CheckPoint 156-215.81.20 Online Practice Questions and Exam Preparation

CheckPoint 156-215.81.20 Online Questions & Answers

• Question 71:

  What protocol is specifically used for clustered environments?

  A. Clustered Protocol
  B. Synchronized Cluster Protocol
  C. Control Cluster Protocol
  D. Cluster Control Protocol
  D. Cluster Control Protocol

  ---

  Explanation/Reference:

  Reference: https://downloads.checkpoint.com/fileserver/SOURCE/direct/ID/5990/FILE/sk31085_Cluster_Control_Protocol_Functionality.pdf

• Question 72:

  Which of the following commands is used to monitor cluster members?

  A. cphaprob state
  B. cphaprob status
  C. cphaprob
  D. cluster state
  A. cphaprob state

  ---

  Explanation/Reference:

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_ClusterXL_AdminGuide/7298.htm

• Question 73:

  After the initial installation on Check Point appliance, you notice that the Management interface and default gateway are incorrect. Which commands could you use to set the IP to 192.168.80.200/24 and default gateway to 192.168.80.1.

  A. set interface Mgmt ipv4-address 192.168.80.200 mask-length 24 set static-route default nexthop gateway address 192.168.80.1 on save config
  B. add interface Mgmt ipv4-address 192.168.80.200 255.255.255.0 add static-route 0.0.0.0.0.0.0.0 gw 192.168.80.1 on save config
  C. set interface Mgmt ipv4-address 192.168.80.200 255.255.255.0 add static-route 0.0.0.0.0.0.0.0 gw 192.168.80.1 on save config
  D. add interface Mgmt ipv4-address 192.168.80.200 mask-length 24 add static-route default nexthop gateway address 192.168.80.1 on save config
  A. set interface Mgmt ipv4-address 192.168.80.200 mask-length 24 set static-route default nexthop gateway address 192.168.80.1 on save config

• Question 74:

  Which of the following is NOT an attribute of packer acceleration?

  A. Source address
  B. Protocol
  C. Destination port
  D. Application Awareness
  D. Application Awareness

  ---

  Explanation/Reference:

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Firewall_WebAdmin/92711.htm

• Question 75:

  Which of the following is NOT a valid backup command for a Security Management Server?

  A. save backup
  B. add backup
  C. add snapshot
  D. migrate export
  A. save backup

  ---

  Explanation/Reference:

  Reference: https://www.networksecurityplus.net/2015/02/check-point-backup-and-restore-command-reference.html

• Question 76:

  You have created a rule at the top of your Rule Base to permit Guest Wireless access to the Internet. However, when guest users attempt to reach the Internet, they are not seeing the splash page to accept your Terms of Service, and cannot access the Internet. How can you fix this?

  

  A. Right click Accept in the rule, select "More", and then check "Enable Identity Captive Portal"
  B. On the firewall object, Legacy Authentication screen, check "Enable Identity Captive Portal"
  C. In the Captive Portal screen of Global Properties, check "Enable Identity Captive Portal"
  D. On the Security Management Server object, check the box "Identity Logging"
  A. Right click Accept in the rule, select "More", and then check "Enable Identity Captive Portal"

• Question 77:

  Which software blade enables Access Control policies to accept, drop, or limit web site access based on user, group, and/or machine?

  A. Data Awareness
  B. Threat Emulation
  C. Application Control
  D. Identity Awareness
  D. Identity Awareness

• Question 78:

  Which of the following statements about Site-to-Site VPN Domain-based is NOT true?

  A. Route-based- The Security Gateways will have a Virtual Tunnel Interface (VTI) for each VPN Tunnel with a peer VPN Gateway. The Routing Table can have routes to forward traffic to these VTIs. Any traffic routed through a VTI is automatically identified as VPN Traffic and is passed through the VPN Tunnel associated with the VTI.
  B. Domain-based- VPN domains are pre-defined for all VPN Gateways. A VPN domain is a service or user that can send or receive VPN traffic through a VPN Gateway.
  C. Domain-based- VPN domains are pre-defined for all VPN Gateways. A VPN domain is a host or network that can send or receive VPN traffic through a VPN Gateway.
  D. Domain-based- VPN domains are pre-defined for all VPN Gateways. When the Security Gateway encounters traffic originating from one VPN Domain with the destination to a VPN Domain of another VPN Gateway, that traffic is identified as VPN traffic and is sent through the VPN Tunnel between the two Gateways.
  B. Domain-based- VPN domains are pre-defined for all VPN Gateways. A VPN domain is a service or user that can send or receive VPN traffic through a VPN Gateway.

• Question 79:

  Which of the following is the most secure means of authentication?

  A. Password
  B. Certificate
  C. Token
  D. Pre-shared secret
  B. Certificate

• Question 80:

  Which of the following commands is used to verify license installation?

  A. Cplic verify license
  B. Cplic print
  C. Cplic show
  D. Cplic license
  B. Cplic print