CheckPoint 156-215.81 Online Practice Questions and Exam Preparation

CheckPoint 156-215.81 Online Questions & Answers

• Question 91:

  Which of the following is TRUE regarding Gaia command line?

  A. Configuration changes should be done in mgmt_di and use CLISH for monitoring. Expert mode is used only for OS level tasks
  B. Configuration changes should be done in mgmt_cli and use expert-mode for OS-level tasks.
  C. Configuration changes should be done in expert-mode and CLISH is used for monitoring
  D. All configuration changes should be made in CLISH and expert-mode should be used for OS-level tasks.
  D. All configuration changes should be made in CLISH and expert-mode should be used for OS-level tasks.

  ---

  Explanation/Reference:

  The statement that is true regarding Gaia command line is that all configuration changes should be made in CLISH and expert-mode should be used for OS-level tasks. CLISH is the default shell of Gaia CLI that provides a limited set of commands for basic configuration and troubleshooting. Expert mode is an advanced shell that allows running Linux commands and accessing the file system. Configuration changes should not be done in expert-mode, as they may cause inconsistencies or errors in the system. The other statements are false regarding Gaia command line.

• Question 92:

  Fill in the blank: In order to install a license, it must first be added to the ____________.

  A. User Center
  B. Package repository
  C. Download Center Web site
  D. License and Contract repository
  D. License and Contract repository

  ---

  Explanation/Reference:

  In order to install a license, it must first be added to the License and Contract repository. The License and Contract repository is a centralized database that stores all the licenses and contracts for Check Point products. It allows you to manage, activate, and attach licenses to your Check Point products. References: Check Point Security Management Administration Guide R81, p. 19-20

• Question 93:

  Examine the sample Rule Base.

  

  What will be the result of a verification of the policy from SmartConsole?

  A. No errors or Warnings B. Verification Error. Empty Source-List in Rule 5 (Mail Inbound)
  C. Verification Error. Rule 4 (Web Inbound) hides Rule 6 (Webmaster access)
  D. Verification Error. Rule 7 (Clean-Up Rule) hides Implicit Clean-up Rule
  A. No errors or Warnings B. Verification Error. Empty Source-List in Rule 5 (Mail Inbound)

• Question 94:

  What is the main difference between Static NAT and Hide NAT?

  A. Static NAT only allows incoming connections to protect your network.
  B. Static NAT allow incoming and outgoing connections. Hide NAT only allows outgoing connections.
  C. Static NAT only allows outgoing connections. Hide NAT allows incoming and outgoing connections.
  D. Hide NAT only allows incoming connections to protect your network.
  B. Static NAT allow incoming and outgoing connections. Hide NAT only allows outgoing connections.

  ---

  Explanation/Reference:

  The main difference between Static NAT and Hide NAT is that Static NAT allows incoming and outgoing connections, while Hide NAT only allows outgoing connections. Static NAT translates a single IP address to another single IP address, while Hide NAT translates a group of IP addresses to a single IP address. Static NAT is used to expose internal servers to external networks, while Hide NAT is used to hide internal hosts from external networks. References: Check Point R81 Firewall Administration Guide

• Question 95:

  One of major features in R80.x SmartConsole is concurrent administration. Which of the following is NOT possible considering that AdminA, AdminB, and AdminC are editing the same Security Policy?

  A. AdminC sees a lock icon which indicates that the rule is locked for editing by another administrator.
  B. AdminA and AdminB are editing the same rule at the same time.
  C. AdminB sees a pencil icon next the rule that AdminB is currently editing.
  D. AdminA, AdminB and AdminC are editing three different rules at the same time.
  B. AdminA and AdminB are editing the same rule at the same time.

  ---

  Explanation/Reference:

  One of the major features in R80.x SmartConsole is concurrent administration, which allows multiple administrators to work on the same Security Policy at the same time. However, only one administrator can edit a rule at a time. If AdminA and AdminB are editing the same rule at the same time, it will cause a conflict and prevent them from saving their changes. Therefore, the correct answer is B. AdminA and AdminB are editing the same rule at the same time.

• Question 96:

  Fill in the blank: The position of an implied rule is manipulated in the __________________ window.

  A. NAT
  B. Firewall
  C. Global Properties
  D. Object Explorer
  C. Global Properties

  ---

  Explanation/Reference:

  The position of an implied rule is manipulated in the Global Properties window. Implied rules are predefined rules that are not displayed in the rule base. They allow or block traffic for essential services such as communication with Check Point servers, logging, and VPN traffic. The position of an implied rule can be changed in the Global Properties > Firewall > Implied Rules section. References: How to view Implied Rules in R80.x / R81.x SmartConsole, Implied Rules

• Question 97:

  When a Security Gateways sends its logs to an IP address other than its own, which deployment option is installed?

  A. Distributed
  B. Standalone
  C. Bridge
  A. Distributed

  ---

  Explanation/Reference:

  When a Security Gateway sends its logs to an IP address other than its own, it means that the Security Gateway and the Log Server are installed on different machines. This is a characteristic of a Distributed deployment. Therefore, the correct answer is A

• Question 98:

  Which of the following is NOT supported by Bridge Mode on the Check Point Security Gateway?

  A. Data Loss Prevention
  B. Antivirus
  C. Application Control
  D. NAT
  D. NAT

  ---

  Explanation/Reference:

  Bridge Mode is a deployment option for Check Point Security Gateway that allows it to act as a transparent bridge between two network segments, without changing the IP addressing scheme. Bridge Mode supports most of the security features, such as Data Loss Prevention, Antivirus, Application Control, etc. However, Bridge Mode does not support NAT, because NAT requires modifying the IP addresses or ports of the packets, which contradicts the transparent nature of Bridge Mode.

  References: Check Point R81 Security Gateway Technical Administration Guide

• Question 99:

  An administrator can use section titles to more easily navigate between large rule bases.

  Which of these statements is FALSE?

  A. Section titles are not sent to the gateway side.
  B. These sections are simple visual divisions of the Rule Base and do not hinder the order of rule enforcement.
  C. A Sectional Title can be used to disable multiple rules by disabling only the sectional title.
  D. Sectional Titles do not need to be created in the SmartConsole.
  C. A Sectional Title can be used to disable multiple rules by disabling only the sectional title.

  ---

  Explanation/Reference:

  The statement that a Sectional Title can be used to disable multiple rules by disabling only the sectional title is false. A Sectional Title is a visual divider that helps organize and navigate large rule bases. It does not affect the rule enforcement order or the rule functionality. Disabling a Sectional Title does not disable the rules under it. To disable multiple rules, you need to select them individually or use Shift+Click or Ctrl+Click to select them in bulk, and then right-click and choose Disable Rule(s). The other statements are true. Section titles are not sent to the gateway side, they are only displayed in SmartConsole. These sections are simple visual divisions of the Rule Base and do not hinder the order of rule enforcement. Sectional Titles do not need to be created in SmartConsole, they can also be created using SmartConsole CLI or API commands.References: [Sectional Titles], [SmartConsole CLI Guide], [SmartConsole API Reference Guide]

• Question 100:

  What is the purpose of a Clean-up Rule?

  A. Clean-up Rules do not server any purpose.
  B. Provide a metric for determining unnecessary rules.
  C. To drop any traffic that is not explicitly allowed.
  D. Used to better optimize a policy.
  C. To drop any traffic that is not explicitly allowed.

  ---

  Explanation/Reference:

  A clean-up rule is a rule that is placed at the end of the security policy to drop any traffic that is not explicitly allowed by the previous rules. It is a best practice to have a clean-up rule to prevent unauthorized access and log the dropped packets for analysis. The other options are not the purpose of a clean-up rule. References: Clean-up Rule,