CheckPoint 156-215.81 Online Practice Questions and Exam Preparation

CheckPoint 156-215.81 Online Questions & Answers

• Question 71:

  Which of these is NOT a feature or benefit of Application Control?

  A. Eliminate unknown and unwanted applications in your network to reduce IT complexity and application risk.
  B. Identify and control which applications are in your IT environment and which to add to the IT environment.
  C. Scans the content of files being downloaded by users in order to make policy decisions.
  D. Automatically identify trusted software that has authorization to run
  C. Scans the content of files being downloaded by users in order to make policy decisions.

  ---

  Explanation/Reference:

  Application Control is a blade that enables administrators to control access to applications and web sites by users, groups, machines, and time. Application Control can eliminate unknown and unwanted applications in your network to reduce IT complexity and application risk, identify and control which applications are in your IT environment and which to add to the IT environment, and automatically identify trusted software that has authorization to run. However, Application Control cannot scan the content of files being downloaded by users in order to make policy decisions. That is the function of another blade called Content Awareness, which can inspect files based on their type, size, name, and data.

  References: Check Point R81 Application Control Administration Guide, Check Point R81 Content Awareness Administration Guide

• Question 72:

  Which Check Point software blade prevents malicious files from entering a network using virus signatures and anomaly-based protections from ThreatCloud?

  A. Firewall
  B. Application Control
  C. Anti-spam and Email Security
  D. Anti-Virus
  D. Anti-Virus

  ---

  Explanation/Reference:

  Anti-Virus is the Check Point software blade that prevents malicious files from entering a network using virus signatures and anomaly-based protections from ThreatCloud. Anti-Virus scans files and email attachments for viruses, worms, trojans, and other types of malware. It also uses ThreatCloud, a collaborative network that delivers real- time dynamic security intelligence, to detect unknown malware based on their behavior. Firewall is a software blade that enforces security policy by inspecting and controlling network traffic. Application Control is a software blade that enables administrators to control access to web applications. Anti-spam and Email Security is a software blade that protects email infrastructure from spam, phishing, and malware attacks.

• Question 73:

  Fill in the blank Once a license is activated, a___________should be installed.

  A. Security Gateway Contract file
  B. Service Contract file
  C. License Management file
  D. License Contract file
  B. Service Contract file

  ---

  Explanation/Reference:

  Once a license is activated, a Service Contract file should be installed. This file contains information about the license expiration date, support level, and other details.

  The other options are not valid file names.

  References: 3: Check Point R81 Security Management Administration Guide, page 15.

• Question 74:

  Which of the following is considered to be the more secure and preferred VPN authentication method?

  A. Password
  B. Certificate
  C. MD5
  D. Pre-shared secret
  B. Certificate

  ---

  Explanation/Reference:

  Certificate-based authentication is considered to be the more secure and preferred VPN authentication method. It uses digital certificates to verify the identity of the VPN client and server, and provides stronger encryption and mutual authentication. Password-based authentication methods are less secure and more vulnerable to brute-force attacks, phishing, and keylogging. MD5 is a hashing algorithm, not an authentication method. Pre-shared secret is a symmetric key that is shared between the VPN peers, but it can be compromised if it is not changed frequently or stored securely References: VPN authentication options, Windows VPN technical guide

• Question 75:

  Which of the following commands is used to verify license installation?

  A. Cplic verify license
  B. Cplic print
  C. Cplic show
  D. Cplic license
  B. Cplic print

  ---

  Explanation/Reference:

  The command cplic print is used to verify license installation. It displays the installed licenses and their expiration dates . References: [Check Point R81 Command Line Interface Reference Guide]

• Question 76:

  Which option in a firewall rule would only match and allow traffic to VPN gateways for one Community in common?

  A. All Connections (Clear or Encrypted)
  B. Accept all encrypted traffic
  C. Specific VPN Communities
  D. All Site-to-Site VPN Communities
  C. Specific VPN Communities

  ---

  Explanation/Reference:

  Specific VPN Communities is the option that would only match and allow traffic to VPN gateways for one Community in common. This option allows you to define a specific VPN community that includes the VPN gateways that are allowed to communicate with each other. The other options are either too broad or too narrow for this scenario. References: [Site to Site VPN in R80.x - Tutorial for Beginners]

• Question 77:

  What is true about the IPS-Blade?

  A. in R80, IPS is managed by the Threat Prevention Policy
  B. in R80, in the IPS Layer, the only three possible actions are Basic, Optimized and Strict
  C. in R80, IPS Exceptions cannot be attached to "all rules"
  D. in R80, the GeoPolicy Exceptions and the Threat Prevention Exceptions are the same
  A. in R80, IPS is managed by the Threat Prevention Policy

  ---

  Explanation/Reference:

  In R80, IPS is managed by the Threat Prevention Policy. The Threat Prevention Policy defines how to protect the network from malicious traffic using IPS, Anti-Bot, Anti-Virus, and Threat Emulation software blades. The IPS layer in the Threat Prevention Policy allows configuring IPS protections and actions for different network segments. The other options are not true about the IPS-Blade. References: Check Point IPS Datasheet, Check Point IPS Software Blade, Quantum Intrusion Prevention System (IPS)

• Question 78:

  Bob and Joe both have Administrator Roles on their Gaia Platform. Bob logs in on the WebUI and then Joe logs in through CLI. Choose what BEST describes the following scenario, where Bob and Joe are both logged in:

  A. Since they both are logged in on different interfaces, they will both be able to make changes.
  B. When Joe logs in. Bob will be logged out automatically.
  C. The database will be locked by Bob and Joe will not be able to make any changes.
  D. Bob will receive a prompt that Joe has logged in.
  A. Since they both are logged in on different interfaces, they will both be able to make changes.

  ---

  Explanation/Reference:

  Since Bob and Joe both have Administrator Roles on their Gaia Platform and they both are logged in on different interfaces, they will both be able to make changes. Gaia allows multiple administrators to log in simultaneously and perform different tasks without locking the database or logging out each other. References: Gaia R81.20 Administration Guide, page 18.

• Question 79:

  A Check Point Software license consists of two components, the Software Blade and the Software Container. There are ______ types of Software Containers: ________.

  A. Two; Security Management and Endpoint Security
  B. Two; Endpoint Security and Security Gateway
  C. Three; Security Management, Security Gateway, and Endpoint Security
  D. Three; Security Gateway, Endpoint Security, and Gateway Management
  C. Three; Security Management, Security Gateway, and Endpoint Security

  ---

  Explanation/Reference:

  A Check Point Software license consists of two components, the Software Blade and the Software Container. There are three types of Software Containers: Security Management, Security Gateway, and Endpoint Security. A Software Blade is a specific security function that can be enabled or disabled on a Software Container. A Software Container is a platform that runs one or more Software Blades. Security Management is a container that manages the security policy and configuration of Security Gateways. Security Gateway is a container that enforces the security policy on network traffic. Endpoint Security is a container that protects endpoints from threats and data loss. References: Check Point Licensing and Contract Operations User Guide

• Question 80:

  Where is the "Hit Count" feature enabled or disabled in SmartConsole?

  A. On the Policy Package
  B. On each Security Gateway
  C. On the Policy layer
  D. In Global Properties for the Security Management Server
  C. On the Policy layer

  ---

  Explanation/Reference:

  The "Hit Count" feature is enabled or disabled on the Policy layer in SmartConsole. To enable or disable the "Hit Count" feature, right-click on the Policy layer and select "Edit Layer". Then, check or uncheck the "Enable Hit Count" option. References: Solved: Hit Count in R80.x