You have enabled 'Extended Log' as a tracking option to a security rule. However, you are still not seeing any data type information. What is the MOST likely reason?

Content Awareness is not enabled.

Identity Awareness is not enabled.

Content Awareness is not enabled.

Identity Awareness allows easy configuration for network access and auditing based on what three items?

Network location, the identity of a user and the identity of a machine.

What are the three deployment options available for a security gateway?

Standalone, Distributed, and Bridge Mode

Bridge Mode, Remote, and Standalone

Remote, Standalone, and Distributed

Distributed, Bridge Mode, and Remote

In which scenario will an administrator need to manually define Proxy ARP?

When they configure a 'Manual Static NAT' which translates to an IP address that does not belong to one of the firewall's interfaces.

When they configure an 'Automatic Static NAT' which translates to an IP address that does not belong to one of the firewall's interfaces.

When they configure an 'Automatic Hide NAT' which translates to an IP address that does not belong to one of the firewall's interfaces.

When they configure a 'Manual Static NAT' which translates to an IP address that does not belong to one of the firewall's interfaces.

When they configure a 'Manual Hide NAT' which translates to an IP address that belongs to one of the firewall's interfaces.

A network administrator has informed you that they have identified a malicious host on the network, and instructed you to block it. Corporate policy dictates that firewall policy changes cannot be made at this time. What tool can you use to block this traffic?

Suspicious Activity Monitoring (SAM) rules

In a Distributed deployment, the Security Gateway and the Security Management software are installed on what platforms?

Different computers or appliances.

The same computer or appliance.

Both on virtual machines or both on appliances but not mixed.

In Azure and AWS cloud environments.

Which of the following licenses are considered temporary?

Plug-and-play (Trial) and Evaluation

What is the main difference between Static NAT and Hide NAT?

Static NAT allow incoming and outgoing connections. Hide NAT only allows outgoing connections.

Static NAT only allows incoming connections to protect your network.

Static NAT allow incoming and outgoing connections. Hide NAT only allows outgoing connections.

Static NAT only allows outgoing connections. Hide NAT allows incoming and outgoing connections.

Hide NAT only allows incoming connections to protect your network.

A Check Point Software license consists of two components, the Software Blade and the Software Container. There are ______ types of Software Containers: ________.

Three; Security Management, Security Gateway, and Endpoint Security

Two; Security Management and Endpoint Security

Two; Endpoint Security and Security Gateway

Three; Security Management, Security Gateway, and Endpoint Security

Three; Security Gateway, Endpoint Security, and Gateway Management

When using Automatic Hide NAT, what is enabled by default?

Source Port Address Translation (PAT)

Fill in the blanks: The _______ collects logs and sends them to the _______.

Log server; security management server

Security management server; Security Gateway

When a SAM rule is required on Security Gateway to quickly block suspicious connections which are not restricted by the Security Policy, what actions does the administrator need to take?

SmartView Monitor should be opened and then the SAM rule/s can be applied immediately. Installing policy is not required.

The policy type SAM must be added to the Policy Package and a new SAM rule must be applied. Simply Publishing the changes applies the SAM rule on the firewall.

The administrator must work on the firewall CLI (for example with SSH and PuTTY) and the command 'sam block' must be used with the right parameters.

The administrator should open the LOGS & MONITOR view and find the relevant log. Right clicking on the log entry will show the Create New SAM rule option.

To provide updated malicious data signatures to all Threat Prevention blades, the Threat Prevention gateway does what with the data?

Share the data to the ThreatCloud for use by other Threat Prevention blades.

Cache the data to speed up its own function.

Share the data to the ThreatCloud for use by other Threat Prevention blades.

Log the traffic for Administrator viewing.

Delete the data to ensure an analysis of the data is done each time.

Which two Identity Awareness daemons are used to support identity sharing?

Policy Decision Point (PDP) and Policy Enforcement Point (PEP)

Policy Activation Point (PAP) and Policy Decision Point (PDP)

Policy Manipulation Point (PMP) and Policy Activation Point (PAP)

Policy Enforcement Point (PEP) and Policy Manipulation Point (PMP)

Policy Decision Point (PDP) and Policy Enforcement Point (PEP)

Communication tool used to inform a user about a website or application they are trying to access

Messaging tool user to verify a user's credentials

Communication tool used to inform a user about a website or application they are trying to access

Administrator tool used to monitor users on their network

Communication tool used to notify an administrator when a new user is created

When doing a Stand-Alone Installation, you would install the Security Management Server with which other Check Point architecture component?

None, Security Management Server would be installed by itself.

Fill in the blank: An Endpoint identity agent uses a ___________ for user authentication.

Username/password or Kerberos Ticket

What is the purpose of a Stealth Rule?

To drop any traffic destined for the firewall that is not otherwise explicitly allowed.

A rule used to hide a server's IP address from the outside world.

A rule that allows administrators to access SmartDashboard from any device.

To drop any traffic destined for the firewall that is not otherwise explicitly allowed.

A rule at the end of your policy to drop any traffic that is not explicitly allowed.

Checkpoint 156-215.81 Practice Test 8 - Free Online Exam Prep & Questions

What are the Threat Prevention software components available on the Check Point Security Gateway?

Become a Premium Member for full access

Unlock Premium Member

Checkpoint 156-215.81 Practice Test 8

Question

Checkpoint 156-215.81 Practice Tests

Practice Tests