CheckPoint Checkpoint Certifications 156-215.80 Questions & Answers

• Question 51:

  Fill in the blank: The R80 SmartConsole, SmartEvent GUI client, and _______ consolidate billions of logs and shows them as prioritized security events.

  A. SmartMonitor

  B. SmartView Web Application

  C. SmartReporter

  D. SmartTracker

  Correct Answer: B

  Event Analysis with SmartEvent The SmartEvent Software Blade is a unified security event management and analysis solution that delivers real-time, graphical threat management information. SmartConsole, SmartView Web Application, and the SmartEvent GUI client consolidate billions of logs and show them as prioritized security events so you can immediately respond to security incidents, and do the necessary actions to prevent more attacks. You can customize the views to monitor the events that are most important to you. You can move from a high level view to detailed forensic analysis in a few clicks. With the free-text search and suggestions, you can quickly run data analysis and identify critical security events. Reference: https://sc1.checkpoint.com/ documents/R80/CP_R80_LoggingAndMonitoring/html_frameset.htm?topic=documents/R80/ CP_R80_LoggingAndMonitoring/131915

• Question 52:

  Which Check Point software blade provides visibility of users, groups and machines while also providing access control through identity-based policies?

  A. Firewall

  B. Identity Awareness

  C. Application Control

  D. URL Filtering

  Correct Answer: B

  Check Point Identity Awareness Software Blade provides granular visibility of users, groups and machines,

  providing unmatched application and access control through the creation of accurate, identity-based

  policies. Centralized management and monitoring allows for policies to be managed from a single, unified

  console.

  Reference: https://www.checkpoint.com/products/identity-awareness-software-blade/

• Question 53:

  Fill in the blank: The IPS policy for pre-R80 gateways is installed during the _______ .

  A. Firewall policy install

  B. Threat Prevention policy install

  C. Anti-bot policy install

  D. Access Control policy install

  Correct Answer: B

  https://sc1.checkpoint.com/documents/R80/CP_R80BC_ThreatPrevention/html_frameset.htm? topic=documents/R80/CP_R80BC_ThreatPrevention/136486

• Question 54:

  Fill in the blank: RADIUS Accounting gets ______ data from requests generated by the accounting client A. Destination

  B. Identity

  C. Payload

  D. Location

  Correct Answer: B

  How RADIUS Accounting Works with Identity Awareness RADIUS Accounting gets identity data from RADIUS Accounting Requests generated by the RADIUS accounting client. Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_IdentityAwareness_WebAdminGuide/ html_frameset.htm?topic=documents/R77/CP_R77_IdentityAwareness_WebAdminGuide/62050

• Question 55:

  AdminA and AdminB are both logged in on SmartConsole. What does it mean if AdminB sees a locked icon on a rule? Choose the BEST answer.

  A. Rule is locked by AdminA, because the save bottom has not been press.

  B. Rule is locked by AdminA, because an object on that rule is been edited.

  C. Rule is locked by AdminA, and will make it available if session is published.

  D. Rule is locked by AdminA, and if the session is saved, rule will be available

  Correct Answer: C

• Question 56:

  Which of the following is TRUE about the Check Point Host object?

  A. Check Point Host has no routing ability even if it has more than one interface installed.

  B. When you upgrade to R80 from R77.30 or earlier versions, Check Point Host objects are converted to gateway objects.

  C. Check Point Host is capable of having an IP forwarding mechanism.

  D. Check Point Host can act as a firewall.

  Correct Answer: A

  A Check Point host is a host with only one interface, on which Check Point software has been installed, and which is managed by the Security Management server. It is not a routing mechanism and is not capable of IP forwarding. Reference: https://sc1.checkpoint.com/documents/R76/ CP_R76_SecMan_WebAdmin/html_frameset.htm?topic=documents/R76/ CP_R76_SecMan_WebAdmin/13139

• Question 57:

  Which of the following is NOT a set of Regulatory Requirements related to Information Security?

  A. ISO 37001

  B. Sarbanes Oxley (SOX)

  C. HIPPA

  D. PCI

  Correct Answer: A

  ISO 37001 - Anti-bribery management systems Reference: http://www.iso.org/iso/home/standards/management-standards/iso37001.htm

• Question 58:

  Which command is used to obtain the configuration lock in Gaia?

  A. Lock database override

  B. Unlock database override

  C. Unlock database lock

  D. Lock database user

  Correct Answer: A

  Obtaining a Configuration Lock

  1.

  lock database override

  2.

  unlock database

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Gaia_WebAdmin/75697.htm#o73091

• Question 59:

  Joey is using the computer with IP address 192.168.20.13. He wants to access web page "www.CheckPoint.com", which is hosted on Web server with IP address 203.0.113.111. How many rules on Check Point Firewall are required for this connection?

  A. Two rules ?first one for the HTTP traffic and second one for DNS traffic.

  B. Only one rule, because Check Point firewall is a Packet Filtering firewall

  C. Two rules ?one for outgoing request and second one for incoming replay.

  D. Only one rule, because Check Point firewall is using Stateful Inspection technology.

  Correct Answer: D

• Question 60:

  Fill in the blank: Licenses can be added to the License and Contract repository ________ .

  A. From the User Center, from a file, or manually

  B. From a file, manually, or from SmartView Monitor

  C. Manually, from SmartView Monitor, or from the User Center

  D. From SmartView Monitor, from the User Center, or from a file

  Correct Answer: A

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Installation_and_Upgrade_GuidewebAdmin/13128.htm