Check-Point 156-215.80 Free Practice Questions

NEW QUESTION 1

Which remote Access Solution is clientless?

• A. Checkpoint Mobile
• B. Endpoint Security Suite
• C. SecuRemote
• D. Mobile Access Portal

Answer: D

NEW QUESTION 2

You are going to upgrade from R77 to R80. Before the upgrade, you want to back up the system so that, if there are any problems, you can easily restore to the old version with all configuration and management files intact. What is the BEST backup method in this scenario?

• A. backup
• B. Database Revision
• C. snapshot
• D. migrate export

Answer: C

Explanation:
2. Snapshot Management
The snapshot creates a binary image of the entire root (lv_current) disk partition. This includes Check Point products, configuration, and operating system.
Starting in R77.10, exporting an image from one machine and importing that image on another machine of the same type is supported.
The log partition is not included in the snapshot. Therefore, any locally stored FireWall logs will not be save

NEW QUESTION 3

Which of the following is NOT a back up method?

• A. Save backup
• B. System backup
• C. snapshot
• D. Migrate

Answer: A

Explanation:
The built-in Gaia backup procedures:
Snapshot Management
System Backup (and System Restore)
Save/Show Configuration (and Load Configuration)
Check Point provides three different procedures for backing up (and restoring) the operating system and networking parameters on your appliances.
Snapshot (Revert)
Backup (Restore)
upgrade_export (Migrate) References:

NEW QUESTION 4

What is the difference between SSL VPN and IPSec VPN?

• A. IPSec VPN does not require installation of a resident VPN client
• B. SSL VPN requires installation of a resident VPN client
• C. SSL VPN and IPSec VPN are the same
• D. IPSec VPN requires installation of a resident VPN client and SSL VPN requires only an installed Browser

Answer: D

NEW QUESTION 5

Which default user has full read/write access?

• A. Monitor
• B. Altuser
• C. Administrator
• D. Superuser

Answer: C

NEW QUESTION 6

Choose the SmartLog property that is TRUE.

• A. SmartLog has been an option since release R71.10.
• B. SmartLog is not a Check Point product.
• C. SmartLog and SmartView Tracker are mutually exclusive.
• D. SmartLog is a client of SmartConsole that enables enterprises to centrally track log records and security activity with Google-like search.

Answer: D

NEW QUESTION 7

How do you configure the Security Policy to provide uses access to the Captive Portal through an external (Internet) interface?

• A. Change the gateway settings to allow Captive Portal access via an external interface.
• B. No action is necessar
• C. This access is available by default.
• D. Change the Identity Awareness settings under Global Properties to allow Captive Policy access on all interfaces.
• E. Change the Identity Awareness settings under Global Properties to allow Captive Policy access for an external interface.

Answer: A

NEW QUESTION 8

Where can administrator edit a list of trusted SmartConsole clients in R80?

• A. cpconfig on a Security Management Server, in the WebUI logged into a Security Management Server.
• B. Only using SmartConsole: Manage and Settings > Permissions and Administrators > Advanced > Trusted Clients.
• C. In cpconfig on a Security Management Server, in the WebUI logged into a Security Management Server, in SmartConsole: Manage and Settings>Permissions and Administrators>Advanced>Trusted Clients.
• D. WebUI client logged to Security Management Server, SmartDashboard: Manage and Settings>Permissions and Administrators>Advanced>Trusted Clients, via cpconfig on a Security Gateway.

Answer: C

NEW QUESTION 9

What command would show the API server status?

• A. cpm status
• B. api restart
• C. api status
• D. show api status

Answer: D

NEW QUESTION 10

Fill in the blank: An identity server uses a ____ for user authentication.

• A. Shared secret
• B. Certificate
• C. One-time password
• D. Token

Answer: A

NEW QUESTION 11

Which of the following is TRUE regarding Gaia command line?

• A. Configuration changes should be done in mgmt_cli and use CLISH for monitoring, Expert mode is used only for OS level tasks.
• B. Configuration changes should be done in expert-mode and CLISH is used for monitoring.
• C. Configuration changes should be done in mgmt-cli and use expert-mode for OS-level tasks.
• D. All configuration changes should be made in CLISH and expert-mode should be used for OS-level tasks.

Answer: D

NEW QUESTION 12

To install a brand new Check Point Cluster, the MegaCorp IT department bought 1 Smart-1 and 2 Security Gateway Appliances to run a cluster. Which type of cluster is it?

• A. Full HA Cluster
• B. High Availability
• C. Standalone
• D. Distributed

Answer: B

NEW QUESTION 13

In the Check Point Security Management Architecture, which component(s) can store logs?

• A. SmartConsole
• B. Security Management Server and Security Gateway
• C. Security Management Server
• D. SmartConsole and Security Management Server

Answer: B

NEW QUESTION 14

While in SmartView Tracker, Brady has noticed some very odd network traffic that he thinks could be an intrusion. He decides to block the traffic for 60 minutes, but cannot remember all the steps. What is the correct order of steps needed to set up the block?
1) Select Active Mode tab in SmartView Tracker.
2) Select Tools > Block Intruder.
3) Select Log Viewing tab in SmartView Tracker.
4) Set Blocking Timeout value to 60 minutes.
5) Highlight connection that should be blocked.

• A. 1, 2, 5, 4
• B. 3, 2, 5, 4
• C. 1, 5, 2, 4
• D. 3, 5, 2, 4

Answer: C

NEW QUESTION 15

When configuring LDAP User Directory integration, Changes applied to a User Directory template are:

• A. Reflected immediately for all users who are using template.
• B. Not reflected for any users unless the local user template is changed.
• C. Reflected for all users who are using that template and if the local user template is changed as well.
• D. Not reflected for any users who are using that template.

Answer: A

Explanation:
The users and user groups are arranged on the Account Unit in the tree structure of the LDAP server. User management in User Directory is external, not local. You can change the User Directory templates. Users
associated with this template get the changes immediately. You can change user definitions manually in SmartDashboard, and the changes are immediate on the server.

NEW QUESTION 16

Which one of the following is TRUE?

• A. Ordered policy is a sub-policy within another policy
• B. One policy can be either inline or ordered, but not both
• C. Inline layer can be defined as a rule action
• D. Pre-R80 Gateways do not support ordered layers

Answer: C

NEW QUESTION 17

What are the two types of address translation rules?

• A. Translated packet and untranslated packet
• B. Untranslated packet and manipulated packet
• C. Manipulated packet and original packet
• D. Original packet and translated packet

Answer: D

Explanation:
NAT Rule Base
The NAT Rule Base has two sections that specify how the IP addresses are translated:
Original Packet
Translated Packet References:

NEW QUESTION 18

Using R80 Smart Console, what does a “pencil icon” in a rule mean?

• A. I have changed this rule
• B. Someone else has changed this rule
• C. This rule is managed by check point’s SOC
• D. This rule can’t be changed as it’s an implied rule

Answer: A

NEW QUESTION 19

In what way are SSL VPN and IPSec VPN different?

• A. SSL VPN is using HTTPS in addition to IKE, whereas IPSec VPN is clientless
• B. SSL VPN adds an extra VPN header to the packet, IPSec VPN does not
• C. IPSec VPN does not support two factor authentication, SSL VPN does support this
• D. IPSec VPN uses an additional virtual adapter, SSL VPN uses the client network adapter only

Answer: D

NEW QUESTION 20

What is the BEST command to view configuration details of all interfaces in Gaia CLISH?

• A. ifconfig -a
• B. show interfaces
• C. show interfaces detail
• D. show configuration interface

Answer: D

NEW QUESTION 21
......