CheckPoint Checkpoint Certifications 156-215.81.20 Questions & Answers

• Question 91:

  How do logs change when the "Accounting" tracking option is enabled on a traffic rule?

  A. Involved traffic logs are updated every 10 minutes to show how much data has passed on the connection.

  B. Involved traffic logs will be forwarded to a log server.

  C. Provides additional information to the connected user.

  D. Provides log details view email to the Administrator.

  Correct Answer: A

• Question 92:

  What are the software components used by Autonomous Threat Prevention Profiles in R81.20 and higher?

  A. Sandbox, ThreatCloud, Zero Phishing, Sanitization, CandC Protection, IPS, File and URL Reputation

  B. IPS, Threat Emulation and Threat Extraction

  C. Sandbox, ThreatCloud, Sanitization, CandC Protection, IPS

  D. IPS, Anti-Bot, Anti-Virus, SandBlast and Macro Extraction

  Correct Answer: A

• Question 93:

  In large organizations where there are a number of managed Check Point firewalls that generate a lot of logs it is recommended to install the Log Server on a dedicated computer. Which statement is FALSE?

  A. The dedicated Log Server must be the same version as the Security Management Server.

  B. A Log Server has a SIC certificate which allows secure communication with the SMS and Security Gateways.

  C. More than one Log Server can be installed.

  D. A dedicated SmartEvent server is required for a separate Log Server to be deployed in the SmartEvent server.

  Correct Answer: D

• Question 94:

  What is required for a site-to-site VPN tunnel that does not use certificates?

  A. Unique Passwords

  B. Pre-Shared Secret

  C. SecureID

  D. RSA Token

  Correct Answer: B

• Question 95:

  Fill in the blanks: A _____ license requires an administrator to designate a gateway for attachment whereas a license is automatically attached to a Security Gateway.

  A. Local; formal

  B. Central; local

  C. Formal; corporate

  D. Local; central

  Correct Answer: B

• Question 96:

  When URL Filtering is set, what identifying data gets sent to the Check Point Online Web Service?

  A. The full URL, including page data, is sent to the Check Point Online Web Service.

  B. The URL and IP address are sent to the Check Point Online Web Service.

  C. The host part of the URL is sent to the Check Point Online Web Service.

  D. The URL and server certificate are sent to the Check Point Online Web Service.

  Correct Answer: C

• Question 97:

  What is the main difference between Static NAT and Hide NAT?

  A. Static NAT only allows outgoing connections. Hide NAT allows incoming and outgoing connections.

  B. Hide NAT only allows incoming connections to protect your network.

  C. Static NAT allow incoming and outgoing connections. Hide NAT only allows outgoing connections.

  D. Static NAT only allows incoming connections to protect your network.

  Correct Answer: C

• Question 98:

  What default layers are included when creating a new policy layer?

  A. Application Control, URL Filtering and Threat Prevention

  B. Firewall, Application Control and IPSec VPN

  C. Firewall, Application Control and IPS

  D. Access Control, Threat Prevention and HTTPS Inspection

  Correct Answer: D

• Question 99:

  If there is an Accept Implied Policy set to “First”, what is the reason Jorge cannot see any logs?

  A. Track log column is set to Log instead of Full Log.

  B. Log Implied Rule was not selected on Global Properties.

  C. Track log column is set to none.

  D. Log Implied Rule was not set correctly on the track column on the rules base.

  Correct Answer: B

• Question 100:

  What are the types of Software Containers?

  A. Smart Console, Security Management, and Security Gateway

  B. Security Management, Security Gateway, and Endpoint Security

  C. Security Management, Standalone, and Security Gateway

  D. Security Management, Log and Monitoring, and Security Policy

  Correct Answer: B