Checkpoint 156-215.81 Practice Test - Questions Answers, Page 19

The SmartConsole tab that shows logs and detects security threats, providing a centralized display of potential attack patterns from all network devices, is Logs and Monitor1, p. 24. The Logs and Monitor tab allows administrators to view logs from various sources, such as Security Gateways, SmartEvent servers, and SmartReporter servers. Gateway and Servers, Manage Setting, and Security Policies are other tabs in SmartConsole that have different functions.

Reference:Check Point CCSA - R81: Practice Test & Explanation, [Check Point SmartConsole R81 Help]

Multi-domain management server is a valid deployment option for R81, not R80.R80 supports multi-domain security management, which is a centralized management solution for large-scale, distributed environments with many different domain networks1.

Reference:Multi-Domain Security Management Administration Guide R80

Identity Captive Portal is a Check Point Identity Awareness web portal, to which users connect with their web browser to log in and authenticate, when using Browser-Based Authentication2.To enable Identity Captive Portal for a specific rule, you need to right click Accept in the rule, select ''More'', and then check ''Enable Identity Captive Portal''3.

Reference:Identity Awareness Administration Guide R80,Identity awareness with captive portal in Checkpoint R80

Identity Awareness allows the Security Administrator to configure network access based on network location, identity of a user, and identity of a machine1.These are the three main identity sources that Identity Awareness supports1.

Reference:Identity Awareness R80.40 Administration Guide

Accept all encrypted traffic is the option that will match a connection regardless of its association with a VPN community2.This option allows encrypted traffic from any VPN peer, even if it is not defined in a VPN community2.

Reference:Site to Site VPN in R80.x - Tutorial for Beginners

Detailed Log is not a valid tracking log option in R80.x3.The tracking log options in R80.x are Log, Full Log, and Extended Log45.

Reference:Where is 'full log' option in track column,LOGGINGAND MONITORING R80,Logging and Monitoring Administration Guide R80.20

Application information is included in the ''Extended Log'' tracking option, but is not included in the ''Log'' tracking option4.The ''Extended Log'' option provides additional information about the application, such as name, category, risk, and technology4.

Reference:LOGGINGAND MONITORING R80

The ''Hit Count'' feature is enabled or disabled on the Policy layer in SmartConsole1. To enable or disable the ''Hit Count'' feature, right-click on the Policy layer and select ''Edit Layer''.Then, check or uncheck the ''Enable Hit Count'' option1.

Reference:Solved: Hit Count in R80.x

The tool used to enable cluster membership on a Gateway is cpconfig2.This tool allows you to configure basic settings of Check Point products, such as cluster membership, administrator name and password, GUI clients, and Secure Internal Communication (SIC)2.

Reference:Next Generation Security Gateway Guide R80