CheckPoint CCSA R80 156-215.80 Questions & Answers

• Question 1:

  The default method for destination NAT is _____________, where NAT occurs on the inbound interface closest to the client.

  A. Destination side

  B. Source side

  C. Server side

  D. Client side

  Correct Answer: D

  As of VPN-1 NGX, the default method for Destination NAT is "client side", where NAT occurs on the inbound interface closest to the client.

• Question 2:

  Which of the following is NOT a type of Endpoint Identity Agent?

  A. Terminal

  B. Light

  C. Full

  D. Custom

  Correct Answer: A

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal? eventSubmit_doGoviewsolutiondetails=andsolutionid=sk107415

• Question 3:

  A Check Point Software license consists of two components, the Software Blade and the Software Container. There are ______________ types of Software Containers: ______________.

  A. Three; Security Management, Security Gateway, and Endpoint Security

  B. Three; Security Gateway, Endpoint Security, and Gateway Management

  C. Two; Security Management and Endpoint Security

  D. Two; Endpoint Security and Security Gateway

  Correct Answer: A

  Reference: https://dl3.checkpoint.com/paid/a8/a81bd8771f3d7bf40a269f64f5b536e7/ QuickLicenseGuide.pdf?HashKey=1591197932_63e138c47656005c0a28456090361659andxtn=.pdf page 11

• Question 4:

  One of major features in R80.x SmartConsole is concurrent administration. Which of the following is NOT possible considering that AdminA, AdminB, and AdminC are editing the same Security Policy?

  A. AdminC sees a lock icon which indicates that the rule is locked for editing by another administrator.

  B. AdminA and AdminB are editing the same rule at the same time.

  C. AdminB sees a pencil icon next the rule that AdminB is currently editing.

  D. AdminA, AdminB and AdminC are editing three different rules at the same time.

  Correct Answer: A

  In SmartConsole, administrators work with sessions. A session is created each time an administrator logs into SmartConsole. Changes made in the session are saved automatically. These changes are private and available only to the administrator. To avoid configuration conflicts, other administrators see a lock icon on objects and rules that are being edited in other sessions.

  Reference: http://downloads.checkpoint.com/dc/download.htm?ID=65846

• Question 5:

  Which backup utility captures the most information and tends to create the largest archives?

  A. backup

  B. snapshot

  C. Database Revision

  D. migrate export

  Correct Answer: B

  Reference: https://solvingcenter.wordpress.com/2016/07/07/checkpoint-backup-and-snapshot/

• Question 6:

  Where can I find the file for a Gaia backup named backup_fw on a Check Point Appliance?

  A. /var/log/CPbackup/backups/backup_fw.tgz

  B. /var/CPbackup/backups/backup_fw.tgz

  C. /var/log/backups/backup_fw.tgz

  D. $CPDIR/backups/backup_fw.tgz

  Correct Answer: A

• Question 7:

  Which of the following is NOT a valid backup command for a Security Management Server?

  A. save backup

  B. add backup

  C. add snapshot

  D. migrate export

  Correct Answer: A

  Reference: https://www.networksecurityplus.net/2015/02/check-point-backup-and-restore-commandreference.html

• Question 8:

  When configuring Anti-Spoofing, which tracking options can an Administrator select?

  A. Log, Send SNMP Trap, Email

  B. Drop Packet, Alert, None

  C. Log, Alert, None

  D. Log, Allow Packets, Email

  Correct Answer: C

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80BC_Firewall/html_frameset.htm? topic=documents/R80/CP_R80BC_Firewall/136417

• Question 9:

  Which of the following cannot be configured in an Access Role Object?

  A. Users

  B. Networks

  C. Time

  D. Machines

  Correct Answer: C

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Firewall_WebAdmin/92705.htm

• Question 10:

  Which software blade does NOT accompany the Threat Prevention policy?

  A. Anti-virus

  B. IPS

  C. Threat Emulation

  D. Application Control and URL Filtering

  Correct Answer: D

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Firewall_WebAdmin/92707.htm