Checkpoint 156-215.81 Practice Test - Questions Answers, Page 18

It is Best Practice to have an Explicit CleanUp rule at the end of each policy layer.This rule will log and drop any traffic that does not match any of the preceding rules in the layer1, p. 23.

Reference:Check Point CCSA - R81: Practice Test & Explanation

The BEST object type to represent an LDAP group in a Security Policy is an Access Role.An Access Role object defines a set of users, machines, or networks that can access a resource or service1, p. 27.An Access Role object can include LDAP groups as one of its components2, p. 10.

Reference:Check Point CCSA - R81: Practice Test & Explanation,Check Point Identity Awareness Administration Guide R81

The Next Generation Threat Emulation software blade package uses CPU-level and OS-level sandboxing in order to detect and block malware1, p. 41.It emulates files in a virtual environment and inspects their behavior for malicious activity3.

Reference:Check Point CCSA - R81: Practice Test & Explanation,Check Point Threat Emulation Administration Guide R81

Once a certificate is revoked from the Security Gateway by the Security Management Server, the certificate information is stored on the Certificate Revocation List (CRL)1, p. 47.The CRL is a list of certificates that have been revoked before their expiration date4.

Reference:Check Point CCSA - R81: Practice Test & Explanation,Free Check Point CCSA Sample Questions and Study Guide

A firewall can NOT prevent a network bandwidth saturation attack, which is a type of denial-of-service (DoS) attack that aims to consume all the available bandwidth of a target network or device1, p. 9.A firewall can prevent other types of attacks, such as buffer overflow, SYN flood, and SQL injection, by inspecting packets and applying security rules2, p. 11-12.

Reference:Check Point CCSA - R81: Practice Test & Explanation,156-315.81 Checkpoint Exam Info and Free Practice Test

R80 is supported by Gaia only, which is Check Point's unified security operating system for all Check Point appliances, open servers, and virtualized gateways1, p. 14. Windows and SecurePlatform are not supported by R80.

Reference:Check Point CCSA - R81: Practice Test & Explanation, [Check Point Learning and Training Frequently Asked Questions (FAQs)]

Check Point technologies that deny or permit network traffic are packet filtering, stateful inspection, and application layer firewall1, p. 15-16.Packet filtering is a basic firewall technique that examines packets based on their source and destination addresses and ports2, p. 13.Stateful inspection is an advanced firewall technique that tracks the state and context of network connections and inspects packets based on their content and sequence2, p. 13.Application layer firewall is a firewall technique that operates at the application layer of the OSI model and inspects packets based on their application protocols and data2, p. 14.

Reference:Check Point CCSA - R81: Practice Test & Explanation,156-315.81 Checkpoint Exam Info and Free Practice Test

Gaia can be managed through CLI, WebUI, and SmartDashboard1, p. 17-18. CLI is a command-line interface that allows administrators to configure and monitor Gaia using commands and scripts. WebUI is a web-based interface that allows administrators to configure and monitor Gaia using a browser. SmartDashboard is a graphical user interface that allows administrators to manage security policies and objects for Gaia devices.

Reference:Check Point CCSA - R81: Practice Test & Explanation, [Check Point Gaia Administration Guide R81], [Check Point Security Management Administration Guide R81]

The licensing feature that is used to verify licenses and activate new licenses added to the License and Contracts repository is Automatic licensing and Verification tool1, p. 8. Automatic licensing is a feature that allows the Security Management Server to automatically attach licenses to Security Gateways.Verification tool is a feature that allows the Security Management Server to verify the validity of licenses and contracts2.

Reference:Check Point CCSA - R81: Practice Test & Explanation,Check Point Licensing and Contract Administration Guide R81