What are the main stages of a policy installation?

Verification Compilation, Transfer and Commit

Initiation, Conversion and FWD REXEC

Verification, Commit, Installation

Initiation, Conversion and Save

Verification Compilation, Transfer and Commit

How to can you make sure that the old logs will be available after updating the Management to version R81.20 using the Advanced Upgrade Method?

The logs will be included running SFWDIR/scripts/migrate_server export -v R81.20

Use the WebUI -> Maintenance > System Backup and store the backup on a remote FTP server

The logs will be included running SFWDIR/scripts/migrate_server export -v R81.20

Use the WebUI to save a snapshot before updating the Management -> Maintenance > Snapshot Management

Use the migrate_server tool with the option '-I' for the logs and '-x' for the index

After some changes in the firewall policy you run into some issues. You want to test if the policy from two weeks ago have the same issue. You don't want to lose the changes from the last weeks. What is the best way to do it?

In SmartConsole under Security Policies go to the Installation History view of the Gateway, select the policy version from two weeks ago and press the 'Install specific

Use the Gaia WebUI to take a backup of the Gateway. In SmartConsole under Security Policies go to the Installation History view of the Gateway, select the policy version from two weeks ago and press the 'Install specific version' button

Use the Gaia WebUI to take a snapshot of management. In the In SmartConsole under Manage & Settlings go to Sessions -> Revisions and select the revision from two weeks ago. Run the action 'Revert to this revision...' Restore the management snapshot.

In SmartConsole under Manage & Settings go to Sessions -> Revisions and select the revision from two weeks ago. Run the action 'Revert to this revision...'.

In SmartConsole under Security Policies go to the Installation History view of the Gateway, select the policy version from two weeks ago and press the 'Install specific

Which of the following statements about Site-to-Site VPN Domain-based is NOT true?

Domain-based- VPN domains are pre-defined for all VPN Gateways. A VPN domain is a service or user that can send or receive VPN traffic through a VPN Gateway.

Domain-based- VPN domains are pre-defined for all VPN Gateways. When the Security Gateway encounters traffic originating from one VPN Domain with the destination to a VPN Domain of another VPN Gateway, that traffic is identified as VPN traffic and is sent through the VPN Tunnel between the two Gateways.

Route-based- The Security Gateways will have a Virtual Tunnel Interface (VTI) for each VPN Tunnel with a peer VPN Gateway. The Routing Table can have routes to forward traffic to these VTIs. Any traffic routed through a VTI is automatically identified as VPN Traffic and is passed through the VPN Tunnel associated with the VTI.

Domain-based- VPN domains are pre-defined for all VPN Gateways. A VPN domain is a service or user that can send or receive VPN traffic through a VPN Gateway.

Domain-based- VPN domains are pre-defined for all VPN Gateways. A VPN domain is a host or network that can send or receive VPN traffic through a VPN Gateway.

What is the correct Syntax for adding an access-rule via R80 API?

add access-rule layer 'Network' position 1 name 'Rule 1' service. 1 'SMTP' service.2 'hup'

add access-rule layer 'Network' action 'Allow'

add access-rule layer 'Network' position 1 name 'Rule 1' service. 1 'SMTP' service.2 'hup'

add access-rule <CR> and follow the wizard

add rule position 1 name 'Rule 1' policy-package 'Standard' add service 'http'

You have used the 'set inactivity-timeout 120' command to prevent the session to be disconnected after 10 minutes of inactivity. However, the Web session is being disconnected after 10 minutes. Why?

The idle timeout for the web session is specified with the 'set web session-timeout' command.

The number specified is the amount of the idle timeout in seconds rather than in minutes. So you have to use the command 'set inactivity-timeout 600' instead.

Probably, you have forgotten to make sure that nobody is accessing the management server via the SmartConsole which locks the management database.

The number of minutes is correct. Probably, you have forgotten to save this setting with the 'save config' command.

How can you grant GAiAAPI Permissions for a newly created user?

Assign the user a permission profile in SmartConsole

Assign the user the admin RBAC role in dish

No need to grant access since every user has access by default.

In bash, use the following command: 'gaia_api access --user Tom -enable true'

Return oriented programming (ROP) exploits are detected by which security blade?

Check Point Anti-Virus / Threat Emulation

Which statement is false in respect of the SmartConsole after upgrading the management server to R81.20?

As far as you use version R80.40, no upgrade is needed due to compatibility mode

Yes. You can download the SmartConsole directly from the Download Center

As far as you use version R80.40, no upgrade is needed due to compatibility mode

Yes, using CPUSE you can make the installer available in the Web Portal of the Management Server

Yes, the SmartConsole Upgrade package can be installed using CPUSE

Which statement is WRONG regarding the usage of the Central Deployment in SmartConsole?

Only be installed Hotfixes can with the Central Deployment in SmartConsole

You can install Hotfixes with the Central Deployment in SmartConsole

You can install Jumbo Hotfix accumulators with the Central Deployment in SmartConsole.

Only be installed Hotfixes can with the Central Deployment in SmartConsole

You can upgrade your cluster without user intervention with the Central Deployment in SmartConsole from R80.40 to R81.20.

Native Applications require a thin client under which circumstances?

If you are about to use a client (FTP. RDP, ...) that is installed on the endpoint.

If you want to use a legacy 32-Bit Windows OS

If you want to use a VPN Client that is not officially supported by the underlying operating system

If you want to have assigned a particular Office Mode IP address.

If you are about to use a client (FTP. RDP, ...) that is installed on the endpoint.

What are the two ClusterXL Deployment options?

Distributed and Full High Availability

What could NOT be a reason for synchronization issues in a Management HA environment?

The products installed on the servers do not match: one device is a Standalone Server while the other is only a Security Management server

Accidentally, you have configured unique IP addresses per Management Server which invalidates the CA Certificate

There is a network connectivity failure between the servers

Servers are in Collision Mode. Two servers, both in active state cannot be synchronized either automatically or manually.

The products installed on the servers do not match: one device is a Standalone Server while the other is only a Security Management server

After replacing a faulty Gateway the admin installed the new Hardware and want to push the policy. Installing the policy using the SmartConsole he got an Error for the Threat Prevention Policy. There is no error for the Access Control Policy. What will be the most common cause for the issue?

The admin forgot to apply the new license. The Access Control license is included by default but the service subscriptions for the Threat Prevention Blades are missing.

The admin forgot to reestablish the SIC for the new hardware. That is typically the case when configure only the interfaces of the replacement hardware instead restoring a backup.

The IPS Protection engine on the replacement hardware is too old. Before pushing the Threat Prevention Policy use SmartConsole -> Security Policies -> Updates -> IPS 'Update Now' to update the engine.

The admin forgot to apply the new license. The Access Control license is included by default but the service subscriptions for the Threat Prevention Blades are missing.

The Threat Prevention Policy can't be installed on a Gateway without an already installed Access Control Policy. First install only the Access Control Policy.

In R81.20 a new feature dynamic log distribution was added. What is this for?

Configure the Security Gateway to distribute logs between multiple active Log Servers to support a better rate of Logs and Log Servers redundancy

In case of a Management High Availability the management server stores the logs dynamically on the member with the most available disk space in /var/log

Synchronize the log between the primary and secondary management server in case of a Management High Availability

To save disk space in case of a firewall cluster local logs are distributed between the cluster members.

What order should be used when upgrading a Management High Availability Cluster?

Standby Management, then Active Management

Secondary Management, then Primary Management

Active Management, then Standby Management

Standby Management, then Active Management

Primary Management, then Secondary Management

What are valid Policy Types in R81.X?

Access Control, Threat Prevention, QoS, Desktop Security

Access Control, IPS, Threat Emulation, NAT

Access Control, RemoteAccess VPN, NAT, IPS

What is the purpose of Captive Portal?

It authenticates users, allowing them access to the Internet and corporate resources

It authenticates users, allowing them access to the Gaia OS

It authenticates users, allowing them access to the Internet and corporate resources

It provides remote access to SmartConsole

It manages user permission in SmartConsole

Fill in the blank: An Endpoint identity agent uses a________ for user authentication.

Username/password or Kerberos Ticket

Access roles allow the firewall administrator to configure network access according to:

a combination of computer or computer groups and networks.

In CoreXL, the Firewall kernel is replicated multiple times. Each replicated copy or instance can perform the following:

The Firewall can run the same policy on all cores

The Firewall kernel only touches the packet if the connection is accelerated

The Firewall kernel is replicated only with new connections and deletes itself once the connection times out

The Firewall can run the same policy on all cores

The Firewall can run different policies per core

What are scenarios supported by the Central Deployment in SmartConsole?

Installation of Jumbo Hotfix on a ClusterXL environment in High Availability Mode

Upgrading a Dedicated SmartEvent Server

Upgrading a Dedicated Log Server to R81

Upgrading a Standalone environment

Identity Awareness allows the Security Administrator to configure network access based on which of the following?

Network location, identity of a user, and identity of a machine

Name of the application, identity of the user, and identity of the machine

Identity of the machine, username, and certificate

Browser-Based Authentication, identity of a user, and network location

Network location, identity of a user, and identity of a machine

The installation of a package via SmartConsole CANNOT be applied on

A full Security Cluster (All Cluster Members included)

Multiple Security Gateways and/or Clusters

R81.20 Security Management Server

Checkpoint 156-315.81 Practice Test 15 - Free Online Exam Prep & Questions

Spam

Selling illegal goods, money scams etc.

Hate Speech

Serious attack on a group.

Harassment and bullying

Harassing an individual (including doxing)

Harmful activities

Threatening or glorifying violence or serious harm, including self-harm

Adult content (Consensual)

Nudity/Sexual content

Sexual exploitation and abuse (child safety)

Sexually explicit or suggestive imagery or writing involving minors

Sexual exploitation and abuse (adults and animals)

Sexually explicit or suggestive imagery or writing involving non-consenting adults or non-humans

Plagiarism

Reusing content without attribution (link and blockquotes)

Poorly written

Not in English or has very bad formatting, grammar, and spelling

Inappropriate credential

Author's credential is offensive, spam, or impersonation

Other

Ex. Illegal content, incomplete question...

Checkpoint 156-315.81 Practice Test 15

Question

Checkpoint 156-315.81 Practice Tests

Practice Tests