CheckPoint 156-215.81 Online Practice Questions and Exam Preparation

CheckPoint 156-215.81 Online Questions & Answers

• Question 101:

  You can see the following graphic:

  

  What is presented on it?

  A. Properties of personal. p12 certificate file issued for user John.
  B. Shared secret properties of John's password.
  C. VPN certificate properties of the John's gateway.
  D. Expired. p12 certificate properties for user John.
  A. Properties of personal. p12 certificate file issued for user John.

  ---

  Explanation/Reference:

  The answer is A because the graphic shows the properties of a personal .p12 certificate file issued for user John. A .p12 file is a file format that contains a user's private key and public key certificate. The graphic shows that the certificate file is valid and has an expiration date of 07-Apr-2018. The graphic also shows that the certificate file is issued by an internal CA, which is a Check Point component that manages certificates for users and gateways.References: Check Point R81 Certificate Management, Check Point R81 Internal CA

• Question 102:

  Due to high CPU workload on the Security Gateway, the security administrator decided to purchase a new multicore CPU to replace the existing single core CPU. After installation, is the administrator required to perform any additional tasks?

  A. Go to clash-Run cpstop | Run cpstart
  B. Go to clash-Run cpconfig | Configure CoreXL to make use of the additional Cores | Exit cpconfig | Reboot Security Gateway
  C. Administrator does not need to perform any task. Check Point will make use of the newly installed CPU and Cores
  D. Go to clash-Run cpconfig | Configure CoreXL to make use of the additional Cores | Exit cpconfig | Reboot Security Gateway | Install Security Policy
  B. Go to clash-Run cpconfig | Configure CoreXL to make use of the additional Cores | Exit cpconfig | Reboot Security Gateway

  ---

  Explanation/Reference:

  The correct answer is B because after installing a new multicore CPU, the administrator needs to configure CoreXL to make use of the additional cores and reboot the Security Gateway. Installing the Security Policy is not necessary because it does not affect the CoreXL configuration. References: Check Point R81 Security Management Administration Guide

• Question 103:

  You have created a rule at the top of your Rule Base to permit Guest Wireless access to the Internet. However, when guest users attempt to reach the Internet, they are not seeing the splash page to accept your Terms of Service, and cannot access the Internet. How can you fix this?

  

  A. Right click Accept in the rule, select "More", and then check "Enable Identity Captive Portal"
  B. On the firewall object, Legacy Authentication screen, check "Enable Identity Captive Portal"
  C. In the Captive Portal screen of Global Properties, check "Enable Identity Captive Portal"
  D. On the Security Management Server object, check the box "Identity Logging"
  A. Right click Accept in the rule, select "More", and then check "Enable Identity Captive Portal"

  ---

  Explanation/Reference:

  Identity Captive Portal is a Check Point Identity Awareness web portal, to which users connect with their web browser to log in and authenticate, when using Browser-Based Authentication. To enable Identity Captive Portal for a specific rule, you need to right click Accept in the rule, select "More", and then check "Enable Identity Captive Portal". References: Identity Awareness Administration Guide R80, Identity awareness with captive portal in Checkpoint R80

• Question 104:

  In which scenario will an administrator need to manually define Proxy ARP?

  A. When they configure an "Automatic Static NAT" which translates to an IP address that does not belong to one of the firewall's interfaces.
  B. When they configure an "Automatic Hide NAT" which translates to an IP address that does not belong to one of the firewall's interfaces.
  C. When they configure a "Manual Static NAT" which translates to an IP address that does not belong to one of the firewall's interfaces.
  D. When they configure a "Manual Hide NAT" which translates to an IP address that belongs to one of the firewall's interfaces.
  C. When they configure a "Manual Static NAT" which translates to an IP address that does not belong to one of the firewall's interfaces.

  ---

  Explanation/Reference:

  NAT (Network Address Translation) is a technique that modifies the IP addresses or ports of packets that pass through a security gateway. NAT can be configured in two ways: Automatic or Manual. Automatic NAT means that the NAT rules are generated automatically by the security gateway based on the NAT properties of network objects. Manual NAT means that the NAT rules are defined explicitly by the administrator in the NAT policy. Proxy ARP (Address Resolution Protocol) is a technique that allows a security gateway to answer ARP requests on behalf of other hosts. Proxy ARP is needed when a host on one network segment tries to communicate with a host on another network segment that has a different IP address than its own. In some scenarios, an administrator will need to manually define Proxy ARP for NAT to work properly. One such scenario is when they configure a Manual Static NAT which translates to an IP address that does not belong to one of the firewall's interfaces. References: Check Point R81 Network Address Translation Administration Guide

• Question 105:

  What Check Point tool is used to automatically update Check Point products for the Gaia OS?

  A. Check Point INSPECT Engine
  B. Check Point Upgrade Service Engine
  C. Check Point Update Engine
  D. Check Point Upgrade Installation Service
  B. Check Point Upgrade Service Engine

  ---

  Explanation/Reference:

  The Check Point Upgrade Service Engine (CPUSE) is a tool that automates the process of upgrading and installing Check Point products on Gaia OS. It can also be used to update the Gaia OS itself. The other options are not valid tools for this purpose. References: Check Point Upgrade Service Engine (CPUSE) - Gaia Deployment Agent, Check Point R81 Gaia Installation and Upgrade Guide

• Question 106:

  What are the two elements of address translation rules?

  A. Original packet and translated packet
  B. Manipulated packet and original packet
  C. Translated packet and untranslated packet
  D. Untranslated packet and manipulated packet
  A. Original packet and translated packet

  ---

  Explanation/Reference:

  Address translation rules are used to map an IP address space into another by modifying network address information in the IP header of packets. Address translation rules have two elements: original packet and translated packet. The original packet is the packet before it undergoes address translation, and the translated packet is the packet after it undergoes address translation. The original packet and the translated packet may have different source and destination IP addresses, depending on the type and direction of address translation.

• Question 107:

  How can the changes made by an administrator before publishing the session be seen by a superuser administrator?

  A. By impersonating the administrator with the `Login as...' option
  B. They cannot be seen
  C. From the SmartView Tracker audit log
  D. From Manage and Settings > Sessions, right click on the session and click `View Changes...'
  D. From Manage and Settings > Sessions, right click on the session and click `View Changes...'

  ---

  Explanation/Reference:

  The changes made by an administrator before publishing the session can be seen by a superuser administrator from Manage and Settings > Sessions, right click on the session and click `View Changes...'. This option allows the superuser to review the changes made by another administrator in a pending session. References: Check Point R81 Security Management Administration Guide

• Question 108:

  You want to store the GAiA configuration in a file for later reference. What command should you use?

  A. write mem
  B. show config -f
  C. save config -o
  D. save configuration
  D. save configuration

  ---

  Explanation/Reference:

  The correct answer is D because the command save configuration stores the Gaia configuration in a file for later reference. The other commands are not valid in Gaia Clish. References: Gaia R81.10 Administration Guide

• Question 109:

  Which Security Blade needs to be enabled in order to sanitize and remove potentially malicious content from files, before those files enter the network?

  A. Threat Emulation
  B. Anti-Malware
  C. Anti-Virus
  D. Threat Extraction
  D. Threat Extraction

  ---

  Explanation/Reference:

  Threat Extraction is the Security Blade that needs to be enabled in order to sanitize and remove potentially malicious content from files, before those files enter the network. It can strip out active content, embedded objects, and other risky elements from documents and deliver a safe version of the file to the user. References: Remote Access VPN R81.20 Administration Guide, page 18.

• Question 110:

  What is the default shell of Gaia CLI?

  A. clish
  B. Monitor
  C. Read-only
  D. Bash
  A. clish

  ---

  Explanation/Reference:

  The default shell of Gaia CLI is clish, which stands for Check Point command line interface shell. It provides a user-friendly interface to configure and manage Check Point products. References: Check Point Gaia Administration Guide