Which of the following are types of VPN communities?

Pentagon, star, and combination

What two ordered layers make up the Access Control Policy Layer?

Application Control and URL Filtering

Network and Application Control

Which statement is TRUE of anti-spoofing?

It is BEST Practice to have anti-spoofing groups in sync with the routing table

Anti-spoofing is not needed when IPS software blade is enabled

It is more secure to create anti-spoofing groups manually

It is BEST Practice to have anti-spoofing groups in sync with the routing table

With dynamic routing enabled, anti-spoofing groups are updated automatically whenever there is a routing change

After the initial installation on Check Point appliance, you notice that the Management interface and default gateway are incorrect. Which commands could you use to set the IP to 192.168.80.200/24 and default gateway to 192.168.80.1.

set interface Mgmt ipv4-address 192.168.80.200 mask-length 24set static-route default nexthop gateway address 192.168.80.1 onsave config

add interface Mgmt ipv4-address 192.168.80.200 255.255.255.0add static-route 0.0.0.0.0.0.0.0 gw 192.168.80.1 onsave config

set interface Mgmt ipv4-address 192.168.80.200 255.255.255.0add static-route 0.0.0.0.0.0.0.0 gw 192.168.80.1 onsave config

add interface Mgmt ipv4-address 192.168.80.200 mask-length 24add static-route default nexthop gateway address 192.168.80.1 onsave config

What Check Point tool is used to automatically update Check Point products for the Gaia OS?

Check Point Upgrade Service Engine

Check Point Upgrade Installation Service

You are the Check Point administrator for Alpha Corp with an R80 Check Point estate. You have received a call by one of the management users stating that they are unable to browse the Internet with their new tablet connected to the company Wireless. The Wireless system goes through the Check Point Gateway. How do you review the logs to see what the problem may be?

Open SmartLog and query for the IP address of the Manager's tablet

Open SmartLog and connect remotely to the IP of the wireless controller

Open SmartView Tracker and filter the logs for the IP address of the tablet

Open SmartView Tracker and check all the IP logs for the tablet

Open SmartLog and query for the IP address of the Manager's tablet

What are the advantages of a ''shared policy'' in R80?

Allows the administrator to share a policy so that it is available to use in another Policy Package

Allows the administrator to share a policy between all the users identified by the Security Gateway

Allows the administrator to share a policy between all the administrators managing the Security Management Server

Allows the administrator to share a policy so that it is available to use in another Policy Package

Allows the administrator to install a policy on one Security Gateway and it gets installed on another managed Security Gateway

What is the purpose of a Clean-up Rule?

To drop any traffic that is not explicitly allowed.

Clean-up Rules do not server any purpose.

Provide a metric for determining unnecessary rules.

To drop any traffic that is not explicitly allowed.

Used to better optimize a policy.

Vanessa is attempting to log into the Gaia Web Portal. She is able to login successfully. Then she tries the same username and password for SmartConsole but gets the message in the screenshot image below. She has checked that the IP address of the Server is correct and the username and password she used to login into Gaia is also correct. What is the most likely reason?

Check Point Management software authentication details are not automatically the same as the Operating System authentication details. Check that she is using the correct details.

Check Point R80 SmartConsole authentication is more secure than in previous versions and Vanessa requires a special authentication key for R80 SmartConsole. Check that the correct key details are used.

Check Point Management software authentication details are not automatically the same as the Operating System authentication details. Check that she is using the correct details.

SmartConsole Authentication is not allowed for Vanessa until a Super administrator has logged in first and cleared any other administrator sessions.

Authentication failed because Vanessa's username is not allowed in the new Threat Prevention console update checks even though these checks passed with Gaia.

What is the most complete definition of the difference between the Install Policy button on the SmartConsole's tab, and the Install Policy within a specific policy?

The second one pre-select the installation for only the current policy and for the applicable gateways.

The Global one also saves and published the session before installation.

The Global one can install multiple selected policies at the same time.

The local one does not install the Anti-Malware policy along with the Network policy.

The second one pre-select the installation for only the current policy and for the applicable gateways.

Fill in the blanks: There are ________ types of software containers ________.

Three; security management, Security Gateway, and endpoint security

Three; Security gateway, endpoint security, and gateway management

Two; security management and endpoint security

Two; endpoint security and Security Gateway

Fill in the bank: In Office mode, a Security Gateway assigns a remote client to an IP address once___________.

the user connects and authenticates

Which Identity Source(s) should be selected in Identity Awareness for when there is a requirement for a higher level of security for sensitive servers?

Endpoint Identity Agent and Browser-Based Authentication

Terminal Servers Endpoint Identity Agent

Endpoint Identity Agent and Browser-Based Authentication

Which statement describes what Identity Sharing is in Identity Awareness?

Security Gateways can acquire and share identities with other Security Gateways

Management servers can acquire and share identities with Security Gateways

Users can share identities with other users

Security Gateways can acquire and share identities with other Security Gateways

Administrators can share identifies with other administrators

What is the most recommended installation method for Check Point appliances?

USB media created with Check Point ISOMorphic

DVD media created with Check Point ISOMorphic

USB media created with Check Point ISOMorphic

What is the BEST method to deploy Identity Awareness for roaming users?

Share user identities between gateways

What is the purpose of the Clean-up Rule?

To log all traffic that is not explicitly allowed or denied in the Rule Base

To clean up policies found inconsistent with the compliance blade reports

To remove all rules that could have a conflict with other rules in the database

To eliminate duplicate log entries in the Security Gateway

Fill in the blank: Back up and restores can be accomplished through_________.

CLI, SmartUpdate, or SmartBackup

SmartUpdate, SmartBackup, or SmartConsole

What does it mean if Deyra sees the gateway status: Choose the BEST answer.

There is a blade reporting a problem

SmartCenter Server cannot reach this Security Gateway

There is a blade reporting a problem

VPN software blade is reporting a malfunction

Security Gateway's MGNT NIC card is disconnected.

CPU-level of your Security gateway is peaking to 100% causing problems with traffic. You suspect that the problem might be the Threat Prevention settings.The following Threat Prevention Profile has been created. How could you tune the profile in order to lower the CPU load still maintaining security at good level? Select the BEST answer.

Set the Performance Impact to Medium or lower.

Set High Confidence to Low and Low Confidence to Inactive.

Set the Performance Impact to Medium or lower.

The problem is not with the Threat Prevention Profile. Consider adding more memory to the appliance.

Set the Performance Impact to Very Low Confidence to Prevent.

What is NOT an advantage of Stateful Inspection?

No Screening above Network layer

Fill in the blank: Permanent VPN tunnels can be set on all tunnels in the community, on all tunnels for specific gateways, or__________.

On specific tunnels in the community

On all satellite gateway to satellite gateway tunnels

On specific tunnels for specific gateways

On specific tunnels in the community

On specific satellite gateway to central gateway tunnels

In Unified SmartConsole Gateways and Servers tab you can perform the following functions EXCEPT ________.

Open service request with Check Point Technical Support

Access roles allow the firewall administrator to configure network access according to:

a combination of computer or computer groups and networks.

Checkpoint 156-215.81 Practice Test 4 - Free Online Exam Questions 121-160

From the Gaia web interface, which of the following operations CANNOT be performed on a Security Management Server?

Become a Premium Member for full access

Unlock Premium Member

Checkpoint 156-215.81 Practice Test 4

Question

Checkpoint 156-215.81 Practice Tests

Practice Tests