CheckPoint 156-215.81 Exam Dumps

CheckPoint 156-215.81 Sample Question Answers

Question # 1

When changes are made to a Rule base, it is important to _______________ to enforce changes.

A. Publish database  
B. Activate policy  
C. Install policy  
D. Save changes  

Show Answer

Question # 2

When a SAM rule is required on Security Gateway to quickly block suspicious connections which are not restricted by the Security Policy, what actions does the administrator need to take?

A. SmartView Monitor should be opened and then the SAM rule/s can be applied immediately. Installing policy is not required. 
B. The policy type SAM must be added to the Policy Package and a new SAM rule must be applied. Simply Publishing the changes applies the SAM rule on the firewall. 
C. The administrator must work on the firewall CLI (for example with SSH and PuTTY) and the command 'sam block' must be used with the right parameters. 
D. The administrator should open the LOGS & MONITOR view and find the relevant log. Right clicking on the log entry will show the Create New SAM rule option. 

Show Answer

Question # 3

Identity Awareness allows the Security Administrator to configure network access based on which of the following?

A. Name of the application, identity of the user, and identity of the machine  
B. Identity of the machine, username, and certificate  
C. Network location, identity of a user, and identity of a machine  
D. Browser-Based Authentication, identity of a user, and network location  

Show Answer

Question # 4

Which command shows the installed licenses? 

A. cplic print  
B. print cplic  
C. fwlic print  
D. show licenses  

Show Answer

Question # 5

Which of the following is NOT an option to calculate the traffic direction? 

A. Incoming  
B. Internal  
C. External  
D. Outgoing  

Show Answer

Question # 6

Fill in the blank: When a policy package is installed, ________ are also distributed to the target installation Security Gateways.

A. User and objects databases  
B. Network databases  
C. SmartConsole databases  
D. User databases  

Show Answer

Question # 7

What is the most recommended installation method for Check Point appliances? 

A. SmartUpdate installation  
B. DVD media created with Check Point ISOMorphic  
C. USB media created with Check Point ISOMorphic  
D. Cloud based installation  

Show Answer

Question # 8

The Network Operations Center administrator needs access to Check Point Security devices mostly for troubleshooting purposes. You do not want to give her access to the expert mode, but she still should be able to run tcpdump. How can you achieve this requirement?

A. Add tcpdump to CLISH using add command.Create a new access role.Add tcpdump to the role.Create new user with any UID and assign role to the user.
B. Add tcpdump to CLISH using add command.Create a new access role.Add tcpdump to the role.Create new user with UID 0 and assign role to the user. 
C. Create a new access role.Add expert-mode access to the role.Create new user with UID 0 and assign role to the user. 
D. Create a new access role.Add expert-mode access to the role.Create new user with any UID and assign role to the user. 

Show Answer

Question # 9

When dealing with rule base layers, what two layer types can be utilized? 

A. Ordered Layers and Inline Layers  
B. Inbound Layers and Outbound Layers  
C. R81.10 does not support Layers  
D. Structured Layers and Overlap Layers  

Show Answer

Question # 10

Which of the following is NOT a tracking option? (Select three) 

A. Partial log  
B. Log  
C. Network log  
D. Full log  

Show Answer

Question # 11

Fill in the blank: In Security Gateways R75 and above, SIC uses ______________ for encryption.

A. AES-128  
B. AES-256  
C. DES  
D. 3DES  

Show Answer

Question # 12

Which two of these Check Point Protocols are used by ? 

A. ELA and CPD  
B. FWD and LEA  
C. FWD and CPLOG  
D. ELA and CPLOG  

Show Answer

Question # 13

Which of the following describes how Threat Extraction functions? 

A. Detect threats and provides a detailed report of discovered threats  
B. Proactively detects threats  
C. Delivers file with original content  
D. Delivers PDF versions of original files with active content removed  

Show Answer

Question # 14

A Check Point Software license consists of two components, the Software Blade and the Software Container. There are ______ types of Software Containers: ________. 

A. Two; Security Management and Endpoint Security  
B. Two; Endpoint Security and Security Gateway  
C. Three; Security Management, Security Gateway, and Endpoint Security  
D. Three; Security Gateway, Endpoint Security, and Gateway Management  

Show Answer

Question # 15

Your internal networks 10.1.1.0/24, 10.2.2.0/24 and 192.168.0.0/16 are behind the Internet Security Gateway. Considering that Layer 2 and Layer 3 setup is correct, what are the steps you will need to do in SmartConsole in order to get the connection working?

A. 1. Define an accept rule in Security Policy.2. Define Security Gateway to hide all internal networks behind the gateway’s external IP.3. Publish and install the policy.  
B. 1. Define an accept rule in Security Policy.2. Define automatic NAT for each network to NAT the networks behind a public IP.3. Publish the policy.  
C. 1. Define an accept rule in Security Policy.2. Define automatic NAT for each network to NAT the networks behind a public IP.3. Publish and install the policy.  
D. 1. Define an accept rule in Security Policy.2. Define Security Gateway to hide all internal networks behind the gateway’s external IP.3. Publish the policy. 

Show Answer

Question # 16

Which of the following is an authentication method used for Identity Awareness? 

A. SSL  
B. Captive Portal  
C. PKI  
D. RSA  

Show Answer

Question # 17

To ensure that VMAC mode is enabled, which CLI command you should run on all cluster members? Choose the best answer. 

A. fw ctl set int fwha vmac global param enabled  
B. fw ctl get int fwha vmac global param enabled; result of command should return value 1  
C. cphaprob –a if  
D. fw ctl get int fwha_vmac_global_param_enabled; result of command should return value 1

Show Answer

Question # 18

When URL Filtering is set, what identifying data gets sent to the Check Point Online Web Service?

A. The URL and server certificate are sent to the Check Point Online Web Service
B. The full URL, including page data, is sent to the Check Point Online Web Service
C. The host part of the URL is sent to the Check Point Online Web Service
D. The URL and IP address are sent to the Check Point Online Web Service 

Show Answer

Question # 19

When should you generate new licenses? 

A. Before installing contract files.  
B. After a device upgrade.  
C. When the existing license expires, license is upgraded or the IP-address associated with the license changes. 
D. Only when the license is upgraded.  

Show Answer

Question # 20

You are the Check Point administrator for Alpha Corp. You received a call that one of the users is unable to browse the Internet on their new tablet which is connected to the company wireless, which goes through a Check Point Gateway. How would you review the logs to see what is blocking this traffic? 

A. Open SmartLog and connect remotely to the wireless controller
B. Open SmartEvent to see why they are being blocked
C. Open SmartDashboard and review the logs tab
D. From SmartConsole, go to the Log & Monitor and filter for the IP address of the tablet.

Show Answer

Question # 21

Which policy type is used to enforce bandwidth and traffic control rules? 

A. Access Control
B. Threat Emulation
C. Threat Prevention
D. QoS

Show Answer

Question # 22

Which of the following is NOT an identity source used for Identity Awareness? 

A. Remote Access
B. UserCheck
C. AD Query
D. RADIUS

Show Answer

Question # 23

What are the three deployment considerations for a secure network? 

A. Distributed, Bridge Mode, and Remote  
B. Bridge Mode, Remote, and Standalone  
C. Remote, Standalone, and Distributed  
D. Standalone, Distributed, and Bridge Mode  

Show Answer

Question # 24

Which of the following is NOT a component of a Distinguished Name? 

A. Common Name
B. Country
C. User container
D. Organizational Unit

Show Answer

Question # 25

In Logging and Monitoring, the tracking options are Log, Detailed Log and Extended Log. Which of the following options can you add to each Log, Detailed Log and Extended Log?

A. Accounting  
B. Suppression  
C. Accounting/Suppression  
D. Accounting/Extended  

Show Answer

Question # 26

Which Check Point software blade provides Application Security and identity control? 

A. Identity Awareness
B. Data Loss Prevention
C. URL Filtering 
D. Application Control

Show Answer

Question # 27

Fill in the blanks: In _____ NAT, Only the ________ is translated. 

A. Static; source  
B. Simple; source  
C. Hide; destination  
D. Hide; source  

Show Answer

Question # 28

Which tool allows for the automatic updating of the Gaia OS and Check Point products installed on the Gaia OS? 

A. CPASE - Check Point Automatic Service Engine
B. CPAUE - Check Point Automatic Update Engine
C. CPDAS - Check Point Deployment Agent Service
D. CPUSE - Check Point Upgrade Service Engine 

Show Answer

Question # 29

Which of the following technologies extracts detailed information from packets and stores that information in state tables?

A. INSPECT Engine  
B. Next-Generation Firewall  
C. Packet Filtering  
D. Application Layer Firewall  

Show Answer

Question # 30

Which key is created during Phase 2 of a site-to-site VPN? 

A. Pre-shared secret
B. Diffie-Hellman Public Key
C. Symmetrical IPSec key
D. Diffie-Hellman Private Key

Show Answer

Question # 31

What is true about the IPS-Blade? 

A. in R80, IPS is managed by the Threat Prevention Policy  
B. in R80, in the IPS Layer, the only three possible actions are Basic, Optimized and Strict  
C. in R80, IPS Exceptions cannot be attached to “all rules”  
D. in R80, the GeoPolicy Exceptions and the Threat Prevention Exceptions are the same  

Show Answer

Question # 32

Fill in the blanks: The Application Layer Firewalls inspect traffic through the ______ layer(s) of the TCP/IP model and up to and including the ______ layer.

A. Upper; Application  
B. First two; Internet  
C. Lower; Application  
D. First two; Transport  

Show Answer

Question # 33

Which statement describes what Identity Sharing is in Identity Awareness? 

A. Management servers can acquire and share identities with Security Gateways
B. Users can share identities with other users
C. Security Gateways can acquire and share identities with other Security Gateways
D. Administrators can share identifies with other administrators

Show Answer

Question # 34

Application Control/URL filtering database library is known as: 

A. Application database  
B. AppWiki  
C. Application-Forensic Database  
D. Application Library  

Show Answer

Question # 35

In R80 Management, apart from using SmartConsole, objects or rules can also be modified using: 

A. 3rd Party integration of CLI and API for Gateways prior to R80.
B. A complete CLI and API interface using SSH and custom CPCode integration.
C. 3rd Party integration of CLI and API for Management prior to R80.
D. A complete CLI and API interface for Management with 3rd Party integration.

Show Answer

Question # 36

Session unique identifiers are passed to the web api using which http header option? 

A. X-chkp-sid
B. Accept-Charset
C. Proxy-Authorization
D. Application

Show Answer

Question # 37

To quickly review when Threat Prevention signatures were last updated, which Threat Tool would an administrator use?

A. Protections  
B. IPS Protections  
C. Profiles  
D. ThreatWiki  

Show Answer

Question # 38

Which SmartConsole tab is used to monitor network and security performance? 

A. Manage & Settings
B. Security Policies
C. Gateway & Servers
D. Logs & Monitor

Show Answer

Question # 39

Which backup utility captures the most information and tends to create the largest archives?

A. backup  
B. snapshot  
C. Database Revision  
D. migrate export  

Show Answer

Question # 40

Which application is used for the central management and deployment of licenses and  packages?

A. SmartProvisioning
B. SmartLicense
C. SmartUpdate
D. Deployment Agent

Show Answer