What capabilities does the Harmony Endpoint NGAV include?

Anti-Ransomware, Anti-Exploit & Behavioral Guard

Anti-IPS, Anti-Firewall & Anti-Guard

Zero-Phishing, Anti-Bot& Anti-Virus

Threat Extraction, Threat-Emulation & Zero-Phishing

Which User Roles are on the Endpoint Security Management Server for On-Premises servers?

Super Admin, Primary Administrator, User Admin, Read-Only

Primary Administrator and Read-Only

Super Admin, Primary Administrator, User Admin, Read-Only

Super Admin, Read-Write All, Read-Only

External Endpoint policy servers (EPS) decrease X and reduce X between sites?

External Endpoint policy servers (EPS) decrease the load of the EMS and reduce the bandwidth required between sites

Decrease policies and reduce traffic between sites

Decrease power and reduce accidents between sites

Decrease clients and reduce device agents between sites

External Endpoint policy servers (EPS) decrease the load of the EMS and reduce the bandwidth required between sites

What does Unauthenticated mode mean?

Computers and users might present a security risk, but still have access.

Computers and users are trusted based on their IP address and username.

Computers and users have credentials, but they are not verified through AD.

Computers and users are trusted based on the passwords and usernames only.

If there are multiple EPS in an environment, what happens?

Each Endpoint client does an analysis to find which EPS is 'closest' and automatically communicates with that server.

One Endpoint client automatically communicates with the server

Each Endpoint client automatically communicates with the EMS

Each Endpoint client does an analysis to find which EPS is 'closest' and automatically communicates with that server.

Each Endpoint client automatically communicates with the SMS

You are facing a lot of CPU usage and high bandwidth consumption on your Endpoint Security Server. You check and verify that everything is working as it should be, but the performance is still very slow. What can you do to decrease your bandwidth and CPU usage?

You can use some of your Endpoints as Super Nodes since super nodes reduces bandwidth as well as CPU usage.

The managements High Availability sizing is not correct. You have to purchase more servers and add them to the cluster.

Your company's size is not large enough to have a valid need for Endpoint Solution.

Your company needs more bandwidth. You have to increase your bandwidth by 300%

You can use some of your Endpoints as Super Nodes since super nodes reduces bandwidth as well as CPU usage.

What does Port Protection protect, and why?

Activity on the ports of a client computer to help prevent data leakage

Activity on the ports of a client computer to review logs

Activity on the ports of a client computer to help unauthorized user access

Activity on the ports of a client computer to monitor devices

Media Encryption and Port Protection (MEPP) provide strong encryption for removable media, such as?

USB drives, CD/DVDs, and SD cards, and for external ports

Where are the Endpoint policy servers located?

Between the Endpoint clients and the EMS

Between the Endpoint clients and the EPS

Between the Endpoint clients and the EMS

Between the Endpoint clients and the NMS

Between the Endpoint clients and the SMS

External Policy Servers are placed between the Endpoint clients and the Endpoint Security Management Server. How many Policy Servers are supported per environment?

From 1 to 25 Policy Servers are supported

From 1 to 15 Policy Servers are supported

From 1 to 20 Policy Servers are supported

From 1 to 5 Policy Servers are supported

When in the Strong Authentication workflow is the database installed on the secondary server?

After synchronization and before Endpoint security has been enabled

After Endpoint security is enabled

Before Endpoint security is enabled

Exactly when Endpoint security is enabled

After synchronization and before Endpoint security has been enabled

What does the Kerberos key tab file contain?

Pairs of Kerberos principals and encryption keys

Pairs of authentication settings and un-authentication settings

Pairs of encryption and decryption keys

Pairs of Kerberos principals and encryption keys

External Policy Servers are placed between the Endpoint clients and the Endpoint Security Management Server. What benefit does the External Endpoint Policy Server bring?

Heartbeat and synchronization requests

Polling beat and delta requests

The CISO office evaluates Check Point Harmony Endpoint and needs to know what kind of post-infection capabilities exist. Which Post-infection Capabilities does the Harmony Office Suite include?

Automated Attack Analysis (Forensics), Remediation and Response and Quarantine

IPS Attack Analysis (Forensics), Deploy and Destroy and Isolation

Automated Attack Analysis (Forensics), Remediation and Response and Quarantine

FW Attack Analysis (Forensics), Detect and Prevent and Isolation

IPS Attack Analysis (Forensics), Detect and Prevent and Isolation

As an Endpoint Administrator you are facing with some errors related to AD Strong Authentication in Endpoint Management server. Where is the right place to look when you are troubleshooting these issues?

$UEPMDIR/logs/Authentication.log

$UEMPDlR/log/Authentication.elg

Before installing the Endpoint Security Management Server, it is necessary to consider this...

MS SQL Server must be available with full admin access

A Network Security Management Server must be installed

A Network Security Management Server must NOT be installed on the same machine

An Endpoint Security Gateway must be installed

MS SQL Server must be available with full admin access

How many security levels can you set when enabling Remote help on pre-boot?

Three levels - Low security, Medium security. High security

Four levels - Low security, Medium security, High security, Very High security

Two levels - Low and High security

Three levels - Low security, Medium security. High security

One and only level - enable or disable security

Which permissions apply the same access level to the entire organization?

Organization-wide permission settings

Regional user permission settings

Universal user permission settings

Global user permission settings

Endpoint Security Clients are applications installed on company-owned desktop and laptop computers which include the following

Endpoint security software Capabilities and a device agent which operates as a container for the Capabilities and communicates with the Endpoint Management Server

GUI client that connects to the Endpoint Security Management Server to manage the policy an other configuration for Endpoints

Endpoint Security software Capabilities and a GUI client to manage policies for all capabilities

GUI client that connects to the local Endpoint Capability Software to manage the policy and all other configuration for that Endpoint only

When can administrators prepare the client for the FDE software package installation and deployment?

Once a client machine meets the minimum system requirements

Once a client meets the maximum system requirements

Once the client system volumes have 32 MB of space

Once a client machine meets the minimum system requirements

Before installing FDE on a client machine, what should administrators make sure of?

That system volumes include at least 32 MB of continuous space

That system volumes include at least 50 MB of continuous space

That system volumes include at least 36 MB of continuous space

That system volumes include at least 25 MB of continuous space

default, an FDE Action does what?

Encrypts all visible disk volumes

Decrypts all visible disk volumes

Encrypts all visible disk volumes

Re-defines all visible disk volumes

What happens to clients that fail to meet the requirements?

They do not receive FDE protections

They have unenforced protections

They do not receive FDE protections

They receive incomplete protections

What does pre-boot protection prevent?

Prevents unauthorized access to the operating system or bypass of boot protection

Unauthorized access to the Remote Help bypass tools or alternative boot technical support methods

Unauthorized passwords or alternative 'forgot passwords' methods during pre-boot

Unauthorized users using post-boot methods

Prevents unauthorized access to the operating system or bypass of boot protection

In the POLICY Tab of the Harmony Endpoint portal for each software Capability (Threat Prevention, Data Protection etc.) rules can be created to protect endpoint machines. Choose the true statement.

The default rule is a global rule which applies to all users and computers in the organization.

The default rule is a global rule that only applies to Computers. Rules for Users must be added manually by the administrator.

There are no rules to start with and administrators must create rules in order to deploy the capability policies, actions and behavior.

There are only rules for the Harmony Endpoint Firewall Capability. All other Capabilities only include Actions.

The default rule is a global rule which applies to all users and computers in the organization.

What does Endpoint's Media Encryption (ME) Software Capability requiring authorization accomplish?

Protects sensitive data and encrypts storage media

Controls ports and encrypts storage media

Controls ports and manages ports

Decrypts and blocks access to specific ports

When using User Logon Pre-boot Remote Help, the following assistance is provided?

One-Time Logon and Remote Password Change

Checkpoint 156-536 Practice Test 2 - Free Online Exam Prep & Questions

What does pre-boot protection require of users?

To authenticate before the computer will start

To answer a security question after login

To authenticate before the computer's OS starts

To regularly change passwords

Comment (0)

Checkpoint 156-536 Practice Test 2

Question

Checkpoint 156-536 Practice Tests

Practice Tests