True or False: In a Distributed Environment, a Central License can be installed via CLI on a Security Gateway

True, Central License can be installed with CPLIC command on a Security Gateway

True, CLI is the prefer method for Licensing

False, Central License are handled via Security Management Server

False, Central License are installed via Gaia on Security Gateways

True, Central License can be installed with CPLIC command on a Security Gateway

Which option, when applied to a rule, allows all encrypted and non-VPN traffic that matches the rule?

All Site-to-Site VPN Communities

All Connections (Clear or Encrypted)

In which scenario is it a valid option to transfer a license from one hardware device to another?

From a 4400 Appliance to a 2200 Appliance

From a 4400 Appliance to an HP Open Server

From an IBM Open Server to an HP Open Server

From an IBM Open Server to a 2200 Appliance

What is the purpose of the Stealth Rule?

To prevent users from directly connecting to a Security Gateway.

To reduce the number of rules in the database.

To reduce the amount of logs for performance issues.

To hide the gateway from the Internet.

The ______ software blade package uses CPU-level and OS-level sandboxing in order to detect and block malware.

Next Generation Threat Emulation

Next Generation Threat Prevention

Next Generation Threat Emulation

Next Generation Threat Extraction

Fill in the blank: Once a certificate is revoked from the Security GateWay by the Security Management Server, the certificate information is _______.

Stored on the Certificate Revocation List.

Sent to the Internal Certificate Authority.

Sent to the Security Administrator.

Stored on the Security Management Server.

Stored on the Certificate Revocation List.

R80 is supported by which of the following operating systems:

Gaia, SecurePlatform, and Windows

What Check Point technologies deny or permit network traffic?

Packet Filtering, Stateful Inspection, Application Layer Firewall.

How do you manage Gaia?

Through CLI, WebUI, and SmartDashboard

What licensing feature is used to verify licenses and activate new licenses added to the License and Contracts repository?

Automatic licensing and Verification tool

The ''Hit count'' feature allows tracking the number of connections that each rule matches. Will the Hit count feature work independently from logging and Track the hits even if the Track option is set to ''None''?

Yes, it will work independently because when you enable Hit Count, the SMS collects the data from supported Security Gateways

No, it will not work independently. Hit Count will be shown only for rules with Track options set as Log or alert

Yes, it will work independently as long as ''analyze all rules'' tick box is enabled on the Security Gateway

No, it will not work independently because hit count requires all rules to be logged

Yes, it will work independently because when you enable Hit Count, the SMS collects the data from supported Security Gateways

You have created a rule at the top of your Rule Base to permit Guest Wireless access to the Internet. However, when guest users attempt to reach the Internet, they are not seeing the splash page to accept your Terms of Service, and cannot access the Internet. How can you fix this?

Right click Accept in the rule, select ''More'', and then check ''Enable Identity Captive Portal''

On the firewall object, Legacy Authentication screen, check ''Enable Identity Captive Portal''

In the Captive Portal screen of Global Properties, check ''Enable Identity Captive Portal''

On the Security Management Server object, check the box ''Identity Logging''

Identity Awareness allows the Security Administrator to configure network access based on which of the following?

Network location, identity of a user, and identity of a machine

Name of the application, identity of the user, and identity of the machine

Identity of the machine, username, and certificate

Network location, identity of a user, and identity of a machine

Browser-Based Authentication, identity of a user, and network location

Which option will match a connection regardless of its association with a VPN community?

All Site-to-Site VPN Communities

All Connections (Clear or Encrypted)

Where is the ''Hit Count'' feature enabled or disabled in SmartConsole?

In Global Properties for the Security Management Server

Examine the sample Rule Base. What will be the result of a verification of the policy from SmartConsole?

Verification Error. Rule 4 (Web Inbound) hides Rule 6 (Webmaster access)

Verification Error. Empty Source-List in Rule 5 (Mail Inbound)

Verification Error. Rule 4 (Web Inbound) hides Rule 6 (Webmaster access)

Verification Error. Rule 7 (Clean-Up Rule) hides Implicit Clean-up Rule

You are the Check Point administrator for Alpha Corp. You received a call that one of the users is unable to browse the Internet on their new tablet which is connected to the company wireless, which goes through a Check Point Gateway. How would you review the logs to see what is blocking this traffic?

From SmartConsole, go to the Log & Monitor and filter for the IP address of the tablet.

Open SmartLog and connect remotely to the wireless controller

Open SmartEvent to see why they are being blocked

Open SmartDashboard and review the logs tab

From SmartConsole, go to the Log & Monitor and filter for the IP address of the tablet.

What is a role of Publishing?

The Publish operation sends the modifications made via SmartConsole in the private session and makes them public

The Security Management Server installs the updated policy and the entire database on Security Gateways

The Security Management Server installs the updated session and the entire Rule Base on Security Gateways

Modifies network objects, such as servers, users, services, or IPS profiles, but not the Rule Base

Which option in a firewall rule would only match and allow traffic to VPN gateways for one Community in common?

All Connections (Clear or Encrypted)

All Site-to-Site VPN Communities

Checkpoint 156-215.81 Practice Test 5 - Free Online Exam Prep & Questions

Which one of the following is a way that the objects can be manipulated using the new API integration in R80 Management?

Become a Premium Member for full access

Unlock Premium Member

Checkpoint 156-215.81 Practice Test 5

Question

Checkpoint 156-215.81 Practice Tests

Practice Tests