Which one of the following is the preferred licensing model? Select the BEST answer

Central licensing because it ties the package license to the IP-address of the Security Management Server and has no dependency on the gateway.

Local licensing because it ties the package license to the IP-address of the gateway and has no dependency of the Security Management Server.

Central licensing because it ties the package license to the IP-address of the Security Management Server and has no dependency on the gateway.

Central licensing because it ties the package license to the MAC-address of the Security Management Server's Mgmt-interface and has no dependency on the gateway.

Local licensing because it ties the package license to the MAC-address of the gateway management interface and has no Security Management Server dependency.

Which command is used to add users to or from existing roles?

add rba user <User Name> roles <List>

add user <User Name> roles <List>

If an administrator wants to restrict access to a network resource only allowing certain users to access it, and only when they are on a specific network what is the best way to accomplish this?

Create an Access Role object, with specific users or user groups specified, and specific networks defined Use this access role as the 'Source' of an Access Control rule

Create an inline layer where the destination is the target network resource Define sub-rules allowing only specific sources to access the target resource

Use a 'New Legacy User at Location', specifying the LDAP user group that the users belong to, at the desired location

Create a rule allowing only specific source IP addresses access to the target network resource.

Create an Access Role object, with specific users or user groups specified, and specific networks defined Use this access role as the 'Source' of an Access Control rule

Fill in the blanks: A Security Policy is created in_____, stored in the_____ and Distributed to the various

SmartConsole, Security Management Server, Security Gateways

Rule base. Security Management Server Security Gateways

The Check Point database. SmartConsole, Security Gateways

SmartConsole, Security Gateway, Security Management Servers

SmartConsole, Security Management Server, Security Gateways

What is the order of NAT priorities?

Static NAT, IP pool NAT hide NAT

IP pool NAT static NAT. hide NAT

Static NAT hide NAT, IP pool NAT

Static NAT, IP pool NAT hide NAT

Static NAT automatic NAT hide NAT

While enabling the Identity Awareness blade the Identity Awareness wizard does not automatically detect the windows domain Why does it not detect the windows domain?

SmartConsole machine is not part of the domain

Security Gateway is not part of the Domain

Identity Awareness is not enabled on Global properties

Security Management Server is not part of the domain

If there are two administrators logged in at the same time to the SmartConsole, and there are objects locked for editing, what must be done to make them available to other administrators? Choose the BEST answer

Delete older versions of database

At what point is the Internal Certificate Authority (ICA) created?

During the primary Security Management Server installation process.

When an administrator decides to create one

When an administrator initially logs into SmartConsole.

When dealing with rule base layers, what two layer types can be utilized?

Ordered Layers and Inline Layers

Inbound Layers and Outbound Layers

Structured Layers and Overlap Layers

Which of the following is true about Stateful Inspection?

Stateful Inspection looks at both the headers of packets, as well as deeply examining their content.

Stateful Inspection tracks state using two tables, one for incoming traffic and one for outgoing traffic

Stateful Inspection looks at both the headers of packets, as well as deeply examining their content.

Stateful Inspection requires that a server reply to a request, in order to track a connection's state

Stateful Inspection requires two rules, one for outgoing traffic and one for incoming traffic.

Bob and Joe both have Administrator Roles on their Gaia Platform. Bob logs in on the WebUI and then Joe logs in through CLI. Choose what BEST describes the following scenario, where Bob and Joe are both logged in:

Since they both are logged in on different interfaces, they will both be able to make changes.

When Joe logs in. Bob will be logged out automatically.

The database will be locked by Bob and Joe will not be able to make any changes.

Bob will receive a prompt that Joe has logged in.

Check Point licenses come in two forms. What are those forms?

Security Gateway and Security Management.

Access Control and Threat Prevention.

Which of the following statements about Site-to-Site VPN Domain-based is NOT true?

Domain-based--- VPN domains are pre-defined for all VPN Gateways. A VPN domain is a service or user that can send or receive VPN traffic through a VPN Gateway.

Route-based--- The Security Gateways will have a Virtual Tunnel Interface (VTI) for each VPN Tunnel with a peer VPN Gateway. The Routing Table can have routes to forward traffic to these VTls. Any traffic routed through a VTI is automatically identified as VPN Traffic and is passed through the VPN Tunnel associated with the VTI.

Domain-based--- VPN domains are pre-defined for all VPN Gateways. A VPN domain is a service or user that can send or receive VPN traffic through a VPN Gateway.

Domain-based--- VPN domains are pre-defined for all VPN Gateways. A VPN domain is a host or network that can send or receive VPN traffic through a VPN Gateway.

Domain-based--- VPN domains are pre-defined for all VPN Gateways. When the Security Gateway encounters traffic originating from one VPN Domain with the destination to a VPN Domain of another VPN Gateway, that traffic is identified as VPN traffic and is sent through the VPN Tunnel between the two Gateways.

You had setup the VPN Community NPN-Stores' with 3 gateways. There are some issues with one remote gateway(l .1.1.1) and an your local gateway. What will be the best log filter to see only the IKE Phase 2 agreed networks for both gateways.

action:''Key Install' AND 1.1.1.1 AND Quick Mode

Blade:''VPN''AND VPN-Stores AND Main Mode

action:''Key Install'' AND 1.1.1.1 AND Main Mode

Blade:''VPN''AND VPN-Stores AND Quick Mode

Aggressive Mode in IKEv1 uses how many packages for negotiation?

depends on the make of the peer gateway

AdminA and AdminB are both logged in on SmartConsole What does it mean if AdmmB sees a lock icon on a rule? Choose the BEST answer.

Rule is locked by AdminA and will be made available if the session is published

Rule is locked by AdminA because the rule is currently being edited

Rule is locked by AdminA and if the session is saved, the rule will be made available

Rule is locked by AdminA because the save button has not been pressed

In the Check Point three-tiered architecture, which of the following is NOT a function of the Security Management Server?

Display policies and logs on the administrator's workstation.

Processing and sending alerts such as SNMP traps and email notifications.

Verify and compile Security Policies.

Store firewall logs to hard drive storage.

To increase security, the administrator has modified the Core protection 'Host Port Scan' from 'Medium' to 'High' Predefined Sensitivity. Which Policy should the administrator install after Publishing the changes?

The Access Control and Threat Prevention Policies.

The Access Control & HTTPS Inspection Policy.

The Online Activation method is available for Check Point manufactured appliances. How does the administrator use the Online Activation method?

Using the Gaia First Time Configuration Wizard, the appliance connects to the Check Point User Center and downloads all necessary licenses and contracts.

The SmartLicensing GUI tool must be launched from the SmartConsole for the Online Activation tool to start automatically.

No action is required if the firewall has internet access and a DNS server to resolve domain names.

Using the Gaia First Time Configuration Wizard, the appliance connects to the Check Point User Center and downloads all necessary licenses and contracts.

The cpinfo command must be run on the firewall with the switch -online-license-activation.

Both major kinds of NAT support Hide and Static NAT. However, one offers more flexibility. Which statement is true?

Manual NAT can offer more flexibility than Automatic NAT.

Dynamic Network Address Translation (NAT) Overloading can offer more flexibility than Port Address Translation.

Dynamic NAT with Port Address Translation can offer more flexibility than Network Address Translation (NAT) Overloading.

Automatic NAT can offer more flexibility than Manual NAT.

What are the software components used by Autonomous Threat Prevention Profiles in R8I.20 and higher?

IPS, Anti-Bot, Anti-Virus, SandBlast and Macro Extraction

Sandbox, ThreatCloud, Zero Phishing, Sanitization, C&C Protection, JPS, File and URL Reputation

IPS, Threat Emulation and Threat Extraction

Sandbox, ThreatCloud, Sanitization, C&C Protection, IPS

IPS, Anti-Bot, Anti-Virus, SandBlast and Macro Extraction

What are valid authentication methods for mutual authenticating the VPN gateways?

Pre-shared Secret and PKI Certificates

PKI Certificates and Kerberos Tickets

Pre-Shared Secrets and Kerberos Ticket

PKI Certificates and DynamiciD OTP

What are valid authentication methods for mutual authenticating the VPN gateways?

Pre-shared Secret and PKI Certificates

PKI Certificates and Kerberos Tickets

Pre-Shared Secrets and Kerberos Ticket

PKI Certificates and DynamiciD OTP

Checkpoint 156-215.81 Practice Test 10 - Free Online Exam Prep & Questions

Spam

Selling illegal goods, money scams etc.

Hate Speech

Serious attack on a group.

Harassment and bullying

Harassing an individual (including doxing)

Harmful activities

Threatening or glorifying violence or serious harm, including self-harm

Adult content (Consensual)

Nudity/Sexual content

Sexual exploitation and abuse (child safety)

Sexually explicit or suggestive imagery or writing involving minors

Sexual exploitation and abuse (adults and animals)

Sexually explicit or suggestive imagery or writing involving non-consenting adults or non-humans

Plagiarism

Reusing content without attribution (link and blockquotes)

Poorly written

Not in English or has very bad formatting, grammar, and spelling

Inappropriate credential

Author's credential is offensive, spam, or impersonation

Other

Ex. Illegal content, incomplete question...

Checkpoint 156-215.81 Practice Test 10

Question

Checkpoint 156-215.81 Practice Tests

Practice Tests