CheckPoint 156-215.81 Online Practice Questions and Exam Preparation

CheckPoint 156-215.81 Online Questions & Answers

• Question 341:

  In which deployment is the security management server and Security Gateway installed on the same appliance?

  A. Standalone
  B. Remote
  C. Distributed
  D. Bridge Mode
  A. Standalone

  ---

  Explanation/Reference:

  A standalone deployment is when the security management server and Security Gateway are installed on the same appliance. This is suitable for small or branch office environments

• Question 342:

  Application Control/URL filtering database library is known as:

  A. Application database
  B. AppWiki
  C. Application-Forensic Database
  D. Application Library
  B. AppWiki

  ---

  Explanation/Reference:

  Application Control/URL filtering database library is known as AppWiki. AppWiki is an application classification and identification database that enables administrators to control access to thousands of applications and millions of websites. References: [Check Point R81 Application Control Administration Guide], [Check Point AppWiki]

• Question 343:

  When using Automatic Hide NAT, what is enabled by default?

  A. Source Port Address Translation (PAT)
  B. Static NAT
  C. Static Route
  D. HTTPS Inspection
  A. Source Port Address Translation (PAT)

  ---

  Explanation/Reference:

  When using Automatic Hide NAT, Source Port Address Translation (PAT) is enabled by default. This means that the source IP address and port number are translated to a different IP address and port number. This allows multiple hosts to share a single IP address for outbound connections. References: Check Point R81 Firewall Administration Guide

• Question 344:

  You are going to perform a major upgrade. Which back up solution should you use to ensure your database can be restored on that device?

  A. backup
  B. logswitch
  C. Database Revision
  D. snapshot
  D. snapshot

  ---

  Explanation/Reference:

  The back up solution that should be used to ensure your database can be restored on that device is snapshot. A snapshot creates a binary image of the entire root (lv_current) disk partition. This includes Check Point products, configuration, and operating system. A snapshot can be used to restore a Security Gateway or Security Management Server to its previous state at any time . Therefore, the correct answer is D. snapshot.

• Question 345:

  Choose what BEST describes the reason why querying logs now are very fast.

  A. The amount of logs being stored is less than previous versions.
  B. New Smart-1 appliances double the physical memory install.
  C. Indexing Engine indexes logs for faster search results.
  D. SmartConsole now queries results directly from the Security Gateway.
  C. Indexing Engine indexes logs for faster search results.

  ---

  Explanation/Reference:

  The reason why querying logs now are very fast is that Indexing Engine indexes logs for faster search results. Indexing Engine is a component of R81 Management that creates and maintains an index of log data, which enables quick and

  efficient log searches4. The other options are not related to the speed of log querying. The amount of logs being stored may vary depending on the log retention settings. New Smart-1 appliances may have improved hardware specifications,

  but they do not affect the log querying process directly. SmartConsole queries results from the Security Management Server, not from the Security Gateway.

  References:

  1: HTTPS Inspection

  2: Browser-Based Authentication

  3: URL Filtering

  4: Indexing Engine

• Question 346:

  Where can administrator edit a list of trusted SmartConsole clients?

  A. cpconfig on a Security Management Server, in the WebUI logged into a Security Management Server.
  B. In cpconfig on a Security Management Server, in the WebUI logged into a Security Management Server, in SmartConsole: Manage and Settings > Permissions and Administrators > Advanced > Trusted Clients.
  C. WebUI client logged to Security Management Server, SmartDashboard: Manage and Settings > Permissions and Administrators > Advanced > Trusted Clients, via cpconfig on a Security Gateway.
  D. Only using SmartConsole: Manage and Settings > Permissions and Administrators > Advanced > Trusted Clients.
  B. In cpconfig on a Security Management Server, in the WebUI logged into a Security Management Server, in SmartConsole: Manage and Settings > Permissions and Administrators > Advanced > Trusted Clients.

  ---

  Explanation/Reference:

  The administrator can edit a list of trusted SmartConsole clients in three ways: in cpconfig on a Security Management Server, in the WebUI logged into a Security Management Server, and in SmartConsole: Manage and Settings > Permissions and Administrators > Advanced > Trusted Clients

• Question 347:

  The Gateway Status view in SmartConsole shows the overall status of Security Gateways and Software Blades. What does the Status Attention mean?

  A. Cannot reach the Security Gateway.
  B. The gateway and all its Software Blades are working properly.
  C. At least one Software Blade has a minor issue, but the gateway works.
  D. Cannot make SIC between the Security Management Server and the Security Gateway
  C. At least one Software Blade has a minor issue, but the gateway works.

  ---

  Explanation/Reference:

  The Status Attention means that at least one Software Blade has a minor issue, but the gateway works. For example, this could indicate a license expiration warning, a policy installation failure, or a blade activation problem. References: Check Point R81 SmartConsole Guide, Check Point R81 Security Management Administration Guide

• Question 348:

  What are the three deployment considerations for a secure network?

  A. Distributed, Bridge Mode, and Remote
  B. Bridge Mode, Remote, and Standalone
  C. Remote, Standalone, and Distributed
  D. Standalone, Distributed, and Bridge Mode
  C. Remote, Standalone, and Distributed

  ---

  Explanation/Reference:

  The three deployment considerations for a secure network are Remote, Standalone, and Distributed. Remote deployment means that the Security Management Server and Security Gateway are installed on different machines. Standalone deployment means that the Security Management Server and Security Gateway are installed on the same machine. Distributed deployment means that there are multiple Security Gateways managed by one or more Security Management Servers. Therefore, the correct answer is C. Remote, Standalone, and Distributed.

• Question 349:

  The CDT utility supports which of the following?

  A. Major version upgrades to R77.30
  B. Only Jumbo HFA's and hotfixes
  C. Only major version upgrades to R80.10
  D. All upgrades
  D. All upgrades

  ---

  Explanation/Reference:

  The CDT utility supports all upgrades, including major version upgrades, Jumbo HFA's, and hotfixes. References: Check Point Upgrade Service Engine (CPUSE) - Gaia Deployment Agent

• Question 350:

  Fill in the blanks: A Security Policy is created in_____, stored in the_____ and Distributed to the various

  A. Rule base. Security Management Server Security Gateways
  B. The Check Point database. SmartConsole, Security Gateways
  C. SmartConsole, Security Gateway, Security Management Servers
  D. SmartConsole, Security Management Server, Security Gateways
  D. SmartConsole, Security Management Server, Security Gateways

  ---

  Explanation/Reference:

  A Security Policy is created in SmartConsole, stored in the Security Management Server, and distributed to the various Security Gateways. SmartConsole is a graphical user interface that allows administrators to create and edit security

  policies. The Security Management Server is a central server that stores and manages the security policies. The Security Gateways are devices that enforce the security policies on the network traffic.

  References: Check Point R81 Security Gateway Administration Guide, page 9.