CheckPoint 156-215.81.20 Online Practice Questions and Exam Preparation

CheckPoint 156-215.81.20 Online Questions & Answers

• Question 61:

  When using GAiA, it might be necessary to temporarily change the MAC address of the interface eth 0 to 00:0C:29:12:34:56. After restarting the network the old MAC address should be active. How do you configure this change?

  A. As expert user, issue these commands: # IP link set eth0 down # IP link set eth0 addr 00:0C:29:12:34:56 # IP link set eth0 up
  B. Edit the file /etc/sysconfig/netconf.C and put the new MAC address in the field (conf :(conns :(conn :hwaddr ("00:0C:29:12:34:56")
  C. As expert user, issue the command: # IP link set eth0 addr 00:0C:29:12:34:56
  D. Open the WebUI, select Network > Connections > eth0. Place the new MAC address in the field Physical Address, and press Apply to save the settings.
  C. As expert user, issue the command: # IP link set eth0 addr 00:0C:29:12:34:56

• Question 62:

  What is UserCheck?

  A. Messaging tool used to verify a user's credentials.
  B. Communication tool used to inform a user about a website or application they are trying to access.
  C. Communication tool used to notify an administrator when a new user is created.
  D. Administrator tool used to monitor users on their network.
  B. Communication tool used to inform a user about a website or application they are trying to access.

• Question 63:

  Which of the following is NOT a SecureXL traffic flow?

  A. Medium Path
  B. Accelerated Path
  C. Fast Path
  D. Slow Path
  C. Fast Path

  ---

  Explanation/Reference:

  SecureXL is an acceleration solution that maximizes performance of the Firewall and does not compromise security. When SecureXL is enabled on a Security Gateway, some CPU intensive operations are processed by virtualized software

  instead of the Firewall kernel. The Firewall can inspect and process connections more efficiently and accelerate throughput and connection rates. These are the SecureXL traffic flows:

  Slow path - Packets and connections that are inspected by the Firewall and are not processed by SecureXL.

  Accelerated path - Packets and connections that are offloaded to SecureXL and are not processed by the Firewall.

  Medium path - Packets that require deeper inspection cannot use the accelerated path. It is not necessary for the Firewall to inspect these packets, they can be offloaded and do not use the slow path. For example, packets that are inspected

  by IPS cannot use the accelerated path and can be offloaded to the IPS PSL (Passive Streaming Library). SecureXL processes these packets more quickly than packets on the slow path.

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Firewall_WebAdmin/92711.htm

• Question 64:

  Which of the following is NOT an element of VPN Simplified Mode and VPN Communities?

  A. "Encrypt" action in the Rule Base
  B. Permanent Tunnels
  C. "VPN" column in the Rule Base
  D. Configuration checkbox "Accept all encrypted traffic"
  A. "Encrypt" action in the Rule Base

  ---

  Explanation/Reference:

  Migrating from Traditional Mode to Simplified Mode

  To migrate from Traditional Mode VPN to Simplified Mode:

  1.

  On the Global Properties > VPN page, select one of these options: Simplified mode to all new Firewall Policies Traditional or Simplified per new Firewall Policy

  2.

  Click OK.

  3.

  From the R80 SmartConsole Menu, select Manage policies.

  The Manage Policies window opens.

  4.

  Click New.

  The New Policy window opens.

  5.

  Give a name to the new policy and select Access Control.

  In the Security Policy Rule Base, a new column marked VPN shows and the Encrypt option is no longer available in the Action column. You are now working in Simplified Mode.

  Reference: http://dl3.checkpoint.com/paid/05/05e695b2012b4fd1d2bdfeccecd29290/CP_R80BC_VPN_AdminGuide.pdf?HashKey=1479823792_55fbc10656c87db4fcf742f4899ba90dandxtn=.pdf

• Question 65:

  When an encrypted packet is decrypted, where does this happen?

  A. Security policy
  B. Inbound chain
  C. Outbound chain
  D. Decryption is not supported
  A. Security policy

• Question 66:

  Which Threat Prevention Profile is not included by default in R80 Management?

  A. Basic ?Provides reliable protection on a range of non-HTTP protocols for servers, with minimal impact on network performance
  B. Optimized ?Provides excellent protection for common network products and protocols against recent or popular attacks
  C. Strict ?Provides a wide coverage for all products and protocols, with impact on network performance
  D. Recommended ?Provides all protection for all common network products and servers, with impact on network performance
  D. Recommended ?Provides all protection for all common network products and servers, with impact on network performance

  ---

  Explanation/Reference:

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80BC_ThreatPrevention/html_frameset.htm?topic=documents/R80/CP_R80BC_ThreatPrevention/136486

• Question 67:

  Which of the following is a hash algorithm?

  A. 3DES
  B. IDEA
  C. DES
  D. MD5
  D. MD5

• Question 68:

  Of all the Check Point components in your network, which one changes most often and should be backed up most frequently?

  A. SmartManager
  B. SmartConsole
  C. Security Gateway
  D. Security Management Server
  D. Security Management Server

• Question 69:

  Where can you trigger a failover of the cluster members?

  1.

  Log in to Security Gateway CLI and run command clusterXL_admin down.

  2.

  In SmartView Monitor right-click the Security Gateway member and select Cluster member down.

  3.

  Log into Security Gateway CLI and run command cphaprob down.

  A. 1, 2, and 3
  B. 2 and 3
  C. 1 and 2
  D. 1 and 3
  C. 1 and 2

  ---

  Explanation/Reference:

  How to Initiate Failover

  

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_ClusterXL_AdminGuide/7298.htm

• Question 70:

  Which of the following is used to initially create trust between a Gateway and Security Management Server?

  A. Internal Certificate Authority
  B. Token
  C. One-time Password
  D. Certificate
  C. One-time Password

  ---

  Explanation/Reference:

  To establish the initial trust, a gateway and a Security Management Server use a one-time password. After the initial trust is established, further communication is based on security certificates.

  Reference:

  https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm?topic=documents/R80/CP_R80_SecMGMT/125443