CheckPoint 156-536 Online Practice Questions and Exam Preparation

CheckPoint 156-536 Online Questions & Answers

• Question 1:

  External Endpoint Policy Servers (EPS) decrease X and reduce X between sites?

  A. Decrease policies and reduce traffic between sites
  B. Decrease power and reduce accidents between sites
  C. Decrease clients and reduce device agents between sites
  D. External Endpoint Policy Servers (EPS) decrease the load of the EMS and reduce the bandwidth required between sites
  D. External Endpoint Policy Servers (EPS) decrease the load of the EMS and reduce the bandwidth required between sites

• Question 2:

  Which Endpoint capability ensures that protected computers comply with your organization's requirements and allows you to assign different security levels according to the compliance state of the endpoint computer?

  A. Compliance Check
  B. Capsule Cloud Compliance
  C. Forensics and Anti-Ransomware
  D. Full Disk Encryption
  A. Compliance Check

• Question 3:

  You're going to prepare a Deployment Scenario of an Endpoint Security Client on a Windows machine in an On-Prem environment. You choose one of two basic deployments - which is typical for a local deployment?

  A. Agent (Initial Client) package only
  B. Agent (Initial Client) and Software Blades packages
  C. Agent-less (no Client) and Software Blades packages
  D. Agent (free Client) package only
  B. Agent (Initial Client) and Software Blades packages

• Question 4:

  Why is it critical to change the default Agent Uninstall Password?

  A. All passwords and critical data are protected by Full Disk Encryption. The Endpoint agent supports pre-boot authentication so nobody can bypass the agent's security.
  B. There is no need to change it because only the local PC administrator can uninstall the agent.
  C. The default password used is easy to guess.
  D. You have to change the default Agent Uninstall Password because if you do not, it will be easy for a malware to uninstall the agent itself.
  D. You have to change the default Agent Uninstall Password because if you do not, it will be easy for a malware to uninstall the agent itself.

• Question 5:

  One of the ways to install Endpoint Security clients is `Automatic Deployment'. Which of this is true for automatic deployment of Endpoint Security clients?

  A. Automatic deployment can be done on any Windows machine with Check Point SmartConsole first installed
  B. Automatic deployment can be done on any Windows 10 machine without any Check Point component pre-installed
  C. For automatic deployment to work, the client system must have SVN Foundation enabled in Windows 10 or downloaded and installed on other operating systems
  D. Automatic deployment first requires installation of the Initial Client package, which is exported and distributed manually
  D. Automatic deployment first requires installation of the Initial Client package, which is exported and distributed manually

• Question 6:

  Which User Roles are on the Endpoint Security Management Server for On-Premises servers?

  A. Primary Administrator and Read-Only
  B. Super Admin, Primary Administrator, User Admin, Read-Only
  C. Admin and Read-Only
  D. Super Admin, Read-Write All, Read-Only
  C. Admin and Read-Only

• Question 7:

  Endpoint's Media Encryption (ME) Software Capability protects sensitive data on what, and how?

  A. Storage devices, removable media, and other input/output devices by requiring authorization before a user accesses the device
  B. Input/output devices using Anti-Malware
  C. Removable media and other input/output devices by using encryption methods
  D. Storage devices by requiring multi-factor authorization
  A. Storage devices, removable media, and other input/output devices by requiring authorization before a user accesses the device

• Question 8:

  The CEO of the company uses the latest Check Point Endpoint client on his laptop. All capabilities are enabled, and FDE has been applied. The CEO is on a business trip and remembers that he needs to send some important emails, so he is forced to boot up his laptop in a public area. However, he suddenly needs to leave and forgets to lock or shut down his computer. The laptop remains unattended. Is the CEO's data secured?

  A. The data is not secured. The laptop was left unlocked in the email client window. Everyone who accesses the laptop, before it automatically locks, has access to all data.
  B. The laptop is not secure because anyone in the local connected Wi-Fi can access the CEO's corporate data.
  C. The laptop is totally secure since the Endpoint client will automatically detect the emergency and has set the OS in hibernate mode.
  D. The laptop is using the latest technology for Full Disk Encryption. Anyone who finds the laptop can't access its data due to the data encryption used.
  A. The data is not secured. The laptop was left unlocked in the email client window. Everyone who accesses the laptop, before it automatically locks, has access to all data.

• Question 9:

  When can administrators prepare the client for the FDE software package installation and deployment?

  A. Once a client meets the maximum system requirements
  B. Once the policy is installed
  C. Once the client system volumes have 32 MB of space
  D. Once a client machine meets the minimum system requirements
  D. Once a client machine meets the minimum system requirements

• Question 10:

  Full Disk Encryption (FDE) protects data at rest stored on a Hard Drive.

  A. RAM Drive
  B. SMB Share
  C. NFS Share
  D. Hard Drive
  D. Hard Drive