CheckPoint Checkpoint Certifications 156-215.80 Questions & Answers

• Question 11:

  In ____________ NAT, the ____________ is translated.

  A. Hide; source

  B. Static; source

  C. Simple; source

  D. Hide; destination

  Correct Answer: A

• Question 12:

  An administrator wishes to enable Identity Awareness on the Check Point firewalls. However they allow users to use company issued or personal laptops. Since the administrator cannot manage the personal laptops, which of the following methods would BEST suit this company?

  A. AD Query

  B. Browser-Based Authentication

  C. Identity Agents

  D. Terminal Servers Agent

  Correct Answer: B

  Reference: https://sc1.checkpoint.com/documents/R76/ CP_R76_IdentityAwareness_AdminGuide/62007.htm

• Question 13:

  Which of the following situations would not require a new license to be generated and installed?

  A. The Security Gateway is upgraded.

  B. The existing license expires.

  C. The license is upgraded.

  D. The IP address of the Security Management or Security Gateway has changed.

  Correct Answer: A

• Question 14:

  When should you generate new licenses?

  A. Before installing contract files.

  B. After a device upgrade.

  C. When the existing license expires, license is upgraded or the IP-address associated with the license changes.

  D. Only when the license is upgraded.

  Correct Answer: B

• Question 15:

  Which of the following is NOT a valid deployment option for R80?

  A. All-in-one (stand-alone)

  B. CloudGuard

  C. Distributed

  D. Bridge Mode

  Correct Answer: B

• Question 16:

  When Identity Awareness is enabled, which identity source(s) is(are) used for Application Control?

  A. RADIUS

  B. Remote Access and RADIUS

  C. All of the above

  D. AD Query and Browser-based Authentication

  Correct Answer: D

  Identity Awareness gets identities from these acquisition sources:

  1.

  AD Query

  2.

  Browser-Based Authentication

  3.

  Endpoint Identity Agent

  4.

  Terminal Servers Identity Agent

  5.

  Remote Access Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_IdentityAwareness_AdminGuide/62007.htm

• Question 17:

  Which repositories are installed on the Security Management Server by SmartUpdate?

  A. License and Update

  B. Package Repository and Licenses

  C. Update and License and Contract

  D. License and Contract and Package Repository

  Correct Answer: D

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Installation_and_Upgrade_GuidewebAdmin/13128.htm

• Question 18:

  Which back up method uses the command line to create an image of the OS?

  A. System backup

  B. Save Configuration

  C. Migrate

  D. snapshot

  Correct Answer: D

• Question 19:

  To quickly review when Threat Prevention signatures were last updated, which Threat Tool would an administrator use?

  A. Protections

  B. IPS Protections

  C. Profiles

  D. ThreatWiki

  Correct Answer: B

• Question 20:

  Which of the following is considered to be the more secure and preferred VPN authentication method?

  A. Password

  B. Certificate

  C. MD5

  D. Pre-shared secret

  Correct Answer: B

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_VPN_AdminGuide/13894.htm