CheckPoint 156-315.81.20 Online Practice Questions and Exam Preparation

CheckPoint 156-315.81.20 Online Questions & Answers

• Question 441:

  What are valid Policy Types in R81.

  X?

  A. Access Control, Threat Prevention, QoS, Desktop Security
  B. Access Control, IPS, Threat Emulation, NAT
  C. Access Control, IPS, QoS, DLP
  D. Access Control, RemoteAccess VPN, NAT, IPS
  A. Access Control, Threat Prevention, QoS, Desktop Security

• Question 442:

  What are possible Automatic Reactions in SmartEvent?

  A. Web Mail, Forward to SandBlast Appliance, SNMP Trap, External Script
  B. Web Mail, Block Service, SNMP Trap, SmartTask,Geo Protection
  C. Web Mail, Block Destination, SNMP Trap, SmartTask
  D. Mail, SNMP Trap, Block Source, Block Event Activity, External Script
  D. Mail, SNMP Trap, Block Source, Block Event Activity, External Script

• Question 443:

  The fwd process on the Security Gateway sends logs to the fwd process on the Management Server, where it is forwarded to _______ via _______.

  A. cpm, cpd
  B. cpwd, fwssd
  C. fwm, cpd
  D. cpd, fwm
  A. cpm, cpd

• Question 444:

  In Threat Prevention, you can create new or clone profiles but you CANNOT change the out-of-the-box profiles of:

  A. Basic, Optimized, Strict
  B. Basic, Optimized, Severe
  C. General, Escalation, Severe
  D. General, purposed, Strict
  A. Basic, Optimized, Strict

  ---

  Explanation

  Threat Prevention has three out-of-the-box profiles: Basic, Optimized, and Strict. These profiles define the default actions for different threat prevention blades, such as Anti-Virus, Anti-Bot, IPS, etc. You cannot change the settings of these profiles, but you can clone them and create new profiles with customized settings.

  References:

  Training & Certification | Check Point Software, CCSE section

• Question 445:

  What is required for a certificate-based VPN tunnel between two gateways with separate management systems?

  A. Mutually Trusted Certificate Authorities
  B. Shared User Certificates
  C. Shared Secret Passwords
  D. Unique Passwords
  A. Mutually Trusted Certificate Authorities

  ---

  Explanation

  A certificate-based VPN tunnel between two gateways with separate management systems requires mutually trusted certificate authorities. This means that each gateway must have a certificate issued by a certificate authority (CA) that the other gateway trusts. The CA can be either an internal CA or an external CA. The CA issues certificates that contain the public key and identity information of the gateway. The gateway uses its private key to sign and encrypt the VPN traffic. The other gateway can verify the signature and decrypt the traffic using the public key in the certificate. This ensures the authenticity, integrity, and confidentiality of the VPN tunnel.

  References:

  Remote Access VPN R81.20 Administration Guide, page 12 DeepDive Webinar - R81.20 Seamless VPN Connection to Public Cloud, slide 9

• Question 446:

  Using mgmt_cli, what is the correct syntax to import a host object called Server_1 from the CLI?

  A. mgmt_cli add-host "Server_1" ip_address "10.15.123.10" --format txt
  B. mgmt_cli add host name "Server_1" ip-address "10.15.123.10" --format json
  C. mgmt_cli add object-host "Server_1" ip-address "10.15.123.10" --format json
  D. mgmt._cli add object "Server-1" ip-address "10.15.123.10" --format json
  B. mgmt_cli add host name "Server_1" ip-address "10.15.123.10" --format json

  ---

  Explanation

  The correct syntax to import a host object using mgmt_cli is mgmt_cli add host name <name> ip-address

  <ip- address> --format <format>1. The name and ip-address parameters are mandatory, while the format parameter is optional and can be either json or txt. The other options are incorrect because they either use wrong parameters, wrong hyphens, or wrong object types.

  References:

  1: Check Point Resource Library2

• Question 447:

  Which of the following is NOT an identity source used for Identity Awareness?

  A. Remote Access
  B. UserCheck
  C. RADIUS
  D. AD Query
  B. UserCheck

• Question 448:

  What is the benefit of Manual NAT over Automatic NAT?

  A. If you create a new Security Policy, the Manual NAT rules will be transferred to this new policy.
  B. There is no benefit since Automatic NAT has in any case higher priority over Manual NAT
  C. You have the full control about the priority of the NAT rules
  D. On IPSO and GAIA Gateways, it is handled in a stateful manner
  C. You have the full control about the priority of the NAT rules

  ---

  Explanation

  The benefit of Manual NAT over Automatic NAT is that you have full control over the priority of the NAT rules. Manual NAT allows you to create NAT rules that are independent of the security policy and specify the order in which they are applied. Automatic NAT creates NAT rules based on the objects' NAT properties and places them according to predefined criteria. The other options are not benefits of Manual

  NAT over Automatic NAT.

  References:

  Check Point Software, Getting Started, NAT Rule Base.

• Question 449:

  Which command is used to display status information for various components?

  A. show sysenrv all
  B. show all systems
  C. show system messages
  D. sysmess all
  A. show sysenrv all

• Question 450:

  What is true about VRRP implementations?

  A. VRRP membership is enabled in cpconfig
  B. VRRP can be used together with ClusterXL, but with degraded performance
  C. You cannot have a standalone deployment
  D. You cannot have different VRIDs in the same physical network
  C. You cannot have a standalone deployment