Checkpoint 156-215.81 Practice Test - Questions Answers, Page 17

In a Distributed Environment, a Central License can be installed via CLI on a Security Gateway using the CPLIC command1.This command allows you to install a license from a file or from the User Center1. Therefore, the correct answer is D.True, Central License can be installed with CPLIC command on a Security Gateway.

UserCheck is not an identity source used for Identity Awareness.UserCheck is a feature that allows you to interact with users when they trigger Data Loss Prevention or Threat Prevention incidents2.Identity Awareness uses different methods to acquire identities, such as AD Query, Identity Agent, Browser-Based Authentication, Terminal Servers, Captive Portal, and RADIUS3. Therefore, the correct answer is B.UserCheck.

The default port numbers for an LDAP server are 389 for standard connections and 636 for SSL connections. LDAP (Lightweight Directory Access Protocol) is a protocol that allows access to directory services over TCP/IP. Therefore, the correct answer is B. 389, 636.

Bridge Mode Check Point Security Gateway does not support NAT. Bridge Mode is a deployment option that allows the Security Gateway to inspect traffic without being a routing hop.In Bridge Mode, the Security Gateway does not have an IP address and cannot perform NAT1. Therefore, the correct answer is C.NAT.

The option that allows all encrypted and non-VPN traffic that matches the rule is Accept all encrypted traffic.This option enables you to allow traffic to any destination that is encrypted, regardless of whether it is part of a VPN community or not2. Therefore, the correct answer is B.Accept all encrypted traffic.

The scenario where it is a valid option to transfer a license from one hardware device to another is from a 4400 Appliance to a 2200 Appliance. This is because both appliances are Check Point products and have the same license type (Central License).You can transfer a license from one hardware device to another if they have the same license type and vendor3. Therefore, the correct answer is A.From a 4400 Appliance to a 2200 Appliance.

A central license is automatically attached to a Security Gateway when it is installed.A local license requires an administrator to designate a gateway for attachment1, p. 8.

Reference:Check Point CCSA - R81: Practice Test & Explanation

An Access Role Object has four configuration screens: Users, Machines, Networks, and Identity Tags1, p. 27. Time is not a valid configuration screen of an Access Role Object.

Reference:Check Point CCSA - R81: Practice Test & Explanation

The Stealth Rule is used to prevent users from directly connecting to a Security Gateway.It is usually placed at the top of the rule base, before any other rule that allows traffic to the Security Gateway1, p. 32.

Reference:Check Point CCSA - R81: Practice Test & Explanation