CheckPoint Checkpoint Certifications 156-215.80 Questions & Answers

• Question 21:

  When a Security Gateway sends its logs to an IP address other than its own, which deployment option is installed?

  A. Distributed

  B. Standalone

  C. Bridge Mode

  D. Targeted

  Correct Answer: A

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Installation_and_Upgrade_GuidewebAdmin/86429.htm

• Question 22:

  Which of the following technologies extracts detailed information from packets and stores that information in state tables?

  A. INSPECT Engine

  B. Next-Generation Firewall

  C. Packet Filtering

  D. Application Layer Firewall

  Correct Answer: B

• Question 23:

  To enforce the Security Policy correctly, a Security Gateway requires:

  A. a routing table

  B. that each Security Gateway enforces at least one rule

  C. a Demilitarized Zone

  D. a Security Policy install

  Correct Answer: B

• Question 24:

  View the rule below. What does the pen-symbol in the left column mean?

  

  A. Those rules have been published in the current session.

  B. Rules have been edited by the logged in administrator, but the policy has not been published yet.

  C. Another user has currently locked the rules for editing.

  D. The configuration lock is present. Click the pen symbol in order to gain the lock.

  Correct Answer: B

• Question 25:

  What data MUST be supplied to the SmartConsole System Restore window to restore a backup?

  A. Server, Username, Password, Path, Version

  B. Username, Password, Path, Version

  C. Server, Protocol, Username, Password, Destination Path

  D. Server, Protocol, Username, Password, Path

  Correct Answer: D

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_SmartDashboard_OLH/ html_frameset.htm?topic=documents/R80/CP_R80_SmartDashboard_OLH/ ud_B7RJG2xrUQywsBK5buA2

• Question 26:

  Which SmartConsole tab is used to monitor network and security performance?

  A. Manage and Settings

  B. Security Policies

  C. Gateway and Servers

  D. Logs and Monitor

  Correct Answer: D

• Question 27:

  Which statement describes what Identity Sharing is in Identity Awareness?

  A. Management servers can acquire and share identities with Security Gateways

  B. Users can share identities with other users

  C. Security Gateways can acquire and share identities with other Security Gateways

  D. Administrators can share identities with other administrators

  Correct Answer: C

• Question 28:

  Which of the following is NOT a policy type available for each policy package?

  A. Threat Emulation

  B. Access Control

  C. Desktop Security

  D. Threat Prevention

  Correct Answer: A

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm? topic=documents/R80/CP_R80_SecMGMT/119225

• Question 29:

  An administrator is creating an IPsec site-to-site VPN between his corporate office and branch office. Both offices are protected by Check Point Security Gateway managed by the same Security Management Server (SMS). While configuring the VPN community to specify the pre-shared secret, the administrator did not find a box to input the pre-shared secret. Why does it not allow him to specify the pre-shared secret?

  A. The Gateway is an SMB device

  B. The checkbox "Use only Shared Secret for all external members" is not checked

  C. Certificate based Authentication is the only authentication method available between two Security Gateway managed by the same SMS

  D. Pre-shared secret is already configured in Global Properties

  Correct Answer: C

• Question 30:

  Examine the sample Rule Base.

  

  What will be the result of a verification of the policy from SmartConsole?

  A. No errors or Warnings

  B. Verification Error. Empty Source-List in Rule 5 (Mail Inbound)

  C. Verification Error. Rule 4 (Web Inbound) hides Rule 6 (Webmaster access)

  D. Verification Error. Rule 7 (Clean-Up Rule) hides Implicit Clean-up Rule

  Correct Answer: C