The Gateway Status view in SmartConsole shows the overall status of Security Gateways and Software Blades. What does the Status Attention mean?

At least one Software Blade has a minor issue, but the gateway works.

Cannot reach the Security Gateway.

The gateway and all its Software Blades are working properly.

At least one Software Blade has a minor issue, but the gateway works.

Cannot make SIC between the Security Management Server and the Security Gateway

What is the main objective when using Application Control?

Ensure security and privacy of information.

To filter out specific content.

To assist the firewall blade with handling traffic.

Ensure security and privacy of information.

What are the three main components of Check Point security management architecture?

SmartConsole, Security Management, and Security Gateway

Smart Console, Standalone, and Security Management

SmartConsole, Security policy, and Logs & Monitoring

GUI-Client, Security Management, and Security Gateway

Where can administrator edit a list of trusted SmartConsole clients?

In cpconfig on a Security Management Server, in the WebUI logged into a Security Management Server, in SmartConsole: Manage and Settings > Permissions and Administrators > Advanced > Trusted Clients.

cpconfig on a Security Management Server, in the WebUI logged into a Security Management Server.

In cpconfig on a Security Management Server, in the WebUI logged into a Security Management Server, in SmartConsole: Manage and Settings > Permissions and Administrators > Advanced > Trusted Clients.

WebUI client logged to Security Management Server, SmartDashboard: Manage and Settings > Permissions and Administrators > Advanced > Trusted Clients, via cpconfig on a Security Gateway.

Only using SmartConsole: Manage and Settings > Permissions and Administrators > Advanced > Trusted Clients.

The default shell of the Gaia CLI is cli.sh. How do you change from the cli.sh shell to the advanced shell to run Linux commands?

Execute the command 'expert' in the cli.sh shell

Execute the command 'enable' in the cli.sh shell

Execute the 'conf t' command in the cli.sh shell

Execute the command 'expert' in the cli.sh shell

Execute the 'exit' command in the cli.sh shell

Check Point licenses come in two forms. What are those forms?

Access Control and Threat Prevention.

Security Gateway and Security Management.

In SmartEvent, a correlation unit (CU) is used to do what?

Analyze log entries and identify events.

Collect security gateway logs, Index the logs and then compress the logs.

Receive firewall and other software blade logs in a region and forward them to the primary log server.

Analyze log entries and identify events.

Send SAM block rules to the firewalls during a DOS attack.

What is NOT an advantage of Packet Filtering?

Low Security and No Screening above Network Layer

What are the two elements of address translation rules?

Original packet and translated packet

Manipulated packet and original packet

Translated packet and untranslated packet

Untranslated packet and manipulated packet

Which software blade does NOT accompany the Threat Prevention policy?

Application Control and URL Filtering

Identity Awareness lets an administrator easily configure network access and auditing based on three items Choose the correct statement.

Network location, the identity of a user and the identity of a machine.

Network location, the identity of a user and the active directory membership.

Network location, the identity of a user and the identity of a machine.

Network location, the telephone number of a user and the UID of a machine

Geographical location, the identity of a user and the identity of a machine

For Automatic Hide NAT rules created by the administrator what is a TRUE statement?

Source Port Address Translation (PAT) is enabled by default

Automate NAT rules are supported for Network objects only.

Automatic NAT rules are supported for Host objects only.

Source Port Address Translation (PAT) is disabled by default

Which of the following is TRUE regarding Gaia command line?

All configuration changes should be made in CLISH and expert-mode should be used for OS-level tasks.

Configuration changes should be done in mgmt_di and use CLISH for monitoring. Expert mode is used only for OS level tasks

Configuration changes should be done in mgmt_cli and use expert-mode for OS-level tasks.

Configuration changes should be done in expert-mode and CLISH is used for monitoring

All configuration changes should be made in CLISH and expert-mode should be used for OS-level tasks.

When a gateway requires user information for authentication, what order does it query servers for user information?

First the Internal user database, then generic external user profile, finally LDAP servers in order of priority.

First - Internal user database, then LDAP servers in order of priority, finally the generic external user profile

First the Internal user database, then generic external user profile, finally LDAP servers in order of priority.

First the highest priority LDAP server, then the internal user database, then lower priority LDAP servers, finally the generic external profile

The external generic profile, then the internal user database finally the LDAP servers in order of priority.

SmartConsole provides a consolidated solution for everything that is necessary for the security of an organization, such as the following

Security Policy Management and Log Analysis

Security Policy Management. Log Analysis. System Health Monitoring. Multi-Domain Security Management.

Security Policy Management Log Analysis and System Health Monitoring

Security Policy Management. Threat Prevention rules. System Health Monitoring and Multi-Domain Security Management.

Fill in the blank Backup and restores can be accomplished through

SmartUpdate, SmartBackup. or SmartConsole

CLI. SmartUpdate, or SmartBackup

An administrator wishes to use Application objects in a rule in their policy but there are no Application objects listed as options to add when clicking the'+' to add new items to the 'Services & Applications' column of a rule. What should be done to fix this?

'Applications & URL Filtering' should first be enabled on the policy layer where the rule is being created.

The administrator should drag-and-drop the needed Application objects from the Object Explorer into the new rule

The 'Application Control' blade should be enabled on a gateway

'Applications & URL Filtering' should first be enabled on the policy layer where the rule is being created.

The administrator should first create some applications to add to the rule.

Using AD Query, the security gateway connections to the Active Directory Domain Controllers using what protocol?

Lightweight Directory Access Protocol (LDAP)

Windows Management Instrumentation (WMI)

Hypertext Transfer Protocol Secure (HTTPS)

Lightweight Directory Access Protocol (LDAP)

Which of the completed statements is NOT true? The WebUI can be used to manage Operating System user accounts and

assign user rights to their home directory in the Security Management Server.

edit the home directory of the user.

Choose what BEST describes a Session

Starts when an Administrator logs in through SmartConsole and ends when the Administrator logs out.

Sessions ends when policy is pushed to the Security Gateway.

Starts when an Administrator logs in through SmartConsole and ends when the Administrator logs out.

Sessions locks the policy package for editing.

Starts when an Administrator publishes all the changes made on SmartConsole

Where can alerts be viewed?

Alerts can be seen in SmartView Monitor

Alerts can be seen in the Threat Prevention policy.

Alerts can be seen in SmartUpdate.

Alerts can be seen from the CLI of the gateway.

If there is an Accept Implied Policy set to 'First', what is the reason Jorge cannot see any logs?

Log Implied Rule was not selected on Global Properties.

Log Implied Rule was not set correctly on the track column on the rules base.

Track log column is set to Log instead of Full Log.

Track log column is set to none.

Log Implied Rule was not selected on Global Properties.

A layer can support different combinations of blades What are the supported blades:

Firewall (Network Access Control). Application & URL Filtering and Content Awareness

Firewall. URLF, Content Awareness and Mobile Access

Firewall (Network Access Control). Application & URL Filtering. Content Awareness and Mobile Access

Firewall. NAT, Content Awareness and Mobile Access

Firewall (Network Access Control). Application & URL Filtering and Content Awareness

What technologies are used to deny or permit network traffic?

Stateful Inspection. Firewall Blade, and URL'Application Blade

Packet Filtenng. Stateful Inspection, and Application Layer Firewall

Firewall Blade. URL/Application Blade and IPS

Stateful Inspection. URL/Application Blade, and Threat Prevention

Fill in the blanks: A Check Point software license consists of a__________ and _______.

Software blade; software container

Software container software package

Checkpoint 156-215.81 Practice Test 9 - Free Online Exam Prep & Questions

Which of the following is NOT an authentication scheme used for accounts created through SmartConsole?

Become a Premium Member for full access

Unlock Premium Member

Checkpoint 156-215.81 Practice Test 9

Question

Checkpoint 156-215.81 Practice Tests

Practice Tests