In the Check Point Security Management Architecture, which component(s) can store logs?

Security Management Server and Security Gateway

SmartConsole and Security Management Server

Fill in the blank: In order to install a license, it must first be added to the ____________.

License and Contract repository

What are the three deployment considerations for a secure network?

Remote, Standalone, and Distributed

Distributed, Bridge Mode, and Remote

Bridge Mode, Remote, and Standalone

Remote, Standalone, and Distributed

Standalone, Distributed, and Bridge Mode

Which option, when applied to a rule, allows traffic to VPN gateways in specific VPN communities?

All Connections (Clear or Encrypted)

All Site-to-Site VPN Communities

One of major features in R80.x SmartConsole is concurrent administration. Which of the following is NOT possible considering that AdminA, AdminB, and AdminC are editing the same Security Policy?

AdminA and AdminB are editing the same rule at the same time.

AdminC sees a lock icon which indicates that the rule is locked for editing by another administrator.

AdminA and AdminB are editing the same rule at the same time.

AdminB sees a pencil icon next the rule that AdminB is currently editing.

AdminA, AdminB and AdminC are editing three different rules at the same time.

When should you generate new licenses?

When the existing license expires, license is upgraded or the IP-address where the license is tied changes.

Before installing contract files.

After an RMA procedure when the MAC address or serial number of the appliance changes.

When the existing license expires, license is upgraded or the IP-address where the license is tied changes.

Only when the license is upgraded.

How are the backups stored in Check Point appliances?

Saved as*tgz under /var/CPbackup

Saved as*.tar under /var/log/CPbackup/backups

Saved as*tgz under /var/CPbackup

Saved as*tar under /var/CPbackup

Saved as*tgz under /var/log/CPbackup/backups

How can the changes made by an administrator before publishing the session be seen by a superuser administrator?

From Manage and Settings > Sessions, right click on the session and click 'View Changes...'

By impersonating the administrator with the 'Login as...' option

From the SmartView Tracker audit log

From Manage and Settings > Sessions, right click on the session and click 'View Changes...'

Your internal networks 10.1.1.0/24, 10.2.2.0/24 and 192.168.0.0/16 are behind the Internet Security Gateway. Considering that Layer 2 and Layer 3 setup is correct, what are the steps you will need to do in SmartConsole in order to get the connection working?

1. Define an accept rule in Security Policy.2. Define automatic NAT for each network to NAT the networks behind a public IP.3. Publish and install the policy.

1. Define an accept rule in Security Policy.2. Define Security Gateway to hide all internal networks behind the gateway's external IP.3. Publish and install the policy.

1. Define an accept rule in Security Policy.2. Define automatic NAT for each network to NAT the networks behind a public IP.3. Publish the policy.

1. Define an accept rule in Security Policy.2. Define automatic NAT for each network to NAT the networks behind a public IP.3. Publish and install the policy.

1. Define an accept rule in Security Policy.2. Define Security Gateway to hide all internal networks behind the gateway's external IP.3. Publish the policy.

True or False: The destination server for Security Gateway logs depends on a Security Management Server configuration.

True, all Security Gateways will only forward logs with a SmartCenter Server configuration

False, log servers are configured on the Log Server General Properties

True, all Security Gateways will only forward logs with a SmartCenter Server configuration

True, all Security Gateways forward logs automatically to the Security Management Server

False, log servers are enabled on the Security Gateway General Properties

Consider the Global Properties following settings: The selected option ''Accept Domain Name over UDP (Queries)'' means:

UDP Queries will be accepted by the traffic allowed only through interfaces with external anti-spoofing topology and this will be done before first explicit rule written by Administrator in a Security Policy.

All UDP Queries will be accepted by the traffic allowed through all interfaces and this will be done before first explicit rule written by Administrator in a Security Policy.

No UDP Queries will be accepted by the traffic allowed through all interfaces and this will be done before first explicit rule written by Administrator in a Security Policy.

All UDP Queries will be accepted by the traffic allowed by first explicit rule written by Administrator in a Security Policy.

What is the purpose of the CPCA process?

Generating and modifying certificates

Monitoring the status of processes

Communication between GUI clients and the SmartCenter server

Generating and modifying certificates

The Network Operations Center administrator needs access to Check Point Security devices mostly for troubleshooting purposes. You do not want to give her access to the expert mode, but she still should be able to run tcpdump. How can you achieve this requirement?

Add tcpdump to CLISH using add command.Create a new access role.Add tcpdump to the role.Create new user with any UID and assign role to the user.

Add tcpdump to CLISH using add command.Create a new access role.Add tcpdump to the role.Create new user with UID 0 and assign role to the user.

Create a new access role.Add expert-mode access to the role.Create new user with UID 0 and assign role to the user.

Create a new access role.Add expert-mode access to the role.Create new user with any UID and assign role to the user.

When logging in for the first time to a Security management Server through SmartConsole, a fingerprint is saved to the:

SmartConsole cache is available for future Security Management Server authentications.

Security Management Server's /home/.fgpt file and is available for future SmartConsole authentications.

Windows registry is available for future Security Management Server authentications.

There is no memory used for saving a fingerprint anyway.

SmartConsole cache is available for future Security Management Server authentications.

Administrator Dave logs into R80 Management Server to review and makes some rule changes. He notices that there is a padlock sign next to the DNS rule in the Rule Base. What is the possible explanation for this?

Another administrator is logged into the Management and currently editing the DNS Rule.

DNS Rule is using one of the new feature of R80 where an administrator can mark a rule with the padlock icon to let other administrators know it is important.

Another administrator is logged into the Management and currently editing the DNS Rule.

DNS Rule is a placeholder rule for a rule that existed in the past but was deleted.

This is normal behavior in R80 when there are duplicate rules in the Rule Base.

Which is a suitable command to check whether Drop Templates are activated or not?

fw ctl get int activate_drop_templates

Please choose correct command syntax to add an ''emailserver1'' host with IP address 10.50.23.90 using GAiA management CLI?

mgmt add host name emailserver1 ip-address 10.50.23.90

hostname myHost12 ip-address 10.50.23.90

mgmt add host name ip-address 10.50.23.90

add host name emailserver1 ip-address 10.50.23.90

mgmt add host name emailserver1 ip-address 10.50.23.90

The CDT utility supports which of the following?

Major version upgrades to R77.30

Only major version upgrades to R80.10

Using ClusterXL, what statement is true about the Sticky Decision Function?

Can only be changed for Load Sharing implementations

All connections are processed and synchronized by the pivot

Is only relevant when using SecureXL

How Capsule Connect and Capsule Workspace differ?

Capsule Connect provides a Layer3 VPN. Capsule Workspace provides a Desktop with usable applications

Capsule Workspace can provide access to any application

Capsule Connect provides Business data isolation

Capsule Connect does not require an installed application at client

Which of the following is a new R80.10 Gateway feature that had not been available in R77.X and older?

Sub Policies are sets of rules that can be created and attached to specific rules. If the rule is matched, inspection will continue in the sub policy attached to it rather than in the next rule.

The rule base can be built of layers, each containing a set of the security rules. Layers are inspected in the order in which they are defined, allowing control over the rule base flow and which security functionalities take precedence.

Limits the upload and download throughput for streaming media in the company to 1 Gbps.

Time object to a rule to make the rule active only during specified times.

Sub Policies are sets of rules that can be created and attached to specific rules. If the rule is matched, inspection will continue in the sub policy attached to it rather than in the next rule.

What are the three components for Check Point Capsule?

Capsule Workspace, Capsule Docs, Capsule Cloud

Capsule Docs, Capsule Cloud, Capsule Connect

Capsule Workspace, Capsule Cloud, Capsule Connect

Capsule Workspace, Capsule Docs, Capsule Connect

Capsule Workspace, Capsule Docs, Capsule Cloud

What is true about the IPS-Blade?

in R80, IPS is managed by the Threat Prevention Policy

in R80, in the IPS Layer, the only three possible actions are Basic, Optimized and Strict

in R80, IPS Exceptions cannot be attached to ''all rules''

in R80, the GeoPolicy Exceptions and the Threat Prevention Exceptions are the same

Due to high CPU workload on the Security Gateway, the security administrator decided to purchase a new multicore CPU to replace the existing single core CPU. After installation, is the administrator required to perform any additional tasks?

Go to clash-Run cpconfig | Configure CoreXL to make use of the additional Cores | Exit cpconfig | Reboot Security Gateway

Go to clash-Run cpstop | Run cpstart

Go to clash-Run cpconfig | Configure CoreXL to make use of the additional Cores | Exit cpconfig | Reboot Security Gateway

Administrator does not need to perform any task. Check Point will make use of the newly installed CPU and Cores

Go to clash-Run cpconfig | Configure CoreXL to make use of the additional Cores | Exit cpconfig | Reboot Security Gateway | Install Security Policy

When installing a dedicated R80 SmartEvent server, what is the recommended size of the root partition?

More than 10GB and less than 20 GB

Checkpoint 156-215.81 Practice Test 1 - Free Online Exam Prep & Questions

Question 1 / 40

What needs to be configured if the NAT property 'Translate destination on client side' is not enabled in Global properties?

A host route to route to the destination IP

Use the file local.arp to add the ARP entries for NAT to work

Nothing, the Gateway takes care of all details necessary

Enabling 'Allow bi-directional NAT' for NAT to work correctly

Comment (0)

Checkpoint 156-215.81 Practice Test 1

Question

Checkpoint 156-215.81 Practice Tests

Practice Tests