CheckPoint Checkpoint Certifications 156-215.80 Questions & Answers

• Question 481:

  Which GUI tool can be used to view and apply Check Point licenses?

  A. cpconfig

  B. Management Command Line

  C. SmartConsole

  D. SmartUpdate

  Correct Answer: D

  SmartUpdate GUI is the recommended way of managing licenses.

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_Gaia_AdminWebAdminGuide/

  html_frameset.htm?topic=documents/R77/CP_R77_Gaia_AdminWebAdminGuide/79993

• Question 482:

  How would you determine the software version from the CLI?

  A. fw ver

  B. fw stat

  C. fw monitor

  D. cpinfo

  Correct Answer: A

• Question 483:

  In R80 Management, apart from using SmartConsole, objects or rules can also be modified using:

  A. 3rd Party integration of CLI and API for Gateways prior to R80.

  B. A complete CLI and API interface using SSH and custom CPCode integration.

  C. 3rd Party integration of CLI and API for Management prior to R80.

  D. A complete CLI and API interface for Management with 3rd Party integration.

  Correct Answer: B

• Question 484:

  When connected to the Check Point R80 Management Server using the SmartConsole the first administrator to connect has a lock on:

  A. Only the objects being modified in the Management Database and other administrators can connect to make changes using a special session as long as they all connect from the same LAN network.

  B. The entire Management Database and other administrators can connect to make changes only if the first administrator switches to Read-only.

  C. The entire Management Database and all sessions and other administrators can connect only as Read-only.

  D. Only the objects being modified in his session of the Management Database and other administrators can connect to make changes using different sessions.

  Correct Answer: D

• Question 485:

  Which of the following commands is used to verify license installation?

  A. Cplic verify license

  B. Cplic print

  C. Cplic show

  D. Cplic license

  Correct Answer: B

• Question 486:

  To enforce the Security Policy correctly, a Security Gateway requires: A. a routing table

  B. awareness of the network topology

  C. a Demilitarized Zone

  D. a Security Policy install

  Correct Answer: B

  The network topology represents the internal network (both the LAN and the DMZ) protected by the

  gateway. The gateway must be aware of the layout of the network topology to:

  Correctly enforce the Security Policy.

  Ensure the validity of IP addresses for inbound and outbound traffic.

  Configure a special domain for Virtual Private Networks.

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_SecMan_WebAdmin/html_frameset.htm?

  topic=documents/R76/CP_R76_SecMan_WebAdmin/118037

• Question 487:

  Which configuration element determines which traffic should be encrypted into a VPN tunnel vs. sent in the clear?

  A. The firewall topologies

  B. NAT Rules

  C. The Rule Base

  D. The VPN Domains

  Correct Answer: C

• Question 488:

  Which of the following is an authentication method used for Identity Awareness?

  A. SSL

  B. Captive Portal

  C. PKI

  D. RSA

  Correct Answer: B

• Question 489:

  The SIC Status "Unknown" means

  A. There is connection between the gateway and Security Management Server but it is not trusted.

  B. The secure communication is established.

  C. There is no connection between the gateway and Security Management Server.

  D. The Security Management Server can contact the gateway, but cannot establish SIC.

  Correct Answer: C

  SIC Status

  After the gateway receives the certificate issued by the ICA, the SIC status shows if the Security

  Management Server can communicate securely with this gateway:

  Communicating - The secure communication is established.

  Unknown - There is no connection between the gateway and Security Management Server.

  Not Communicating - The Security Management Server can contact the gateway, but cannot establish

  SIC. A message shows more information. Reference: https://sc1.checkpoint.com/documents/R80/

  CP_R80_SecMGMT/html_frameset.htm?topic=documents/R80/CP_R80_SecMGMT/125443

• Question 490:

  What is a reason for manual creation of a NAT rule?

  A. In R80 all Network Address Translation is done automatically and there is no need for manually defined NAT-rules.

  B. Network Address Translation of RFC1918-compliant networks is needed to access the Internet.

  C. Network Address Translation is desired for some services, but not for others.

  D. The public IP-address is different from the gateway's external IP

  Correct Answer: D