CheckPoint 156-215.81 Online Practice Questions and Exam Preparation

CheckPoint 156-215.81 Online Questions & Answers

• Question 1:

  In SmartConsole, objects are used to represent physical and virtual network components and also some logical components. These objects are divided into several categories. Which of the following is NOT an objects category?

  A. Limit
  B. Resource
  C. Custom Application / Site
  D. Network Object
  B. Resource

  ---

  Explanation/Reference:

  Resource is NOT an objects category in SmartConsole, p. 18. The objects categories in SmartConsole are Network Object, Host, Network, Group, Gateway, Cluster, VPN Community, Service, Time Object, Access Role, Custom Application / Site, Data Center Object, Limit. , [Check Point SmartConsole R81 Help]

• Question 2:

  While enabling the Identity Awareness blade the Identity Awareness wizard does not automatically detect the windows domain Why does it not detect the windows domain?

  A. SmartConsole machine is not part of the domain
  B. Security Gateway is not part of the Domain
  C. Identity Awareness is not enabled on Global properties
  D. Security Management Server is not part of the domain
  A. SmartConsole machine is not part of the domain

  ---

  Explanation/Reference:

  While enabling the Identity Awareness blade, the Identity Awareness wizard does not automatically detect the Windows domain because the SmartConsole machine is not part of the domain. The SmartConsole machine needs to be a member of the Windows domain or have access to a domain controller in order to detect the domain automatically.

  References: Check Point R81 Identity Awareness Administration Guide, page 10.

• Question 3:

  Sticky Decision Function (SDF) is required to prevent which of the following? Assume you set up an Active-Active cluster.

  A. Symmetric routing
  B. Failovers
  C. Asymmetric routing
  D. Anti-Spoofing
  B. Failovers

  ---

  Explanation/Reference:

  The Sticky Decision Function (SDF) is required to prevent failovers in an Active-Active cluster. The SDF ensures that the same cluster member handles all connections that belong to a certain session. If the SDF is not enabled, different cluster members may handle different connections of the same session, which may cause a failover or a drop.

  References: ClusterXL Administration Guide R81,

• Question 4:

  Which of the following situations would not require a new license to be generated and installed?

  A. The Security Gateway is upgraded.
  B. The existing license expires.
  C. The license is upgraded.
  D. The IP address of the Security Management or Security Gateway has changed.
  A. The Security Gateway is upgraded.

  ---

  Explanation/Reference:

  Upgrading the Security Gateway does not require a new license to be generated and installed. The license is tied to the IP address or hostname of the Security Gateway, not the software version. However, if the IP address or hostname changes, the existing license expires, or the license is upgraded, a new license must be generated and installed

  References: Check Point R81, Managing and Installing license via SmartUpdate

• Question 5:

  When defining group-based access in an LDAP environment with Identity Awareness, what is the BEST object type to represent an LDAP group in a Security Policy?

  A. Access Role
  B. User Group
  C. SmartDirectory Group
  D. Group Template
  A. Access Role

  ---

  Explanation/Reference:

  The BEST object type to represent an LDAP group in a Security Policy is an Access Role. An Access Role object defines a set of users, machines, or networks that can access a resource or service p. 27. An Access Role object can include LDAP groups as one of its components, p. 10. , Check Point Identity Awareness Administration Guide R81

• Question 6:

  What Identity Agent allows packet tagging and computer authentication?

  A. Endpoint Security Client
  B. Full Agent
  C. Light Agent
  D. System Agent
  B. Full Agent

  ---

  Explanation/Reference:

  The Full Identity Agent allows packet tagging and computer authentication. Packet tagging is a feature that enables the Security Gateway to identify the source user and machine of each packet, regardless of NAT or routing. Computer authentication is a feature that enables the Security Gateway to authenticate machines that are not associated with any user, such as servers or unattended workstations. The other options are incorrect. Endpoint Security Client is not an Identity Agent, but a software that provides endpoint security features such as firewall, antivirus, VPN, etc. Light Agent is an Identity Agent that does not require installation and runs on a web browser, but it does not support packet tagging or computer authentication. System Agent is not an Identity Agent, but a software that provides system information and health monitoring for endpoints. References: Check Point Identity Agent for Microsoft Windows 10

• Question 7:

  Which Threat Prevention Software Blade provides comprehensive protection against malicious and unwanted network traffic, focusing on application and server vulnerabilities?

  A. IPS
  B. Anti-Virus
  C. Anti-Spam
  D. Anti-bot
  A. IPS

  ---

  Explanation/Reference:

  The IPS (Intrusion Prevention System) Software Blade provides comprehensive protection against malicious and unwanted network traffic, focusing on application and server vulnerabilities. The other options are not related to this function. References: [Check Point R81 Threat Prevention Administration Guide], page 9.

• Question 8:

  In the Check Point Security Management Architecture, which component(s) can store logs?

  A. SmartConsole
  B. Security Management Server and Security Gateway
  C. Security Management Server
  D. SmartConsole and Security Management Server
  B. Security Management Server and Security Gateway

  ---

  Explanation/Reference:

  The Security Management Server and the Security Gateway are the components that can store logs in the Check Point Security Management Architecture. The Security Management Server stores logs in a database and can also forward them to external log servers. The Security Gateway can store logs locally in a buffer or a local log file, and can also send them to the Security Management Server or a log server. References: Check Point Security Management Administration Guide R81, p. 11-12

• Question 9:

  Please choose correct command syntax to add an "emailserver" host with IP address 10.50.23.90 using GAiA management CLI?

  A. hostname myHost ip-address 10.50.23.90
  B. mgmt add host name ip-address 10.50.23.90
  C. add host name emailserver ip-address 10.50.23.90
  D. mgmt add host name emailserver ip-address 10.50.23.90
  D. mgmt add host name emailserver ip-address 10.50.23.90

  ---

  Explanation/Reference:

  The correct syntax for adding a host using GAiA management CLI is mgmt add host name ip-address . References: Check Point GAiA R81 Command Line Interface Reference Guide

• Question 10:

  R80 is supported by which of the following operating systems:

  A. Windows only
  B. Gaia only
  C. Gaia, SecurePlatform, and Windows
  D. SecurePlatform only
  B. Gaia only

  ---

  Explanation/Reference:

  R80 is supported by Gaia only, which is Check Point's unified security operating system for all Check Point appliances, open servers, and virtualized gateways, p. 14. Windows and SecurePlatform are not supported by R80. , [Check Point Learning and Training Frequently Asked Questions (FAQs)]