Check-Point 156-915.80 Free Practice Questions

Question No: 4

Fill in the blank. To remove site-to-site IKE and IPSEC keys you would enter command and select the option to delete all IKE and IPSec SAu2021s.

View Answer

Question No: 5

Which Check Point address translation method is necessary if you want to connect from a host on the Internet via HTTP to a server with a reserved (RFC 1918) IP address on your DMZ?

A. Dynamic Source Address Translation

B. Hide Address Translation

C. Port Address Translation

D. Static Destination Address Translation

View Answer

Question No: 6

Which of the following items should be configured for the Security Management Server to authenticate using LDAP?

A. Check Point Password

B. WMI object

C. Domain Admin username

D. Windows logon password

View Answer

Question No: 7

To run GAiA in 64bit mode, which of the following is true?

1) Run set edition default 64-bit.

2) Install more than 4 GB RAM.

3) Install more than 4 TB of Hard Disk.

A. 1 and 3

B. 1 and 2

C. 2 and 3

D. 1, 2, and 3

View Answer

Question No: 8

Which of the following is NOT defined by an Access Role object?

A. Source Network

B. Source Machine

C. Source User

D. Source Server

View Answer

Question No: 9

What is the officially accepted diagnostic tool for IP Appliance Support?

A. ipsoinfo

B. CST

C. uag-diag

D. cpinfo

View Answer

Question No: 10

How granular may an administrator filter an Access Role with identity awareness? Per:

A. Specific ICA Certificate

B. AD User

C. Radius Group

D. Windows Domain

View Answer

Question No: 11

You are MegaCorpu2021s Security Administrator. There are various network objects which must be NATed. Some of them use the Automatic Hide NAT method, while others use the Automatic Static NAT method. What is the rule order if both methods are used together? Give the BEST answer.

A. The Administrator decides the rule order by shifting the corresponding rules up and down.

B. The Static NAT rules have priority over the Hide NAT rules and the NAT on a node has priority over the NAT on a network or an address range.

C. The Hide NAT rules have priority over the Static NAT rules and the NAT on a node has priority over the NAT on a network or an address range.

D. The rule position depends on the time of their creation. The rules created first are placed at the top; rules created later are placed successively below the others.

View Answer

Question No: 12

You cannot use SmartDashboardu2021s User Directory features to connect to the LDAP server. What should you investigate?

1) Verify you have read-only permissions as administrator for the operating system.

2) Verify there are no restrictions blocking SmartDashboard's User Manager from connecting to the LDAP server.

3) Check that the login Distinguished Name configured has root permission (or at least write permission Administrative access) in the LDAP Server's access control configuration.

A. 1, 2, and 3

B. 2 and 3

C. 1 and 2

D. 1 and 3

View Answer

Question No: 13

The connection to the ClusterXL member u2021Au2021 breaks. The ClusterXL member u2021Au2021 status is now u2021downu2021. Afterwards the switch admin set a port to ClusterXL member u2021Bu2021 to u2021downu2021. What will happen?

A. ClusterXL member u2021Bu2021 also left the cluster.

B. ClusterXL member u2021Bu2021 stays active as last member.

C. Both ClusterXL members share load equally.

D. ClusterXL member u2021Au2021 is asked to come back to cluster.

View Answer