CheckPoint Checkpoint Certifications 156-215.81.20 Questions & Answers

• Question 601:

  Look at the screenshot below. What CLISH command provides this output?

  

  A. show configuration all

  B. show confd configuration

  C. show confd configuration all

  D. show configuration

  Correct Answer: D

  

  Reference: http://dl3.checkpoint.com/paid/0c/0caa9c0daa67e0c1f2af3dd06790bc81/CP_R77_Gaia_AdminGuide.pdf?HashKey=1479835768_76058f0fc4209e38bc801cd58a85d7c5andxtn=.pdf

• Question 602:

  Which authentication scheme requires a user to possess a token?

  A. TACACS

  B. SecurID

  C. Check Point password

  D. RADIUS

  Correct Answer: B

  SecurID SecurID requires users to both possess a token authenticator and to supply a PIN or password

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_SecurityGatewayTech_WebAdmin/6721.htm

• Question 603:

  If there is an Accept Implied Policy set to "First", what is the reason Jorge cannot see any logs?

  A. Log Implied Rule was not selected on Global Properties.

  B. Log Implied Rule was not set correctly on the track column on the rules base.

  C. Track log column is set to none.

  D. Track log column is set to Log instead of Full Log.

  Correct Answer: A

  Implied Rules are configured only on Global Properties.

• Question 604:

  The most important part of a site-to-site VPN deployment is the ________ .

  A. Internet

  B. Remote users

  C. Encrypted VPN tunnel

  D. VPN gateways

  Correct Answer: C

  Site to Site VPN The basis of Site to Site VPN is the encrypted VPN tunnel. Two Security Gateways negotiate a link and create a VPN tunnel and each tunnel can contain more than one VPN connection. One Security Gateway can maintain more than one VPN tunnel at the same time. Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Firewall_WebAdmin/92709.htm

• Question 605:

  R80 Security Management Server can be installed on which of the following operating systems?

  A. Gaia only

  B. Gaia, SPLAT, Windows Server only

  C. Gaia, SPLAT, Windows Server and IPSO only

  D. Gaia and SPLAT only

  Correct Answer: A

  R80 can be installed only on GAIA OS.

  Supported Check Point Installations All R80 servers are supported on the Gaia Operating System:

  1.

  ?Security Management Server

  2.

  ?Multi-Domain Security Management Server

  3.

  ?Log Server

  4.

  ?Multi-Domain Log Server

  5.

  ?SmartEvent Server

  Reference: http://dl3.checkpoint.com/paid/1f/1f7e21da67aa992954aa12a0a84e53a8/CP_R80_ReleaseNotes.pdf?HashKey=1479838085_d6ffcb36c6a3128708b3f6d7bcc4f94eandxtn=.pdf

• Question 606:

  What port is used for delivering logs from the gateway to the management server?

  A. Port 258

  B. Port 18209

  C. Port 257

  D. Port 981

  Correct Answer: C

• Question 607:

  The organization's security manager wishes to back up just the Gaia operating system parameters. Which command can be used to back up only Gaia operating system parameters like interface details, Static routes and Proxy ARP entries?

  A. show configuration

  B. backup

  C. migrate export

  D. upgrade export

  Correct Answer: B

  System Backup (and System Restore)

  System Backup can be used to backup current system configuration. A backup creates a compressed file that contains the Check Point configuration including the networking and operating system parameters, such as routing and interface

  configuration etc., but unlike a snapshot, it does not include the operating system, product binaries, and hotfixes.

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk108902

• Question 608:

  Choose what BEST describes users on Gaia Platform.

  A. There is one default user that cannot be deleted.

  B. There are two default users and one cannot be deleted.

  C. There is one default user that can be deleted.

  D. There are two default users that cannot be deleted and one SmartConsole Administrator.

  Correct Answer: B

  These users are created by default and cannot be deleted:

  1.

  admin -- Has full read/write capabilities for all Gaia features, from the WebUI and the CLI. This user has a User ID of 0, and therefore has all of the privileges of a root user.

  2.

  monitor -- Has read-only capabilities for all features in the WebUI and the CLI, and can change its own password. You must give a password for this user before the account can be used.

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Gaia_WebAdmin/73101.htm

• Question 609:

  You are going to upgrade from R77 to R80. Before the upgrade, you want to back up the system so that, if there are any problems, you can easily restore to the old version with all configuration and management files intact. What is the BEST backup method in this scenario?

  A. backup

  B. Database Revision

  C. snapshot

  D. migrate export

  Correct Answer: C

  Snapshot Management The snapshot creates a binary image of the entire root (lv_current) disk partition. This includes Check Point products, configuration, and operating system. Starting in R77.10, exporting an image from one machine and importing that image on another machine of the same type is supported. The log partition is not included in the snapshot. Therefore, any locally stored FireWall logs will not be saved. Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk108902

• Question 610:

  The IT Management team is interested in the new features of the Check Point R80 Management and wants to upgrade but they are concerned that the existing R77.30 Gaia Gateways cannot be managed by R80 because it is so different. As the administrator responsible for the Firewalls, how can you answer or confirm these concerns?

  A. R80 Management contains compatibility packages for managing earlier versions of Check Point Gateways prior to R80. Consult the R80 Release Notes for more information.

  B. R80 Management requires the separate installation of compatibility hotfix packages for managing the earlier versions of Check Point Gateways prior to R80. Consult the R80 Release Notes for more information.

  C. R80 Management was designed as a completely different Management system and so can only monitor Check Point Gateways prior to R80.

  D. R80 Management cannot manage earlier versions of Check Point Gateways prior to R80. Only R80 and above Gateways can be managed. Consult the R80 Release Notes for more information.

  Correct Answer: A

  

  Reference: http://dl3.checkpoint.com/paid/1f/1f7e21da67aa992954aa12a0a84e53a8/CP_R80_ReleaseNotes.pdf?HashKey=1479838085_d6ffcb36c6a3128708b3f6d7bcc4f94eandxtn=.pdf