Which of the following log queries would show only dropped packets with source address of 192.168.1.1 and destination address of 172.26.1.1?

src:192.168.1.1 AND dst:172.26.1.1 AND action:Drop

src:192.168.1.1 OR dst:172.26.1.1 AND action:Drop

src:192.168.1.1 AND dst:172.26.1.1 AND action:Drop

192.168.1.1 AND 172.26.1.1 AND drop

192.168.1.1 OR 172.26.1.1 AND action:Drop

In HTTPS Inspection policy, what actions are available in the 'Actions' column of a rule?

'Inspect', 'Bypass', 'Categorize'

Fill in the blank: Browser-based Authentication sends users to a web page to acquire identities using ___________.

Captive Portal and Transparent Kerberos Authentication

With URL Filtering, what portion of the traffic is sent to the Check Point Online Web Service for analysis?

The complete communication is sent for inspection.

The IP address of the source machine.

Choose what BEST describes the reason why querying logs now are very fast.

Indexing Engine indexes logs for faster search results.

The amount of logs being stored is less than previous versions.

New Smart-1 appliances double the physical memory install.

Indexing Engine indexes logs for faster search results.

SmartConsole now queries results directly from the Security Gateway.

Rugged appliances are small appliances with ruggedized hardware and like Quantum Spark appliance they use which operating system?

Red Hat Enterprise Linux version 5

Why is a Central License the preferred and recommended method of licensing?

Central Licensing ties to the IP address of the management server and is not dependent on the IP of any gateway in the event it changes.

Central Licensing is actually not supported with Gaia.

Central Licensing is the only option when deploying Gaia

Central Licensing ties to the IP address of a gateway and can be changed to any gateway if needed.

Central Licensing ties to the IP address of the management server and is not dependent on the IP of any gateway in the event it changes.

What default layers are included when creating a new policy layer?

Access Control, Threat Prevention and HTTPS Inspection

Application Control, URL Filtering and Threat Prevention

Access Control, Threat Prevention and HTTPS Inspection

Firewall, Application Control and IPSec VPN

Firewall, Application Control and IPS

After a new Log Server is added to the environment and the SIC trust has been established with the SMS what will the gateways do?

Logs are not automatically forwarded to a new Log Server. SmartConsole must be used to manually configure each gateway to send its logs to the server.

The gateways can only send logs to an SMS and cannot send logs to a Log Server. Log Servers are proprietary log archive servers.

Gateways will send new firewall logs to the new Log Server as soon as the SIC trust is set up between the SMS and the new Log Server.

The firewalls will detect the new Log Server after the next policy install and redirect the new logs to the new Log Server.

Logs are not automatically forwarded to a new Log Server. SmartConsole must be used to manually configure each gateway to send its logs to the server.

Name the utility that is used to block activities that appear to be suspicious.

Suspicious Activity Monitoring (SAM)

When URL Filtering is set, what identifying data gets sent to the Check Point Online Web Service?

The host part of the URL is sent to the Check Point Online Web Service

The URL and server certificate are sent to the Check Point Online Web Service

The full URL, including page data, is sent to the Check Point Online Web Service

The host part of the URL is sent to the Check Point Online Web Service

The URL and IP address are sent to the Check Point Online Web Service

Name the pre-defined Roles included in Gaia OS.

ReadWriteRole, and ReadyOnly Role

AdminRole, cloningAdminRole, and Monitor Role

Which single Security Blade can be turned on to block both malicious files from being downloaded as well as block websites known to host malware?

None - both Anti-Virus and Anti-Bot are required for this

None - both URL Filtering and Anti-Virus are required for this.

There are four policy types available for each policy package. What are those policy types?

Access Control, Threat Prevention, NAT and HTTPS Inspection

Access Control, Threat Prevention, Mobile Access and HTTPS Inspection

Access Control, Custom Threat Prevention, Autonomous Threat Prevention and HTTPS Inspection

There are only three policy types: Access Control, Threat Prevention and NAT.

Access Control, Threat Prevention, NAT and HTTPS Inspection

Which tool allows for the automatic updating of the Gaia OS and Check Point products installed on the Gaia OS?

CPUSE - Check Point Upgrade Service Engine

CPASE - Check Point Automatic Service Engine

CPAUE - Check Point Automatic Update Engine

CPDAS - Check Point Deployment Agent Service

CPUSE - Check Point Upgrade Service Engine

The purpose of the Communication Initialization process is to establish a trust between the Security Management Server and the Check Point gateways. Which statement best describes this Secure Internal Communication (SIC)?

After successful initialization, the gateway can communicate with any Check Point node that possesses a SIC certificate signed by the same ICA.

Secure Internal Communications authenticates the security gateway to the SMS before http communications are allowed.

A SIC certificate is automatically generated on the gateway because the gateway hosts a subordinate CA to the SMS ICA.

New firewalls can easily establish the trust by using the expert password defined on the SMS and the SMS IP address.

What are the types of Software Containers?

Security Management, Security Gateway, and Endpoint Security

Smart Console, Security Management, and Security Gateway

Security Management, Security Gateway, and Endpoint Security

Security Management, Log & Monitoring, and Security Policy

Security Management, Standalone, and Security Gateway

Most Check Point deployments use Gaia but which product deployment utilizes special Check Point code (with unification in R81.10)?

Enterprise Network Security Appliances

Small Business and Branch Office Appliances

URL Filtering cannot be used to:

Improve organizational security

How do logs change when the 'Accounting' tracking option is enabled on a traffic rule?

Involved traffic logs are updated every 10 minutes to show how much data has passed on the connection.

Involved traffic logs will be forwarded to a log server.

Provides log details view email to the Administrator.

Involved traffic logs are updated every 10 minutes to show how much data has passed on the connection.

Provides additional information to the connected user.

Which of these is NOT a feature or benefit of Application Control?

Scans the content of files being downloaded by users in order to make policy decisions.

Eliminate unknown and unwanted applications in your network to reduce IT complexity and application risk.

Identify and control which applications are in your IT environment and which to add to the IT environment.

Scans the content of files being downloaded by users in order to make policy decisions.

Automatically identify trusted software that has authorization to run

What is the purpose of Captive Portal?

It authenticates users, allowing them access to the Internet and corporate resources

It manages user permission in SmartConsole

It provides remote access to SmartConsole

It authenticates users, allowing them access to the Internet and corporate resources

It authenticates users, allowing them access to the Gaia OS

True or False: More than one administrator can log into the Security Management Server with SmartConsole with write permission at the same time.

True, every administrator works in a session that is independent of the other administrators

True, every administrator works on a different database that Is independent of the other administrators

False, this feature has to be enabled in the Global Properties.

True, every administrator works in a session that is independent of the other administrators

False, only one administrator can login with write permission

When configuring LDAP with User Directory integration, changes applied to a User Directory template are:

Reflected immediately for all users who are using that template.

Not reflected for any users unless the local user template is changed.

Not reflected for any users who are using that template.

Reflected for ail users who are using that template and if the local user template is changed as well.

Reflected immediately for all users who are using that template.

The competition between stateful inspection and proxies was based on performance, protocol support, and security. Considering stateful Inspections and Proxies, which statement is correct?

When it comes to performance, stateful inspection was significantly faster than proxies.

Stateful Inspection is limited to Layer 3 visibility, with no Layer 4 to Layer 7 visibility capabilities.

When it comes to performance, proxies were significantly faster than stateful inspection firewalls.

Proxies offer far more security because of being able to give visibility of the payload (the data).

When it comes to performance, stateful inspection was significantly faster than proxies.

Checkpoint 156-215.81 Practice Test 7 - Free Online Exam Prep & Questions

Spam

Selling illegal goods, money scams etc.

Hate Speech

Serious attack on a group.

Harassment and bullying

Harassing an individual (including doxing)

Harmful activities

Threatening or glorifying violence or serious harm, including self-harm

Adult content (Consensual)

Nudity/Sexual content

Sexual exploitation and abuse (child safety)

Sexually explicit or suggestive imagery or writing involving minors

Sexual exploitation and abuse (adults and animals)

Sexually explicit or suggestive imagery or writing involving non-consenting adults or non-humans

Plagiarism

Reusing content without attribution (link and blockquotes)

Poorly written

Not in English or has very bad formatting, grammar, and spelling

Inappropriate credential

Author's credential is offensive, spam, or impersonation

Other

Ex. Illegal content, incomplete question...

Checkpoint 156-215.81 Practice Test 7

Question

Checkpoint 156-215.81 Practice Tests

Practice Tests