Which option would allow you to make a backup copy of the OS and Check Point configuration, without stopping Check Point processes?

All options stop Check Point processes

What is the Transport layer of the TCP/IP model responsible for?

It manages the flow of data between two hosts to ensure that the packets are correctly assembled and delivered to the target application.

It transports packets as datagrams along different routes to reach their destination.

It manages the flow of data between two hosts to ensure that the packets are correctly assembled and delivered to the target application.

It defines the protocols that are used to exchange data between networks and how host programs interact with the Application layer.

It deals with all aspects of the physical components of network connectivity and connects with different network types.

The SIC Status ''Unknown'' means

There is no connection between the gateway and Security Management Server.

There is connection between the gateway and Security Management Server but it is not trusted.

The secure communication is established.

There is no connection between the gateway and Security Management Server.

The Security Management Server can contact the gateway, but cannot establish SIC.

What is a reason for manual creation of a NAT rule?

The public IP-address is different from the gateway's external IP

In R80 all Network Address Translation is done automatically and there is no need for manually defined NAT-rules.

Network Address Translation of RFC1918-compliant networks is needed to access the Internet.

Network Address Translation is desired for some services, but not for others.

The public IP-address is different from the gateway's external IP

To enforce the Security Policy correctly, a Security Gateway requires:

awareness of the network topology

You have discovered suspicious activity in your network. What is the BEST immediate action to take?

Create a suspicious action rule to block that traffic.

Create a policy rule to block the traffic.

Create a suspicious action rule to block that traffic.

Wait until traffic has been identified before making any changes.

Contact ISP to block the traffic.

Tom has connected to the Management Server remotely using SmartConsole and is in the process of making some Rule Base changes, when he suddenly loses connectivity. Connectivity is restored shortly afterward. What will happen to the changes already made?

Tom's changes will have been stored on the Management when he reconnects and he will not lose any of his work.

Tom will have to reboot his SmartConsole computer, clear the cache, and restore changes.

Tom will have to reboot his SmartConsole computer, and access the Management cache store on that computer, which is only accessible after a reboot.

Tom's changes will be lost since he lost connectivity and he will have to start again.

Tom's changes will have been stored on the Management when he reconnects and he will not lose any of his work.

In R80 Management, apart from using SmartConsole, objects or rules can also be modified using:

A complete CLI and API interface using SSH and custom CPCode integration.

3rd Party integration of CLI and API for Gateways prior to R80.

A complete CLI and API interface using SSH and custom CPCode integration.

3rd Party integration of CLI and API for Management prior to R80.

A complete CLI and API interface for Management with 3rd Party integration.

When connected to the Check Point R80 Management Server using the SmartConsole the first administrator to connect has a lock on:

Only the objects being modified in his session of the Management Database and other administrators can connect to make changes using different sessions.

Only the objects being modified in the Management Database and other administrators can connect to make changes using a special session as long as they all connect from the same LAN network.

The entire Management Database and other administrators can connect to make changes only if the first administrator switches to Read-only.

The entire Management Database and all sessions and other administrators can connect only as Read-only.

Only the objects being modified in his session of the Management Database and other administrators can connect to make changes using different sessions.

After trust has been established between the Check Point components, what is TRUE about name and IP-address changes?

Security Gateway IP-address cannot be changed without re-establishing the trust

The Security Gateway name cannot be changed in command line without re-establishing trust

The Security Management Server name cannot be changed in SmartConsole without re-establishing trust

The Security Management Server IP-address cannot be changed without re-establishing the trust

Which two Identity Awareness commands are used to support identity sharing?

Policy Decision Point (PDP) and Policy Enforcement Point (PEP)

Policy Enforcement Point (PEP) and Policy Manipulation Point (PMP)

Policy Manipulation Point (PMP) and Policy Activation Point (PAP)

Policy Activation Point (PAP) and Policy Decision Point (PDP)

True or False: In R80, more than one administrator can login to the Security Management Server with write permission at the same time.

True, every administrator works in a session that is independent of the other administrators.

False, this feature has to be enabled in the Global Properties.

True, every administrator works in a session that is independent of the other administrators.

True, every administrator works on a different database that is independent of the other administrators.

False, only one administrator can login with write permission.

Which one of the following is TRUE?

Inline layer can be defined as a rule action

Ordered policy is a sub-policy within another policy

One policy can be either inline or ordered, but not both

Inline layer can be defined as a rule action

Pre-R80 Gateways do not support ordered layers

You can see the following graphic: What is presented on it?

Properties of personal. p12 certificate file issued for user John.

Shared secret properties of John's password.

VPN certificate properties of the John's gateway.

Expired. p12 certificate properties for user John.

When configuring LDAP User Directory integration, Changes applied to a User Directory template are:

Reflected immediately for all users who are using template.

Not reflected for any users unless the local user template is changed.

Reflected for all users who are using that template and if the local user template is changed as well.

Not reflected for any users who are using that template.

Choose what BEST describes the reason why querying logs now is very fast.

Indexing Engine indexes logs for faster search results

New Smart-1 appliances double the physical memory install

Indexing Engine indexes logs for faster search results

SmartConsole now queries results directly from the Security Gateway

The amount of logs been store is less than the usual in older versions

Check Point ClusterXL Active/Active deployment is used when:

There is Load Sharing solution set up

Only when there is Multicast solution set up

There is Load Sharing solution set up

Only when there is Unicast solution set up

There is High Availability solution set up

Checkpoint 156-215.81 Practice Test 3 - Free Online Exam Prep & Questions

Question 1 / 40

What is the SOLR database for?

Used for full text search and enables powerful matching capabilities

Writes data to the database and full text search

Serves GUI responsible to transfer request to the DLE server

Enables powerful matching capabilities and writes data to the database

Comment (0)

Checkpoint 156-215.81 Practice Test 3

Question

Checkpoint 156-215.81 Practice Tests

Practice Tests