for the Internet Explorer proxy server are configured.

  2.

  In the IPS tab, select Download Updates and click Update Now.

  If you chose to automatically mark new protections for Follow Up, you have the option to open the Follow Up page directly to see the new protections.

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_IPS_AdminGuide/12850.htm

• Question 677:

  If the Active Security Management Server fails or if it becomes necessary to change the Active to Standby, the following steps must be taken to prevent data loss. Providing the Active Security Management Server is responsible, which of these steps should NOT be performed:

  A. Rename the hostname of the Standby member to match exactly the hostname of the Active member.
  B. Change the Standby Security Management Server to Active.
  C. Change the Active Security Management Server to Standby.
  D. Manually synchronize the Active and Standby Security Management Servers.
  A. Rename the hostname of the Standby member to match exactly the hostname of the Active member.