CheckPoint Checkpoint Certifications 156-315.80 Questions & Answers

• Question 191:

  Which of the following is NOT an alert option?

  A. SNMP

  B. High alert

  C. Mail

  D. User defined alert

  Correct Answer: B

  Reference: https://sc1.checkpoint.com/documents/R77/ CP_R77_SmartViewMonitor_AdminGuide/101104.htm

• Question 192:

  What does it mean if Deyra sees the gateway status? (Choose the BEST answer.)

  

  A. SmartCenter Server cannot reach this Security Gateway.

  B. There is a blade reporting a problem.

  C. VPN software blade is reporting a malfunction.

  D. Security Gateway's MGNT NIC card is disconnected.

  Correct Answer: B

  Reference: https://sc1.checkpoint.com/sc/SolutionsStatics/NEW_SK_NOID1493612962436/ active1704302237.fw.png

• Question 193:

  How many layers make up the TCP/IP model?

  A. 2

  B. 7

  C. 6

  D. 4

  Correct Answer: D

• Question 194:

  What is the Implicit Clean-up Rule?

  A. A setting is defined in the Global Properties for all policies.

  B. A setting that is configured per Policy Layer.

  C. Another name for the Clean-up Rule.

  D. Automatically created when the Clean-up Rule is defined.

  Correct Answer: C

• Question 195:

  Ken wants to obtain a configuration lock from other administrator on R80 Security Management Server. He can do this via WebUI or via CLI.

  Which command should he use in CLI? (Choose the correct answer.)

  A. remove database lock

  B. The database feature has one command lock database override.

  C. override database lock

  D. The database feature has two commands lock database override and unlock database. Both will work.

  Correct Answer: D

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Gaia_WebAdmin/75697.htm#o73091

• Question 196:

  What will be the effect of running the following command on the Security Management Server?

  

  A. Remove the installed Security Policy.

  B. Remove the local ACL lists.

  C. No effect.

  D. Reset SIC on all gateways.

  Correct Answer: A

  Reference: https://sc1.checkpoint.com/documents/R77/ CP_R77_SecurityGatewayTech_WebAdmin/6751.htm

• Question 197:

  Which of the following is NOT a VPN routing option available in a star community?

  A. To satellites through center only.

  B. To center, or through the center to other satellites, to Internet and other VPN targets.

  C. To center and to other satellites through center.

  D. To center only.

  Correct Answer: AD

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80BC_VPN/html_frameset.htm

• Question 198:

  Fill in the blank. Once a certificate is revoked from the Security Gateway by the Security Management Server, the certificate information is ________ .

  A. Sent to the Internal Certificate Authority.

  B. Sent to the Security Administrator.

  C. Stored on the Security Management Server.

  D. Stored on the Certificate Revocation List.

  Correct Answer: D

• Question 199:

  After trust has been established between the Check Point components, what is TRUE about name and IP-address changes?

  A. Security Gateway IP-address cannot be changed without re-establishing the trust.

  B. The Security Gateway name cannot be changed in command line without re-establishing trust.

  C. The Security Management Server name cannot be changed in SmartConsole without re-establishing trust.

  D. The Security Management Server IP-address cannot be changed without re-establishing the trust.

  Correct Answer: A

• Question 200:

  What is UserCheck?

  A. Messaging tool used to verify a user's credentials.

  B. Communication tool used to inform a user about a website or application they are trying to access.

  C. Administrator tool used to monitor users on their network.

  D. Communication tool used to notify an administrator when a new user is created.

  Correct Answer: B