CheckPoint 156-215.81 Online Practice Questions and Exam Preparation

CheckPoint 156-215.81 Online Questions & Answers

• Question 391:

  Which of the following is an identity acquisition method that allows a Security Gateway to identify Active Directory users and computers?

  A. Active Directory Query
  B. User Directory Query
  C. Account Unit Query
  D. UserCheck
  A. Active Directory Query

  ---

  Explanation/Reference:

  Active Directory Query is an identity acquisition method that allows a Security Gateway to identify Active Directory users and computers. Active Directory Query enables the Security Gateway to query the Active Directory Domain Controllers for user and computer information, such as IP addresses, group memberships, and login events. References: Check Point R81 Identity Awareness Administration Guide, page 14.

• Question 392:

  Which one of these features is NOT associated with the Check Point URL Filtering and Application Control Blade?

  A. Detects and blocks malware by correlating multiple detection engines before users are affected.
  B. Configure rules to limit the available network bandwidth for specified users or groups.
  C. Use UserCheck to help users understand that certain websites are against the company's security policy.
  D. Make rules to allow or block applications and Internet sites for individual applications, categories, and risk levels.
  A. Detects and blocks malware by correlating multiple detection engines before users are affected.

  ---

  Explanation/Reference:

  The correct answer is A because detecting and blocking malware by correlating multiple detection engines before users are affected is not a feature of the Check Point URL Filtering and Application Control Blade. This feature is part of the Check Point Anti-Virus and Anti-Bot Blades3. The other options are features of the Check Point URL Filtering and Application Control Blade. References: Check Point R81 URL Filtering and Application Control Administration Guide

• Question 393:

  When should you generate new licenses?

  A. Before installing contract files.
  B. After an RMA procedure when the MAC address or serial number of the appliance changes.
  C. When the existing license expires, license is upgraded or the IP-address where the license is tied changes.
  D. Only when the license is upgraded.
  C. When the existing license expires, license is upgraded or the IP-address where the license is tied changes.

  ---

  Explanation/Reference:

  You should generate new licenses when the existing license expires, license is upgraded or the IP-address where the license is tied changes. These scenarios require a new license to be generated and activated on the Security Gateway or Management Server. Therefore, the correct answer is C. When the existing license expires, license is upgraded or the IP-address where the license is tied changes

• Question 394:

  Which Check Point supported authentication scheme typically requires a user to possess a token?

  A. RADIUS
  B. Check Point password
  C. TACACS
  D. SecurlD
  D. SecurlD

  ---

  Explanation/Reference:

  SecurID is a Check Point supported authentication scheme that typically requires a user to possess a token. A token is a physical device that generates a one-time password that changes periodically. The user must enter the password along with their username to authenticate. References: Remote Access VPN R81.20 Administration Guide, page 30.

• Question 395:

  In Logging and Monitoring, the tracking options are Log, Detailed Log and Extended Log. Which of the following options can you add to each Log, Detailed Log and Extended Log?

  A. Accounting
  B. Suppression
  C. Accounting/Suppression
  D. Accounting/Extended
  C. Accounting/Suppression

  ---

  Explanation/Reference:

  In Logging and Monitoring, the tracking options are Log, Detailed Log and Extended Log. You can add Accounting and/or Suppression to each of these options. Accounting enables you to track the amount of data that is sent or received by a specific rule. Suppression enables you to reduce the number of logs that are generated by a specific rule. Therefore, the correct answer is C. Accounting/Suppression. References: Logging and Monitoring Administration Guide R80 - Check Point Software

• Question 396:

  Which of the completed statements is NOT true? The WebUI can be used to manage Operating System user accounts and:

  A. add users to your Gaia system.
  B. assign privileges to users.
  C. assign user rights to their home directory in the Security Management Server.
  D. edit the home directory of the user.
  C. assign user rights to their home directory in the Security Management Server.

  ---

  Explanation/Reference:

  The WebUI can be used to manage Operating System user accounts and add users to your Gaia system, assign privileges to users, and edit the home directory of the user. However, it cannot assign user rights to their home directory in the Security Management Server. This is done by the SmartConsole. References: Check Point R81 Security Management Administration Guide, page 11.

• Question 397:

  Which tool is used to enable ClusterXL?

  A. SmartUpdate
  B. cpconfig
  C. SmartConsole
  D. sysconfig
  B. cpconfig

  ---

  Explanation/Reference:

  The tool that is used to enable ClusterXL is cpconfig. ClusterXL is a software-based Load Sharing and High Availability solution that distributes network traffic between clusters of redundant Security Gateways. To enable ClusterXL, you need to run the cpconfig command on each cluster member and select Enable Cluster membership for this gateway. Therefore, the correct answer is B. cpconfig.

• Question 398:

  After the initial installation on Check Point appliance, you notice that the Management interface and default gateway are incorrect. Which commands could you use to set the IP to 192.168.80.200/24 and default gateway to 192.168.80.1.

  A. set interface Mgmt ipv4-address 192.168.80.200 mask-length 24set static-route default nexthop gateway address 192.168.80.1 onsave config
  B. add interface Mgmt ipv4-address 192.168.80.200 255.255.255.0add static-route 0.0.0.0.0.0.0.0 gw 192.168.80.1 onsave config
  C. set interface Mgmt ipv4-address 192.168.80.200 255.255.255.0add static-route 0.0.0.0.0.0.0.0 gw 192.168.80.1 onsave config
  D. add interface Mgmt ipv4-address 192.168.80.200 mask-length 24add static-route default nexthop gateway address 192.168.80.1 onsave config
  A. set interface Mgmt ipv4-address 192.168.80.200 mask-length 24set static-route default nexthop gateway address 192.168.80.1 onsave config

  ---

  Explanation/Reference:

  The commands you could use to set the IP to 192.168.80.200/24 and default gateway to 192.168.80.1 after the initial installation on Check Point appliance are:

  set interface Mgmt ipv4-address 192.168.80.200 mask-length 24. This command sets the IPv4 address and subnet mask of the Management interface. set static-route default nexthop gateway address 192.168.80.1 on. This command sets

  the default gateway for IPv4 routing.

  save config. This command saves the configuration changes. References: [Check Point R81 Gaia CLI Reference Guide], [Check Point R81 Gaia Administration Guide]

• Question 399:

  Which method below is NOT one of the ways to communicate using the Management API's?

  A. Typing API commands using the "mgmt_cli" command
  B. Typing API commands from a dialog box inside the SmartConsole GUI application
  C. Typing API commands using Gaia's secure shell (clash)19+
  D. Sending API commands over an http connection using web-services
  D. Sending API commands over an http connection using web-services

  ---

  Explanation/Reference:

  The correct answer is D because sending API commands over an http connection using web-services is not one of the ways to communicate using the Management API's. The Management API's support HTTPS protocol only, not HTTP. The other methods are valid ways to communicate using the Management API's. References: Check Point Learning and Training Frequently Asked Questions (FAQs)

• Question 400:

  Which of the following is NOT a tracking option? (Select three)

  A. Partial log
  B. Log
  C. Network log
  D. Full log
  A. Partial log
  C. Network log
  D. Full log

  ---

  Explanation/Reference:

  The options that are not tracking options are Partial log, Network log, and Full log. Tracking options are settings that determine how the Security Gateway handles traffic that matches a rule in the security policy. The valid tracking options are Log, Detailed Log, Extended Log, Alert, Mail, SNMP trap, User Defined Alert, and None. The other options are incorrect. Log is a tracking option that records basic information about the traffic, such as source, destination, service, action, etc. Detailed Log is a tracking option that records additional information about the traffic, such as NAT details, data amount, etc. Extended Log is a tracking option that records even more information about the traffic, such as matched IPS protections, application details, etc. References: [Logging and Monitoring Administration Guide R80 - Check Point Software]