CheckPoint 156-315.81.20 Online Practice Questions and Exam Preparation

CheckPoint 156-315.81.20 Online Questions & Answers

• Question 141:

  Which feature identifies users and applies identity-based policies?

  A. IPS
  B. Identity Awareness
  C. Anti-Bot
  D. SecureXL
  B. Identity Awareness

  ---

  Explanation

  Identity Awareness enables policies based on user identity rather than just IP addresses, improving access control.

• Question 142:

  How do Capsule Connect and Capsule Workspace differ?

  A. Capsule Connect provides a Layer3 VPN. Capsule Workspace provides a Desktop with usable applications.
  B. Capsule Workspace can provide access to any application.
  C. Capsule Connect provides Business data isolation.
  D. Capsule Connect does not require an installed application at client.
  A. Capsule Connect provides a Layer3 VPN. Capsule Workspace provides a Desktop with usable applications.

  ---

  Explanation

  Capsule Connect and Capsule Workspace are both components of Check Point's remote access solution, but they serve different purposes and have distinct features:

  Option A: Capsule Connect provides a Layer 3 VPN, which allows remote users to connect securely to their corporate network. It typically provides network-level access, allowing users to access resources on the corporate network. On the other hand, Capsule Workspace provides a secure workspace environment, including a virtual desktop with usable applications. It is more focused on providing application-level access to users in a secure manner.

  Option B: This statement is partially true. Capsule Workspace is designed to provide secure access to a wide range of applications and resources, not limited to specific applications.

  Option C: Capsule Connect does provide business data isolation by creating a secure VPN tunnel for remote users, ensuring that their network traffic is isolated from the public internet.

  Option D: Capsule Connect usually requires an installed application or VPN client on the client device to establish a secure connection to the corporate network. This statement is not entirely accurate because an installed application or client is typically required. Therefore, option A is the correct answer as it accurately distinguishes between Capsule Connect and Capsule Workspace based on their primary functionalities.

  References:

  Check Point Certified Security Expert (CCSE) R81 documentation and learning resources.

• Question 143:

  Fill in the blanks: Gaia can be configured using the ______ or _____.

  A. GaiaUI; command line interface
  B. WebUI; Gaia Interface
  C. Command line interface; WebUI
  D. Gaia Interface; GaiaUI
  C. Command line interface; WebUI

  ---

  Explanation

  Gaia can be configured using the command line interface (CLI) or the WebUI. The CLI is a text-based interface that allows users to enter commands and view responses in a terminal window. The CLI can be accessed through a console connection, an SSH connection, or a Telnet connection. The WebUI is a graphical interface that allows users to configure Gaia settings through a web browser. The WebUI can be accessed by entering the IP address of the Gaia device in the browser's address bar.

• Question 144:

  The system administrator of a company is trying to find out why acceleration is not working for the traffic.

  The traffic is allowed according to the rule based and checked for viruses. But it is not accelerated.

  What is the most likely reason that the traffic is not accelerated?

  A. The connection is destined for a server within the network
  B. The connection required a Security server
  C. The packet is the second in an established TCP connection
  D. The packets are not multicast
  B. The connection required a Security server

  ---

  Explanation

  The most likely reason that the traffic is not accelerated is that the connection required a Security server. A Security server is a Check Point mechanism that inspects traffic that cannot be directly handled by the kernel. For example, traffic that requires content inspection, such as HTTP, FTP, SMTP, or VPN-1

  SecuRemote /SecureClient. When a connection requires a Security server, it cannot be accelerated by SecureXL, which is a technology that offloads the processing of security operations from the CPU to improve performance. The other options are not relevant for acceleration.

• Question 145:

  Identify the API that is not supported by Check Point currently.

  A. R81 Management API-
  B. Identity Awareness Web Services API
  C. Open REST API
  D. OPSEC SDK
  C. Open REST API

  ---

  Explanation

  Check Point currently supports four types of APIs: R81 Management API, Identity Awareness Web Services API, OPSEC SDK, and Gaia REST API. The Open REST API is not a valid option.

  References:

  Check Point APIs

• Question 146:

  Is it possible to establish a VPN before the user logs in to the Endpoint Client?

  A. Yes, you have to set neo_remember_user_password to true in the trac.defaults of the Remote Access Client, or you can use the endpoint_vpn_remember_user_password attribute in the trac_client_1.ttm file located in the $FWDIR/conf directory on the Security Gateway
  B. No, the user must log in first
  C. Yes, you have to set neo_always_connected to true in the trac.defaults of the Remote Access Client, or you can use the endpoint_vpn_always_connected attribute in the trac_client_1.ttm file located in the $FWDIR/conf directory on the Security Gateway
  D. Yes, you have to enable Machine Authentication in the Gateway object in SmartConsole
  D. Yes, you have to enable Machine Authentication in the Gateway object in SmartConsole

  ---

  Explanation

  The Gateway object of SmartConsole. Machine Authentication is a feature that allows you to authenticate with a machine certificate and establish a VPN tunnel before Windows logon. This feature provides the following benefits: It enhances the security of the VPN connection by verifying the identity of the machine before allowing access to the network.

  It simplifies the user experience by eliminating the need to enter credentials twice (once for the VPN and once for Windows logon). It enables seamless connectivity to network resources and domain services, such as Group Policy, login scripts, and mapped drives. Machine Authentication is supported on Check Point Endpoint Security Client for Windows E80.71 and higher versions. It requires a hotfix on top of R77.30 Jumbo Hotfix Take 286 on the Security Gateway. To configure Machine Authentication, you need to do the following steps: Generate and distribute machine certificates to the endpoint machines using a trusted Certificate Authority (CA). Enable Machine Authentication in the Gateway object of SmartConsole and select the CA that issued the machine certificates. Install the policy on the Security Gateway and reboot it. Enable Machine Authentication in the Endpoint Security Client and select the machine certificate to use.

• Question 147:

  Which command shows connection table entries?

  A. fw tab -t connections
  B. fw ctl stat
  C. cpstat fw
  D. netstat
  A. fw tab -t connections

  ---

  Explanation

  The command fw tab -t connections displays active connections tracked by the firewall.

• Question 148:

  Identity Awareness allows the Security Administrator to configure network access based on which of the following?

  A. Name of the application, identity of the user, and identity of the machine
  B. Identity of the machine, username, and certificate
  C. Browser-Based Authentication,identity of a user,and network location
  D. Network location, identity of a user, and identity of a machine
  D. Network location, identity of a user, and identity of a machine

• Question 149:

  Which process handles connections from SmartConsole R80?

  A. cpm
  B. cpd
  C. cpmd
  D. fwd
  A. cpm

• Question 150:

  What is the command switch to specify the Gaia API context?

  A. You have to specify it in the YAML file api.yml which is located underneath the /etc. directory of the security management server
  B. You have to change to the zsh-Shell which defaults to the Gaia API context.
  C. No need to specify a context, since it defaults to the Gaia API context.
  D. mgmt_cli --context gaia_api <Command>
  D. mgmt_cli --context gaia_api <Command>

  ---

  Explanation

  The command switch to specify the Gaia API context is mgmt_cli --context gaia_api <Command>. This switch allows the user to execute Gaia OS commands through the management API. The Gaia API context is different from the default management API context, which is used to execute commands related to the security policy and objects.

  References:

  Check Point R81 Management API Reference Guide