CheckPoint Checkpoint Certifications 156-215.80 Questions & Answers

• Question 31:

  You are the Check Point administrator for Alpha Corp. You received a call that one of the users is unable

  to browse the Internet on their new tablet which is connected to the company wireless, which goes through

  a Check Point Gateway.

  How would you review the logs to see what is blocking this traffic?

  A. Open SmartLog and connect remotely to the wireless controller

  B. Open SmartEvent to see why they are being blocked

  C. Open SmartDashboard and review the logs tab

  D. Open SmartLog and filter for the IP address of the tablet

  Correct Answer: D

• Question 32:

  What is a role of Publishing?

  A. The Publish operation sends the modifications made via SmartConsole in the private session and makes them public

  B. The Security Management Server installs the updated policy and the entire database on Security Gateways

  C. The Security Management Server installs the updated session and the entire Rule Base on Security Gateways

  D. Modifies network objects, such as servers, users, services, or IPS profiles, but not the Rule Base

  Correct Answer: A

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm? topic=documents/R80/CP_R80_SecMGMT/119225

• Question 33:

  Which software blade enables Access Control policies to accept, drop, or limit web site access based on user, group, and/or machine?

  A. Application Control

  B. Data Awareness

  C. Identity Awareness

  D. Threat Emulation

  Correct Answer: A

• Question 34:

  Fill in the blank: ____________ is the Gaia command that turns the server off.

  A. sysdown

  B. exit

  C. halt

  D. shut-down

  Correct Answer: C

• Question 35:

  Which option in a firewall rule would only match and allow traffic to VPN gateways for one Community in common?

  A. All Connections (Clear or Encrypted)

  B. Accept all encrypted traffic

  C. Specific VPN Communities

  D. All Site-to-Site VPN Communities

  Correct Answer: C

• Question 36:

  Which tool is used to enable cluster membership on a Gateway?

  A. SmartUpdate

  B. cpconfig

  C. SmartConsole

  D. sysconfig

  Correct Answer: B

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_ClusterXL_WebAdminGuide/ html_frameset.htm?topic=documents/R77/CP_R77_ClusterXL_WebAdminGuide/161105

• Question 37:

  Which key is created during Phase 2 of a site-to-site VPN?

  A. Pre-shared secret

  B. Diffie-Hellman Public Key

  C. Symmetrical IPSec key

  D. Diffie-Hellman Private Key

  Correct Answer: C

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_VPN_AdminGuide/13847.htm

• Question 38:

  Fill in the blank: Each cluster, at a minimum, should have at least ___________ interfaces.

  A. Five

  B. Two

  C. Three

  D. Four

  Correct Answer: C

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_ClusterXL_AdminGuide/7292.htm

• Question 39:

  Identity Awareness allows the Security Administrator to configure network access based on which of the following?

  A. Name of the application, identity of the user, and identity of the machine

  B. Identity of the machine, username, and certificate

  C. Network location, identity of a user, and identity of a machine

  D. Browser-Based Authentication, identity of a user, and network location

  Correct Answer: C

  Reference: http://ccsawannabe.blogspot.com/2016/04/check-point-identity-awareness.html

• Question 40:

  Which of the following is NOT a valid deployment option for R80?

  A. All-in-one (stand-alone)

  B. Log server

  C. SmartEvent

  D. Multi-domain management server

  Correct Answer: D