CheckPoint Checkpoint Certifications 156-215.80 Questions & Answers

• Question 81:

  Which authentication scheme requires a user to possess a token?

  A. TACACS

  B. SecurID

  C. Check Point password

  D. RADIUS

  Correct Answer: B

  SecurID SecurID requires users to both possess a token authenticator and to supply a PIN or password

  Reference: https://sc1.checkpoint.com/documents/R77/ CP_R77_SecurityGatewayTech_WebAdmin/6721.htm

• Question 82:

  If there is an Accept Implied Policy set to "First", what is the reason Jorge cannot see any logs?

  A. Log Implied Rule was not selected on Global Properties.

  B. Log Implied Rule was not set correctly on the track column on the rules base.

  C. Track log column is set to none.

  D. Track log column is set to Log instead of Full Log.

  Correct Answer: A

  Implied Rules are configured only on Global Properties.

• Question 83:

  The most important part of a site-to-site VPN deployment is the ________ .

  A. Internet

  B. Remote users

  C. Encrypted VPN tunnel

  D. VPN gateways

  Correct Answer: C

  Site to Site VPN The basis of Site to Site VPN is the encrypted VPN tunnel. Two Security Gateways negotiate a link and create a VPN tunnel and each tunnel can contain more than one VPN connection. One Security Gateway can maintain more than one VPN tunnel at the same time. Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Firewall_WebAdmin/92709.htm

• Question 84:

  Fill in the blank: Once a license is activated, a ________ should be installed.

  A. License Management file

  B. Security Gateway Contract file

  C. Service Contract file

  D. License Contract file

  Correct Answer: C

  Service Contract File Following the activation of the license, a Service Contract File should be installed. This file contains important information about all subscriptions purchased for a specific device and is installed via SmartUpdate. A detailed explanation of the Service Contract File can be found in sk33089. Reference: https://supportcenter.checkpoint.com/supportcenter/portal? eventSubmit_doGoviewsolutiondetails=andsolutionid=sk11054

• Question 85:

  Which policy type is used to enforce bandwidth and traffic control rules?

  A. Threat Emulation

  B. Access Control

  C. QoS

  D. Threat Prevention

  Correct Answer: C

  Check Point's QoS Solution QoS is a policy-based QoS management solution from Check Point Software Technologies Ltd., satisfies your needs for a bandwidth management solution. QoS is a unique, software-only based application that manages traffic end-to-end across networks, by distributing enforcement throughout network hardware and software. Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_QoS_AdminGuide/index.html

• Question 86:

  Fill in the blanks: A Check Point software license consists of a _______ and _______ .

  A. Software container; software package

  B. Software blade; software container

  C. Software package; signature

  D. Signature; software blade

  Correct Answer: B

  Check Point's licensing is designed to be scalable and modular. To this end, Check Point offers both predefined packages as well as the ability to custom build a solution tailored to the needs of the Network Administrator. This is accomplished by the use of the following license components:

  1.

  Software Blades

  2.

  Container Reference: https://supportcenter.checkpoint.com/supportcenter/portal? eventSubmit_doGoviewsolutiondetails=andsolutionid=sk11054

• Question 87:

  After the initial installation the First Time Configuration Wizard should be run. Select the BEST answer.

  A. First Time Configuration Wizard can be run from the Unified SmartConsole.

  B. First Time Configuration Wizard can be run from the command line or from the WebUI.

  C. First time Configuration Wizard can only be run from the WebUI.

  D. Connection to the internet is required before running the First Time Configuration wizard.

  Correct Answer: B

  Check Point Security Gateway and Check Point Security Management require running the First Time Configuration Wizard in order to be configured correctly. The First Time Configuration Wizard is available in Gaia Portal and also through CLI. To invoke the First Time Configuration Wizard through CLI, run the config_system command from the Expert shell. Reference: https://supportcenter.checkpoint.com/supportcenter/portal? eventSubmit_doGoviewsolutiondetails=andsolutionid=sk111119

• Question 88:

  In order to modify Security Policies the administrator can use which of the following tools? Select the BEST answer.

  A. Command line of the Security Management Server or mgmt_cli.exe on any Windows computer.

  B. SmartConsole and WebUI on the Security Management Server.

  C. mgmt_cli or WebUI on Security Gateway and SmartConsole on the Security Management Server.

  D. SmartConsole or mgmt_cli on any computer where SmartConsole is installed.

  Correct Answer: D

• Question 89:

  Which of the following is NOT an element of VPN Simplified Mode and VPN Communities?

  A. "Encrypt" action in the Rule Base

  B. Permanent Tunnels

  C. "VPN" column in the Rule Base

  D. Configuration checkbox "Accept all encrypted traffic"

  Correct Answer: A

  Migrating from Traditional Mode to Simplified Mode

  To migrate from Traditional Mode VPN to Simplified Mode:

  1.

  On the Global Properties > VPN page, select one of these options: Simplified mode to all new Firewall Policies Traditional or Simplified per new Firewall Policy

  2.

  Click OK.

  3.

  From the R80 SmartConsole Menu, select Manage policies.

  The Manage Policies window opens.

  4.

  Click New.

  The New Policy window opens.

  5.

  Give a name to the new policy and select Access Control.

  In the Security Policy Rule Base, a new column marked VPN shows and the Encrypt option is no longer available in the Action column. You are now working in Simplified Mode.

  Reference: http://dl3.checkpoint.com/paid/05/05e695b2012b4fd1d2bdfeccecd29290/ CP_R80BC_VPN_AdminGuide.pdf? HashKey=1479823792_55fbc10656c87db4fcf742f4899ba90dandxtn=.pdf

• Question 90:

  Fill in the blanks: The Application Layer Firewalls inspect traffic through the ________ layer(s) of the TCP/ IP model and up to and including the ________ layer.

  A. Lower; Application

  B. First two; Internet

  C. First two; Transport

  D. Upper; Application

  Correct Answer: A