Why would an administrator see the message below?

A new Policy Package created on the Management is going to be installed to the existing Gateway.

A new Policy Package created on both the Management and Gateway will be deleted and must be backed up first before proceeding.

A new Policy Package created on the Management is going to be installed to the existing Gateway.

A new Policy Package created on the Gateway is going to be installed on the existing Management.

A new Policy Package created on the Gateway and transferred to the Management will be overwritten by the Policy Package currently on the Gateway but can be restored from a periodic backup on the Gateway.

Which command is used to add users to or from existing roles?

Add rba user <User Name> roles <List>

Add user <User Name> roles <List>

Which option, when applied to a rule, allows traffic to VPN gateways in specific VPN communities?

All Connections (Clear or Encrypted)

All Site-to-Site VPN Communities

What is the purpose of the CPCA process?

Generating and modifying certificates.

Monitoring the status of processes.

Communication between GUI clients and the SmartCenter server.

Generating and modifying certificates.

You have created a rule at the top of your Rule Base to permit Guest Wireless access to the Internet. However, when guest users attempt to reach the Internet, they are not seeing the splash page to accept your Terms of Service, and cannot access the Internet. How can you fix this?

Right click Accept in the rule, select ''More'', and then check 'Enable Identity Captive Portal'.

On the firewall object, Legacy Authentication screen, check 'Enable Identity Captive Portal'.

In the Captive Portal screen of Global Properties, check 'Enable Identity Captive Portal'.

On the Security Management Server object, check the box 'Identity Logging'.

Fill in the blank: A new license should be generated and installed in all of the following situations EXCEPT when ________ .

The IP address of the Security Management or Security Gateway has changed.

The license is attached to the wrong Security Gateway.

The IP address of the Security Management or Security Gateway has changed.

If there are two administration logged in at the same time to the SmartConsole, and there are objects locked for editing, what must be done to make them available or other administrators? (Choose the BEST answer.)

Publish or discard the session.

Delete older versions of database.

An administrator is creating an IPsec site-to-site VPN between his corporate office and branch office. Both offices are protected by Check Point Security Gateway managed by the same Security Management Server. While configuring the VPN community to specify the pre-shared secret the administrator found that the check box to enable pre-shared secret and cannot be enabled.Why does it not allow him to specify the pre-shared secret?

Certificate based Authentication is the only authentication method available between two Security Gateway managed by the same SMS.

IPsec VPN blade should be enabled on both Security Gateway.

Pre-shared can only be used while creating a VPN between a third party vendor and Check Point Security Gateway.

Certificate based Authentication is the only authentication method available between two Security Gateway managed by the same SMS.

The Security Gateways are pre-R75.40.

You work as a security administrator for a large company. CSO of your company has attended a security conference where he has learnt how hackers constantly modify their strategies and techniques to evade detection and reach corporate resources. He wants to make sure that his company has the tight protections in place. Check Point has been selected for the security vendor.Which Check Point product protects BEST against malware and zero-day attacks while ensuring quick delivery of safe content to your users?

IPS, anti-virus and e-mail security

You have enabled ''Full Log'' as a tracking option to a security rule. However, you are still not seeing any data type information. What is the MOST likely reason?

Logging has disk space issues. Change logging storage options on the logging server or Security Management Server properties and install database.

Identity Awareness is not enabled.

Logs are arriving from Pre-R81 gateways.

What can we infer about the recent changes made to the Rule Base?

Rule 1 and object webserver are locked by another administrator

Rule 7 was created by the 'admin' administrator in the current session

8 changes have been made by administrators since the last policy installation

The rules 1, 5 and 6 cannot be edited by the 'admin' administrator

Rule 1 and object webserver are locked by another administrator

What needs to be configured if the NAT property 'Translate destination or client side' is not enabled in Global Properties?

Nothing, the Gateway takes care of all details necessary.

A host route to route to the destination IP.

Use the file local.arp to add the ARP entries for NAT to work.

Nothing, the Gateway takes care of all details necessary.

Enabling 'Allow bi-directional NAT' for NAT to work correctly.

At what point is the Internal Certificate Authority (ICA) created?

During the primary Security Management Server installation process.

Upon creation of a certificate.

During the primary Security Management Server installation process.

When an administrator decides to create one.

When an administrator initially logs into SmartConsole.

When Identity Awareness is enabled, which identity source(s) is(are) used for Application Control?

AD Query and Browser-based Authentication

True or False: In R81, more than one administrator can login to the Security Management Server with write permission at the same time.

True, every administrator works in a session that is independent of the other administrators.

False, this feature has to be enabled in the Global Properties.

True, every administrator works in a session that is independent of the other administrators.

True, every administrator works on a different database that is independent of the other administrators.

False, only one administrator can login with write permission.

There are two R77.30 Security Gateways in the Firewall Cluster. They are named FW_A and FW_B. The cluster is configured to work as HA (High availability) with default cluster configuration. FW_A is configured to have higher priority than FW_B. FW_A was active and processing the traffic in the morning. FW_B was standby. Around 1100 am, its interfaces went down and this caused a failover. FW_B became active. After an hour, FW_A's interface issues were resolved and it became operational.When it re-joins the cluster, will it become active automatically?

No, since 'maintain' current active cluster member' option on the cluster object properties is enabled by default.

No, since 'maintain' current active cluster member' option is enabled by default on the Global Properties.

Yes, since 'Switch to higher priority cluster member' option on the cluster object properties is enabled by default.

Yes, since 'Switch to higher priority cluster member' option is enabled by default on the Global Properties.

Fill in the blank: The IPS policy for pre-R81 gateways is installed during the _______ .

Threat Prevention policy install

Which software blade does NOT accompany the Threat Prevention policy?

Application Control and URL Filtering

Check Point ClusterXL Active/Active deployment is used when:

There is Load Sharing solution set up.

Only when there is Multicast solution set up.

There is Load Sharing solution set up.

Only when there is Unicast solution set up.

There is High Availability solution set up.

Checkpoint 156-315.81 Practice Test 9 - Free Online Exam Prep & Questions

Which of the following is an identity acquisition method that allows a Security Gateway to identify Active Directory users and computers?

Become a Premium Member for full access

Unlock Premium Member

Checkpoint 156-315.81 Practice Test 9

Question

Checkpoint 156-315.81 Practice Tests

Practice Tests