CheckPoint Checkpoint Certifications 156-215.80 Questions & Answers

• Question 41:

  Which option will match a connection regardless of its association with a VPN community?

  A. All Site-to-Site VPN Communities

  B. Accept all encrypted traffic

  C. All Connections (Clear or Encrypted)

  D. Specific VPN Communities

  Correct Answer: B

• Question 42:

  Which of the following is NOT a tracking log option in R80.x?

  A. Log

  B. Full Log

  C. Detailed Log

  D. Extended Log

  Correct Answer: C

• Question 43:

  Which information is included in the "Extended Log" tracking option, but is not included in the "Log" tracking option?

  A. file attributes

  B. application information

  C. destination port

  D. data type information

  Correct Answer: B

• Question 44:

  Where is the "Hit Count" feature enabled or disabled in SmartConsole?

  A. On the Policy Package

  B. On each Security Gateway

  C. On the Policy layer

  D. In Global Properties for the Security Management Server

  Correct Answer: B

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm? topic=documents/R80/CP_R80_SecMGMT/126197

• Question 45:

  Fill in the blank: An Endpoint identity agent uses a ___________ for user authentication.

  A. Shared secret

  B. Token

  C. Username/password or Kerberos Ticket

  D. Certificate

  Correct Answer: C

  Reference: https://sc1.checkpoint.com/documents/R76/ CP_R76_IdentityAwareness_AdminGuide/62050.htm

• Question 46:

  Which of following icon indicates that read/write access is enabled?

  A. Book

  B. Padlock

  C. Pencil

  D. Eyeglasses

  Correct Answer: C

• Question 47:

  Which SmartConsole tab shows logs and detects security threats, providing a centralized display of potential attack patterns from all network devices?

  A. Gateway and Servers

  B. Logs and Monitor

  C. Manage Seeting

  D. Security Policies

  Correct Answer: B

• Question 48:

  You have created a rule at the top of your Rule Base to permit Guest Wireless access to the Internet. However, when guest users attempt to reach the Internet, they are not seeing the splash page to accept your Terms of Service, and cannot access the Internet. How can you fix this?

  

  A. Right click Accept in the rule, select "More", and then check "Enable Identity Captive Portal"

  B. On the firewall object, Legacy Authentication screen, check "Enable Identity Captive Portal"

  C. In the Captive Portal screen of Global Properties, check "Enable Identity Captive Portal"

  D. On the Security Management Server object, check the box "Identity Logging"

  Correct Answer: A

• Question 49:

  To view the policy installation history for each gateway, which tool would an administrator use?

  A. Revisions

  B. Gateway installations

  C. Installation history

  D. Gateway history

  Correct Answer: C

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm? topic=documents/R80/CP_R80_SecMGMT/119225

• Question 50:

  What is the purpose of a Stealth Rule?

  A. A rule used to hide a server's IP address from the outside world.

  B. A rule that allows administrators to access SmartDashboard from any device.

  C. To drop any traffic destined for the firewall that is not otherwise explicitly allowed.

  D. A rule at the end of your policy to drop any traffic that is not explicitly allowed.

  Correct Answer: C

  Reference: http://www.pearsonitcertification.com/articles/article.aspx?p=387728andseqNum=3