Aaron is a Syber Security Engineer working for Global Law Firm with large scale deployment of Check Point Enterprise Appliances running GAiA R81.X The Network Security Developer Team is having an issue testing the API with a newly deployed R81.X Security Management Server Aaron wants to confirm API services are working properly. What should he do first?

Aaron should check API Server status with 'api status' from Expert mode If services are stopped, he should start them with 'api start'

Aaron should check API Server status with 'fwm api status' from Expert mode If services are stopped, he should start them with 'fwm api start'.

Aaron should check API Server status with 'cpapi status' from Expert mode. If services are stopped, he should start them with 'cpapi start'

Aaron should check API Server status with 'api status' from Expert mode If services are stopped, he should start them with 'api start'

Aaron should check API Server status with 'cpm api status' from Expert mode. If services are stopped, he should start them with 'cpi api start'.

After verifying that API Server is not running, how can you start the API Server?

Run command 'api start' in Expert mode

Run command 'set api start' in CLISH mode

Run command 'mgmt__cli set api start' in Expert mode

Run command 'mgmt api start' in CLISH mode

Run command 'api start' in Expert mode

What is the Implicit Clean-up Rule?

Another name for the Clean-up Rule.

A setting is defined in the Global Properties for all policies.

A setting that is configured per Policy Layer.

Another name for the Clean-up Rule.

Automatically created when the Clean-up Rule is defined.

Ken wants to obtain a configuration lock from other administrator on R81 Security Management Server. He can do this via WebUI or via CLI.Which command should he use in CLI? (Choose the correct answer.)

The database feature has two commands lock database override and unlock database. Both will work.

The database feature has one command lock database override.

The database feature has two commands lock database override and unlock database. Both will work.

What will be the effect of running the following command on the Security Management Server?

Remove the installed Security Policy.

Which of the following is NOT a VPN routing option available in a star community?

To satellites through center only.

To center, or through the center to other satellites, to Internet and other VPN targets.

To center and to other satellites through center.

Fill in the blank. Once a certificate is revoked from the Security Gateway by the Security Management Server, the certificate information is ________ .

Stored on the Certificate Revocation List.

Sent to the Internal Certificate Authority.

Sent to the Security Administrator.

Stored on the Security Management Server.

Stored on the Certificate Revocation List.

After trust has been established between the Check Point components, what is TRUE about name and IP-address changes?

Security Gateway IP-address cannot be changed without re-establishing the trust.

The Security Gateway name cannot be changed in command line without re-establishing trust.

The Security Management Server name cannot be changed in SmartConsole without re-establishing trust.

The Security Management Server IP-address cannot be changed without re-establishing the trust.

What is the order of NAT priorities?

Static NAT, IP pool NAT, hide NAT

IP pool NAT, static NAT, hide NAT

Static NAT, automatic NAT, hide NAT

Static NAT, hide NAT, IP pool NAT

Office mode means that:

Allows a security gateway to assign a remote client an IP address. After the user authenticates for a tunnel, the VPN gateway assigns a routable IP address to the remote client.

SecurID client assigns a routable MAC address. After the user authenticates for a tunnel, the VPN gateway assigns a routable IP address to the remote client.

Users authenticate with an Internet browser and use secure HTTPS connection.

Local ISP (Internet service Provider) assigns a non-routable IP address to the remote user.

Allows a security gateway to assign a remote client an IP address. After the user authenticates for a tunnel, the VPN gateway assigns a routable IP address to the remote client.

Fill in the blank: Browser-based Authentication sends users to a web page to acquire identities using ________ .

Captive Portal and Transparent Kerberos Authentication

The ____ software blade package uses CPU-level and OS-level sandboxing in order to detect and block malware.

Next Generation Threat Emulation

Next Generation Threat Prevention

Next Generation Threat Emulation

Next Generation Threat Extraction

One of major features in R81 SmartConsole is concurrent administration.Which of the following is NOT possible considering that AdminA, AdminB and AdminC are editing the same Security Policy?

AdminA and AdminB are editing the same rule at the same time.

A lock icon shows that a rule or an object is locked and will be available.

AdminA and AdminB are editing the same rule at the same time.

A lock icon next to a rule informs that any Administrator is working on this particular rule.

AdminA, AdminB and AdminC are editing three different rules at the same time.

After the initial installation on Check Point appliance, you notice that the Management-interface and default gateway are incorrect.Which commands could you use to set the IP to 192.168.80.200/24 and default gateway to 192.168.80.1.

set interface Mgmt ipv4-address 192.168.80.200 mask-length 24set static-route default nexthop gateway address 192.168.80.1 onsave config

set interface Mgmt ipv4-address 192.168.80.200 255.255.255.0add static-route 0.0.0.0. 0.0.0.0 gw 192.168.80.1 onsave config

set interface Mgmt ipv4-address 192.168.80.200 255.255.255.0set static-route 0.0.0.0. 0.0.0.0 gw 192.168.80.1 onsave config

set interface Mgmt ipv4-address 192.168.80.200 mask-length 24add static-route default nexthop gateway address 192.168.80.1 onsave config

Tom has connected to the R81 Management Server remotely using SmartConsole and is in the process of making some Rule Base changes, when he suddenly loses connectivity. Connectivity is restored shortly afterward.What will happen to the changes already made?

Tom's changes will have been stored on the Management when he reconnects and he will not lose any of his work.

Tom will have to reboot his SmartConsole computer, and access the Management cache store on that computer, which is only accessible after a reboot.

Tom's changes will be lost since he lost connectivity and he will have to start again.

Tom will have to reboot his SmartConsole computer, clear to cache, and restore changes.

On the following picture an administrator configures Identity Awareness: After clicking ''Next'' the above configuration is supported by:

Based on Active Directory integration which allows the Security Gateway to correlate Active Directory users and machines to IP addresses in a method that is completely transparent to the user.

Kerberos SSO which will be working for Active Directory integration

Based on Active Directory integration which allows the Security Gateway to correlate Active Directory users and machines to IP addresses in a method that is completely transparent to the user.

Obligatory usage of Captive Portal.

The ports 443 or 80 what will be used by Browser-Based and configured Authentication.

Which of the completed statements is NOT true? The WebUI can be used to manage user accounts and:

assign user rights to their home directory in the Security Management Server.

edit the home directory of the user.

assign user rights to their home directory in the Security Management Server.

In the Check Point Security Management Architecture, which component(s) can store logs?

Security Management Server and Security Gateway

SmartConsole and Security Management Server

View the rule below. What does the lock-symbol in the left column mean? (Choose the BEST answer.)

Another user has locked the rule for editing.

The current administrator has read-only permissions to Threat Prevention Policy.

Another user has locked the rule for editing.

Configuration lock is present. Click the lock symbol to gain read-write access.

The current administrator is logged in as read-only because someone else is editing the policy.

Which VPN routing option uses VPN routing for every connection a satellite gateway handles?

To center, or through the center to other satellites, to Internet and other VPN targets

To satellites through center only

To center and to other satellites through center

To center, or through the center to other satellites, to Internet and other VPN targets

Kofi, the administrator of the ALPHA Corp network wishes to change the default Gaia WebUI Portal port number currently set on the default HTTPS port. Which CLISH commands are required to be able to change this TCP port?

set web ssl-port <new port number>

set Gaia-portal port <new port number>

set Gaia-portal https-port <new port number>

set web https-port <new port number>

Joey want to configure NTP on R81 Security Management Server. He decided to do this via WebUI. What is the correct address to access the Web UI for Gaia platform via browser?

https://<Device_IP_Address>:10000

https://<Device_IP_Address>:4434

The ''Hit count'' feature allows tracking the number of connections that each rule matches. Will the Hit count feature work independently from logging and Track the hits if the Track option is set to ''None''?

Yes it will work independently because when you enable Hit Count, the SMS collects the data from supported Security Gateways.

No, it will work independently. Hit Count will be shown only for rules Track option set as Log or alert.

Yes it will work independently as long as ''analyze all rules'' tick box is enabled on the Security Gateway.

No, it will not work independently because hit count requires all rules to be logged.

Yes it will work independently because when you enable Hit Count, the SMS collects the data from supported Security Gateways.

Fill in the blank: Permanent VPN tunnels can be set on all tunnels in the community, on all tunnels for specific gateways, or ______ .

On specific tunnels in the community

On all satellite gateway to satellite gateway tunnels

On specific tunnels for specific gateways

On specific tunnels in the community

On specific satellite gateway to central gateway tunnels

True or False: In a Distributed Environment, a Central License can be installed via CLI on a Security Gateway.

True, Central License can be installed with CPLIC command on a Security Gateway

True, CLI is the prefer method for Licensing

False, Central License are handled via Security Management Server

False, Central Licenses are installed via Gaia on Security Gateways

True, Central License can be installed with CPLIC command on a Security Gateway

When a packet arrives at the gateway, the gateway checks it against the rules in the hop Policy Layer, sequentially from top to bottom, and enforces the first rule that matches a packet. Which of the following statements about the order of rule enforcement is true?

If the Action is Accept, the gateway continues to check rules in the next Policy Layer down.

If the Action is Accept, the gateway allows the packet to pass through the gateway.

If the Action is Drop, the gateway continues to check rules in the next Policy Layer down.

If the Action is Accept, the gateway continues to check rules in the next Policy Layer down.

If the Action is Drop, the gateway applies the Implicit Clean-up Rule for that Policy Layer.

Checkpoint 156-315.81 Practice Test 8 - Free Online Exam Prep & Questions

Firewall polices must be configured to accept VRRP packets on the GAiA platform if it Firewall software. The Multicast destination assigned by the internet Assigned Number Authority (IANA) for VRRP is:

Become a Premium Member for full access

Unlock Premium Member

Checkpoint 156-315.81 Practice Test 8

Question

Checkpoint 156-315.81 Practice Tests

Practice Tests