CheckPoint Checkpoint Certifications 156-215.80 Questions & Answers

• Question 61:

  Fill in the blank: A(n) _____ rule is created by an administrator and is located before the first and before last rules in the Rule Base.

  A. Firewall drop

  B. Explicit

  C. Implicit accept

  D. Implicit drop

  E. Implied

  Correct Answer: E

  This is the order that rules are enforced:

  1.

  First Implied Rule: You cannot edit or delete this rule and no explicit rules can be placed before it.

  2.

  Explicit Rules: These are rules that you create.

  3.

  Before Last Implied Rules: These implied rules are applied before the last explicit rule.

  4.

  Last Explicit Rule: We recommend that you use the Cleanup rule as the last explicit rule.

  5.

  Last Implied Rules: Implied rules that are configured as Last in Global Properties.

  6.

  Implied Drop Rule: Drops all packets without logging.

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Firewall_WebAdmin/92703.htm

• Question 62:

  Fill in the blanks: A High Availability deployment is referred to as a ______ cluster and a Load Sharing deployment is referred to as a ________ cluster.

  A. Standby/standby; active/active

  B. Active/active; standby/standby

  C. Active/active; active/standby;

  D. Active/standby; active/active

  Correct Answer: D

  In a High Availability cluster, only one member is active (Active/Standby operation).

  ClusterXL Load Sharing distributes traffic within a cluster so that the total throughput of multiple members

  is increased. In Load Sharing configurations, all functioning members in the cluster are active, and handle

  network traffic (Active/Active operation).

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_ClusterXL_WebAdminGuide/7292.htm

• Question 63:

  Fill in the blank: The ________ feature allows administrators to share a policy with other policy packages.

  A. Shared policy packages

  B. Shared policies

  C. Concurrent policy packages

  D. Concurrent policies

  Correct Answer: A

• Question 64:

  You want to define a selected administrator's permission to edit a layer. However, when you click the + sign in the "Select additional profile that will be able edit this layer" you do not see anything. What is the most likely cause of this problem? Select the BEST answer.

  

  A. "Edit layers by Software Blades" is unselected in the Permission Profile

  B. There are no permission profiles available and you need to create one first.

  C. All permission profiles are in use.

  D. "Edit layers by selected profiles in a layer editor" is unselected in the Permission profile.

  Correct Answer: B

• Question 65:

  Which of the following is NOT an alert option?

  A. SNMP

  B. High alert

  C. Mail

  D. User defined alert

  Correct Answer: B

  In Action, select:

  1.

  none - No alert.

  2.

  log - Sends a log entry to the database.

  3.

  alert - Opens a pop-up window to your desktop.

  4.

  mail - Sends a mail alert to your Inbox.

  5.

  snmptrap - Sends an SNMP alert.

  6.

  useralert - Runs a script. Make sure a user-defined action is available. Go to SmartDashboard > Global Properties > Log and Alert > Alert Commands.

  Reference: https://sc1.checkpoint.com/documents/R77/ CP_R77_SmartViewMonitor_AdminGuide/101104.htm

• Question 66:

  The IT Management team is interested in the new features of the Check Point R80 Management and wants to upgrade but they are concerned that the existing R77.30 Gaia Gateways cannot be managed by R80 because it is so different. As the administrator responsible for the Firewalls, how can you answer or confirm these concerns?

  A. R80 Management contains compatibility packages for managing earlier versions of Check Point Gateways prior to R80. Consult the R80 Release Notes for more information.

  B. R80 Management requires the separate installation of compatibility hotfix packages for managing the earlier versions of Check Point Gateways prior to R80. Consult the R80 Release Notes for more information.

  C. R80 Management was designed as a completely different Management system and so can only monitor Check Point Gateways prior to R80.

  D. R80 Management cannot manage earlier versions of Check Point Gateways prior to R80. Only R80 and above Gateways can be managed. Consult the R80 Release Notes for more information.

  Correct Answer: A

  

  Reference: http://dl3.checkpoint.com/paid/1f/1f7e21da67aa992954aa12a0a84e53a8/ CP_R80_ReleaseNotes.pdf?HashKey=1479838085_d6ffcb36c6a3128708b3f6d7bcc4f94eandxtn=.pdf

• Question 67:

  Provide very wide coverage for all products and protocols, with noticeable performance impact.

  

  How could you tune the profile in order to lower the CPU load still maintaining security at good level? Select the BEST answer.

  A. Set High Confidence to Low and Low Confidence to Inactive.

  B. Set the Performance Impact to Medium or lower.

  C. The problem is not with the Threat Prevention Profile. Consider adding more memory to the appliance.

  D. Set the Performance Impact to Very Low Confidence to Prevent.

  Correct Answer: B

• Question 68:

  Fill in the blank: A _______ is used by a VPN gateway to send traffic as if it were a physical interface.

  A. VPN Tunnel Interface

  B. VPN community

  C. VPN router

  D. VPN interface

  Correct Answer: A

  Route Based VPN VPN traffic is routed according to the routing settings (static or dynamic) of the Security Gateway operating system. The Security Gateway uses a VTI (VPN Tunnel Interface) to send the VPN traffic as if it were a physical interface. The VTIs of Security Gateways in a VPN community connect and can support dynamic routing protocols. Reference: http://sc1.checkpoint.com/documents/R77/CP_R77_VPN_AdminGuide/13868.htm

• Question 69:

  You are going to upgrade from R77 to R80. Before the upgrade, you want to back up the system so that, if there are any problems, you can easily restore to the old version with all configuration and management files intact. What is the BEST backup method in this scenario?

  A. backup

  B. Database Revision

  C. snapshot

  D. migrate export

  Correct Answer: C

  Snapshot Management The snapshot creates a binary image of the entire root (lv_current) disk partition. This includes Check Point products, configuration, and operating system. Starting in R77.10, exporting an image from one machine and importing that image on another machine of the same type is supported. The log partition is not included in the snapshot. Therefore, any locally stored FireWall logs will not be saved. Reference: https://supportcenter.checkpoint.com/supportcenter/portal? eventSubmit_doGoviewsolutiondetails=andsolutionid=sk108902

• Question 70:

  The organization's security manager wishes to back up just the Gaia operating system parameters. Which command can be used to back up only Gaia operating system parameters like interface details, Static routes and Proxy ARP entries?

  A. show configuration

  B. backup

  C. migrate export

  D. upgrade export

  Correct Answer: B

  System Backup (and System Restore)

  System Backup can be used to backup current system configuration. A backup creates a compressed file

  that contains the Check Point configuration including the networking and operating system parameters,

  such as routing and interface configuration etc., but unlike a snapshot, it does not include the operating

  system, product binaries, and hotfixes.

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal?

  eventSubmit_doGoviewsolutiondetails=andsolutionid=sk108902