View the rule below. What does the pen-symbol in the left column mean?

Rules have been edited by the logged in administrator, but the policy has not been published yet.

Those rules have been published in the current session.

Rules have been edited by the logged in administrator, but the policy has not been published yet.

Another user has currently locked the rules for editing.

The configuration lock is present. Click the pen symbol in order to gain the lock.

What data MUST be supplied to the SmartConsole System Restore window to restore a backup?

Server, Protocol, Username, Password, Path

Server, Username, Password, Path, Version

Username, Password, Path, Version

Server, Protocol, Username, Password, Destination Path

Server, Protocol, Username, Password, Path

Which repositories are installed on the Security Management Server by SmartUpdate?

License & Contract and Package Repository

Package Repository and Licenses

License & Contract and Package Repository

Which of the following situations would not require a new license to be generated and installed?

The Security Gateway is upgraded.

The IP address of the Security Management or Security Gateway has changed.

When should you generate new licenses?

When the existing license expires, license is upgraded or the IP-address associated with the license changes.

Before installing contract files.

When the existing license expires, license is upgraded or the IP-address associated with the license changes.

Only when the license is upgraded.

Gaia includes Check Point Upgrade Service Engine (CPUSE), which can directly receive updates for what components?

Licensed Check Point products for the Gala operating system and the Gaia operating system itself.

The Security Gateway (SG) and Security Management Server (SMS) software and the CPUSE engine.

Licensed Check Point products for the Gala operating system and the Gaia operating system itself.

The CPUSE engine and the Gaia operating system.

The Gaia operating system only.

Name the file that is an electronically signed file used by Check Point to translate the features in the license into a code?

Both License (.lic) and Contract (.xml) files

Can you use the same layer in multiple policies or rulebases?

Yes - a layer can be shared with multiple policies and rules.

No - each layer must be unique.

No - layers cannot be shared or reused, but an identical one can be created.

Yes - but it must be copied and pasted with a different name.

A security zone is a group of one or more network interfaces from different centrally managed gateways. What is considered part of the zone?

The zone is based on the network topology and determined according to where the interface leads to.

Security Zones are not supported by Check Point firewalls.

The firewall rule can be configured to include one or more subnets in a zone.

The local directly connected subnet defined by the subnet IP and subnet mask.

When comparing Stateful Inspection and Packet Filtering, what is a benefit that Stateful Inspection offers over Packer Filtering?

Only one rule is required for each connection.

Stateful Inspection offers unlimited connections because of virtual memory usage.

Stateful Inspection offers no benefits over Packet Filtering.

Stateful Inspection does not use memory to record the protocol used by the connection.

Only one rule is required for each connection.

An administrator can use section titles to more easily navigate between large rule bases. Which of these statements is FALSE?

A Sectional Title can be used to disable multiple rules by disabling only the sectional title.

Section titles are not sent to the gateway side.

These sections are simple visual divisions of the Rule Base and do not hinder the order of rule enforcement.

A Sectional Title can be used to disable multiple rules by disabling only the sectional title.

Sectional Titles do not need to be created in the SmartConsole.

A stateful inspection firewall works by registering connection data and compiling this information. Where is the information stored?

In the system SMEM memory pool.

In a CSV file on the firewall hard drive located in $FWDIR/conf/.

Name one limitation of using Security Zones in the network?

Security zone will not work in Manual NAT rules

Security zones will not work in Automatic NAT rules

Security zone will not work in Manual NAT rules

Security zones will not work in firewall policy layer

Security zones cannot be used in network topology

Choose what BEST describes users on Gaia Platform.

There are two default users and neither can be deleted.

There are two default users and one cannot be deleted.

There is one default user that can be deleted.

There is one default user that cannot be deleted.

Which of the following is NOT an advantage to using multiple LDAP servers?

Information on a user is hidden, yet distributed across several servers.

You achieve a faster access time by placing LDAP servers containing the database at remote sites

You achieve compartmentalization by allowing a large number of users to be distributed across several servers

Information on a user is hidden, yet distributed across several servers.

You gain High Availability by replicating the same information on several servers

When an Admin logs into SmartConsole and sees a lock icon on a gateway object and cannot edit that object, what does that indicate?

Another Admin has made an edit to that object and has yet to publish the change.

Incorrect routing to reach the gateway.

The Admin would need to login to Read-Only mode

Another Admin has made an edit to that object and has yet to publish the change.

In order to modify Security Policies, the administrator can use which of the following tools? (Choose the best answer.)

SmartConsole or mgmt_cli (API) on any computer where SmartConsole is installed.

SmartConsole and WebUI on the Security Management Server.

SmartConsole or mgmt_cli (API) on any computer where SmartConsole is installed.

Command line of the Security Management Server or mgmt_cli.exe on any Windows computer.

mgmt_cli (API) or WebUI on Security Gateway and SmartConsole on the Security Management Server.

A SAM rule Is implemented to provide what function or benefit?

Handle traffic as defined in the policy.

Is it possible to have more than one administrator connected to a Security Management Server at once?

Yes, but objects edited by one administrator will be locked for editing by others until the session is published.

Yes, but only if all connected administrators connect with read-only permissions.

Yes, but objects edited by one administrator will be locked for editing by others until the session is published.

No, only one administrator at a time can connect to a Security Management Server

Yes, but only one of those administrators will have write-permissions. All others will have read-only permission.

In order to see real-time and historical graph views of Security Gateway statistics in SmartView Monitor, what feature needs to be enabled on the Security Gateway?

None - the data is available by default

Checkpoint 156-215.81 Practice Test 6 - Free Online Exam Questions 201-240

An administrator is creating an IPsec site-to-site VPN between his corporate office and branch office. Both offices are protected by Check Point Security Gateway managed by the same Security Management Server (SMS). While configuring the VPN community to specify the pre-shared secret, the administrator did not find a box to input the pre-shared secret. Why does it not allow him to specify the pre-shared secret?

Become a Premium Member for full access

Unlock Premium Member

Checkpoint 156-215.81 Practice Test 6

Question

Checkpoint 156-215.81 Practice Tests

Practice Tests