CheckPoint Checkpoint Certifications 156-915.80 Questions & Answers

• Question 451:

  Where does the security administrator activate Identity Awareness within SmartDashboard?

  A. Gateway Object > General Properties

  B. Security Management Server > Identity Awareness

  C. Policy > Global Properties > Identity Awareness

  D. LDAP Server Object > General Properties

  Correct Answer: A

• Question 452:

  How do you configure the Security Policy to provide user access to the Captive Portal through an external (Internet) interface?

  A. Change the gateway settings to allow Captive Portal access via an external interface.

  B. No action is necessary. This access is available by default.

  C. Change the Identity Awareness settings under Global Properties to allow Captive Portal access on all interfaces.

  D. Change the Identity Awareness settings under Global Properties to allow Captive Portal access for an external interface.

  Correct Answer: A

• Question 453:

  What happens if the identity of a user is known?

  A. If the user credentials do not match an Access Role, the traffic is automatically dropped.

  B. If the user credentials do not match an Access Role, the system displays a sandbox.

  C. If the user credentials do not match an Access Role, the gateway moves onto the next rule.

  D. If the user credentials do not match an Access Role, the system displays the Captive Portal.

  Correct Answer: C

• Question 454:

  What happens if the identity of a user is known?

  A. If the user credentials do not match an Access Role, the system displays the Captive Portal.

  B. If the user credentials do not match an Access Role, the system displays a sandbox.

  C. If the user credentials do not match an Access Role, the traffic is automatically dropped.

  D. If the user credentials match an Access Role, the rule is applied and traffic is accepted or dropped based on the defined action.

  Correct Answer: D

• Question 455:

  What type of traffic can be re-directed to the Captive Portal?

  A. SMTP

  B. HTTP

  C. All of the above

  D. FTP

  Correct Answer: B

• Question 456:

  Captive Portal is a __________ that allows the gateway to request login information from the user.

  A. Pre-configured and customizable web-based tool

  B. Transparent network inspection tool

  C. LDAP server add-on

  D. Separately licensed feature

  Correct Answer: A

• Question 457:

  Complete this statement from the options provided. Using Captive Portal, unidentified users may be either; blocked, allowed to enter required credentials, or required to download the _____________.

  A. Identity Awareness Agent

  B. Full Endpoint Client

  C. ICA Certificate

  D. SecureClient

  Correct Answer: A

• Question 458:

  Users with Identity Awareness Agent installed on their machines login with __________, so that when the user logs into the domain, that information is also used to meet Identity Awareness credential requests.

  A. Key-logging

  B. ICA Certificates

  C. SecureClient

  D. Single Sign-On

  Correct Answer: D

• Question 459:

  When using AD Query to authenticate users for Identity Awareness, identity data is received seamlessly from the Microsoft Active Directory (AD). What is NOT a recommended usage of this method?

  A. Leveraging identity in the application control blade

  B. Basic identity enforcement in the internal network

  C. Identity-based auditing and logging

  D. Identity-based enforcement for non-AD users (non-Windows and guest users)

  Correct Answer: D

• Question 460:

  The Identity Agent is a lightweight endpoint agent that authenticates securely with Single Sign-On (SSO). What is not a recommended usage of this method?

  A. When accuracy in detecting identity is crucial

  B. Leveraging identity for Data Center protection

  C. Protecting highly sensitive servers

  D. Identity based enforcement for non-AD users (non-Windows and guest users)

  Correct Answer: D