CheckPoint Checkpoint Certifications 156-215.80 Questions & Answers

• Question 101:

  Where can administrator edit a list of trusted SmartConsole clients in R80?

  A. cpconfig on a Security Management Server, in the WebUI logged into a Security Management Server.

  B. Only using SmartConsole: Manage and Settings > Permissions and Administrators > Advanced > Trusted Clients.

  C. In cpconfig on a Security Management Server, in the WebUI logged into a Security Management Server, in SmartConsole: Manage and Settings>Permissions and Administrators>Advanced>Trusted Clients.

  D. WebUI client logged to Security Management Server, SmartDashboard: Manage and Settings>Permissions and Administrators>Advanced>Trusted Clients, via cpconfig on a Security Gateway.

  Correct Answer: C

• Question 102:

  Fill in the blanks: In the Network policy layer, the default action for the Implied last rule is ________ all traffic. However, in the Application Control policy layer, the default action is ________ all traffic.

  A. Accept; redirect

  B. Accept; drop

  C. Redirect; drop

  D. Drop; accept

  Correct Answer: D

• Question 103:

  Vanessa is a Firewall administrator. She wants to test a backup of her company's production Firewall cluster Dallas_GW. She has a lab environment that is identical to her production environment. She decided to restore production backup via SmartConsole in lab environment. Which details she need to fill in System Restore window before she can click OK button and test the backup?

  A. Server, SCP, Username, Password, Path, Comment, Member

  B. Server, TFTP, Username, Password, Path, Comment, All Members

  C. Server, Protocol, Username, Password, Path, Comment, All Members

  D. Server, Protocol, Username, Password, Path, Comment, Member

  Correct Answer: C

• Question 104:

  What is the default shell of Gaia CLI?

  A. Monitor

  B. CLI.sh

  C. Read-only

  D. Bash

  Correct Answer: B

  This chapter gives an introduction to the Gaia command line interface (CLI).

  The default shell of the CLI is called clish.

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Gaia_WebAdmin/75697.htm

• Question 105:

  Which of the following licenses are considered temporary?

  A. Perpetual and Trial

  B. Plug-and-play and Evaluation

  C. Subscription and Perpetual

  D. Evaluation and Subscription

  Correct Answer: B

  Should be Trial or Evaluation, even Plug-and-play (all are synonyms ). Answer B is the best choice.

• Question 106:

  What is the default method for destination NAT?

  A. Destination side

  B. Source side

  C. Server side

  D. Client side

  Correct Answer: D

  Client Side NAT - destination is NAT`d by the inbound kernel

• Question 107:

  Choose what BEST describes a Session.

  A. Starts when an Administrator publishes all the changes made on SmartConsole.

  B. Starts when an Administrator logs in to the Security Management Server through SmartConsole and ends when it is published.

  C. Sessions ends when policy is pushed to the Security Gateway.

  D. Sessions locks the policy package for editing.

  Correct Answer: B

  Administrator Collaboration More than one administrator can connect to the Security Management Server at the same time. Every administrator has their own username, and works in a session that is independent of the other administrators. When an administrator logs in to the Security Management Server through SmartConsole, a new editing session starts. The changes that the administrator makes during the session are only available to that administrator. Other administrators see a lock icon on object and rules that are being edited. To make changes available to all administrators, and to unlock the objects and rules that are being edited, the administrator must publish the session. Reference: https://sc1.checkpoint.com/documents/R80/ CP_R80_SecMGMT/html_frameset.htm?topic=documents/R80/CP_R80_SecMGMT/117948

• Question 108:

  Which of the following is NOT a VPN routing option available in a star community?

  A. To satellites through center only

  B. To center, or through the center to other satellites, to Internet and other VPN targets

  C. To center and to other satellites through center

  D. To center only

  Correct Answer: AD

  SmartConsole For simple hubs and spokes (or if there is only one Hub), the easiest way is to configure a VPN star community in R80 SmartConsole:

  1. On the Star Community window, in the:

  a.

  Center Gateways section, select the Security Gateway that functions as the "Hub".

  b.

  Satellite Gateways section, select Security Gateways as the "spokes", or satellites.

  2. On the VPN Routing page, Enable VPN routing for satellites section, select one of these options:

  a.

  To center and to other Satellites through center - This allows connectivity between the Security

  Gateways, for example if the spoke Security Gateways are DAIP Security Gateways, and the Hub is a

  Security Gateway with a static IP address.

  b.

  To center, or through the center to other satellites, to internet and other VPN targets - This allows

  connectivity between the Security Gateways as well as the ability to inspect all communication passing

  through the Hub to the Internet.

  3.

  Create an appropriate Access Control Policy rule.

  4.

  NAT the satellite Security Gateways on the Hub if the Hub is used to route connections from Satellites to

  the Internet.

  The two Dynamic Objects (DAIP Security Gateways) can securely route communication through the

  Security Gateway with the static IP address.

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80BC_VPN/html_frameset.htm

• Question 109:

  Which of the following is NOT a back up method?

  A. Save backup

  B. System backup

  C. snapshot

  D. Migrate

  Correct Answer: A

  The built-in Gaia backup procedures:

  Snapshot Management

  System Backup (and System Restore)

  Save/Show Configuration (and Load Configuration)

  Check Point provides three different procedures for backing up (and restoring) the operating system and

  networking parameters on your appliances.

  Snapshot (Revert)

  Backup (Restore) upgrade_export (Migrate)

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal? eventSubmit_doGoviewsolutiondetails=andsolutionid=sk108902 https://supportcenter.checkpoint.com/ supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk54100

• Question 110:

  Which of the following is NOT an advantage to using multiple LDAP servers?

  A. You achieve a faster access time by placing LDAP servers containing the database at remote sites

  B. Information on a user is hidden, yet distributed across several servers

  C. You achieve compartmentalization by allowing a large number of users to be distributed across several servers

  D. You gain High Availability by replicating the same information on several servers

  Correct Answer: B