CheckPoint 156-215.81 Online Practice Questions and Exam Preparation

CheckPoint 156-215.81 Online Questions & Answers

• Question 31:

  What is the best sync method in the ClusterXL deployment?

  A. Use 1 cluster + 1st sync
  B. Use 1 dedicated sync interface
  C. Use 3 clusters + 1st sync + 2nd sync + 3rd sync
  D. Use 2 clusters + 1st sync + 2nd sync
  B. Use 1 dedicated sync interface

  ---

  Explanation/Reference:

  The best sync method in the ClusterXL deployment is to use one dedicated sync interface. This method provides optimal performance and reliability for synchronization traffic. Using multiple sync interfaces is not recommended as it increases CPU load and does not provide 100% sync redundancy. Using multiple clusters is not a sync method, but a cluster topology. References: Sync Redundancy in ClusterXL, Best Practice for HA sync interface

• Question 32:

  The default shell of the Gaia CLI is cli.sh. How do you change from the cli.sh shell to the advanced shell to run Linux commands?

  A. Execute the command 'enable' in the cli.sh shell
  B. Execute the 'conf t' command in the cli.sh shell
  C. Execute the command 'expert' in the cli.sh shell
  D. Execute the 'exit' command in the cli.sh shell
  C. Execute the command 'expert' in the cli.sh shell

  ---

  Explanation/Reference:

  The default shell of the Gaia CLI is cli.sh, which provides a limited set of commands for basic configuration and troubleshooting. To change from the cli.sh shell to the advanced shell (also known as expert mode) to run Linux commands, the administrator needs to execute the command `expert' in the cli.sh shell

• Question 33:

  Which of the following is NOT an authentication scheme used for accounts created through SmartConsole?

  A. RADIUS
  B. Check Point password
  C. Security questions
  D. SecurID
  C. Security questions

  ---

  Explanation/Reference:

  Security questions are not an authentication scheme used for accounts created through SmartConsole. The available authentication schemes are Check Point password, RADIUS, TACACS, SecurID, LDAP, and Certificate. References: Check Point R81 Security Management Administration Guide

• Question 34:

  When installing a dedicated R80 SmartEvent server, what is the recommended size of the root partition?

  A. Any size
  B. Less than 20GB
  C. More than 10GB and less than 20 GB
  D. At least 20GB
  D. At least 20GB

  ---

  Explanation/Reference:

  The correct answer is D because the recommended size of the root partition for a dedicated R80 SmartEvent server is at least 20GB. Any size, less than 20GB, or more than 10GB and less than 20GB are not sufficient for the SmartEvent server.

  References: Check Point R80.40 Installation and Upgrade Guide

• Question 35:

  Which of the following commands is used to monitor cluster members in CLI?

  A. show cluster state
  B. show active cluster
  C. show clusters D. show running cluster
  A. show cluster state

  ---

  Explanation/Reference:

  The command show cluster state is used to monitor cluster members in CLI. It displays information such as the cluster mode, the cluster members, their status, their priority, and their interfaces.References: [ClusterXL Administration Guide], [Check Point CLI Reference Card]

• Question 36:

  Identity Awareness lets an administrator easily configure network access and auditing based on three items Choose the correct statement.

  A. Network location, the identity of a user and the active directory membership.
  B. Network location, the identity of a user and the identity of a machine.
  C. Network location, the telephone number of a user and the UID of a machine
  D. Geographical location, the identity of a user and the identity of a machine
  B. Network location, the identity of a user and the identity of a machine.

  ---

  Explanation/Reference:

  Identity Awareness is a software blade that lets an administrator easily configure network access and auditing based on three items: network location, the identity of a user, and the identity of a machine. These items are used to identify and authenticate users and machines, and to enforce identity-based policies. Network location refers to the IP address or subnet of the source or destination of the traffic. The identity of a user can be obtained from various sources, such as Active Directory, LDAP, or Captive Portal. The identity of a machine can be verified by using Secure Domain Logon or Identity Agent.

• Question 37:

  Using R80 Smart Console, what does a "pencil icon" in a rule mean?

  A. I have changed this rule
  B. Someone else has changed this rule
  C. This rule is managed by check point's SOC
  D. This rule can't be changed as it's an implied rule
  A. I have changed this rule

  ---

  Explanation/Reference:

  The correct answer is A because a pencil icon in a rule means that you have changed this rule. The pencil icon indicates that the rule has been modified but not published yet. You can hover over the pencil icon to see who made the change and when. The other options are not related to the pencil icon. References: Check Point Learning and Training Frequently Asked Questions (FAQs)

• Question 38:

  Which single Security Blade can be turned on to block both malicious files from being downloaded as well as block websites known to host malware?

  A. Anti-Bot
  B. None - both Anti-Virus and Anti-Bot are required for this
  C. Anti-Virus
  D. None - both URL Filtering and Anti-Virus are required for this.
  C. Anti-Virus

  ---

  Explanation/Reference:

  Anti-Virus is the single Security Blade that can be turned on to block both malicious files from being downloaded as well as block websites known to host malware. Anti-Virus scans files and email attachments for viruses, worms, trojans, and other types of malware. It also uses ThreatCloud, a collaborative network that delivers real-time dynamic security intelligence, to detect unknown malware based on their behavior. Anti-Bot is a Security Blade that detects and blocks botnet communications, but it does not scan files or block websites. URL Filtering is a Security Blade that enables administrators to control access to web applications, but it does not scan files or detect malware.

• Question 39:

  Which of the following methods can be used to update the trusted log server regarding the policy and configuration changes performed on the Security Management Server?

  A. Save Policy
  B. Install Database
  C. Save session
  D. Install Policy
  A. Save Policy

  ---

  Explanation/Reference:

  The method to update the trusted log server regarding the policy and configuration changes performed on the Security Management Server is Save Policy. Saving a policy updates the trusted log server with the latest policy and configuration changes. References: Check Point R81 Logging and Monitoring Administration Guide

• Question 40:

  What object type would you use to grant network access to an LDAP user group?

  A. Access Role
  B. User Group
  C. SmartDirectory Group
  D. Group Template
  B. User Group

  ---

  Explanation/Reference:

  The Access Role object type is used to grant network access to an LDAP user group. It defines a set of users and machines that can access a specific network resource References: Access Role, LDAP User Group