CheckPoint Checkpoint Certifications 156-215.81.20 Questions & Answers

• Question 611:

  Provide very wide coverage for all products and protocols, with noticeable performance impact.

  

  How could you tune the profile in order to lower the CPU load still maintaining security at good level? Select the BEST answer.

  A. Set High Confidence to Low and Low Confidence to Inactive.

  B. Set the Performance Impact to Medium or lower.

  C. The problem is not with the Threat Prevention Profile. Consider adding more memory to the appliance.

  D. Set the Performance Impact to Very Low Confidence to Prevent.

  Correct Answer: B

• Question 612:

  Fill in the blank: A _______ is used by a VPN gateway to send traffic as if it were a physical interface.

  A. VPN Tunnel Interface

  B. VPN community

  C. VPN router

  D. VPN interface

  Correct Answer: A

  Route Based VPN VPN traffic is routed according to the routing settings (static or dynamic) of the Security Gateway operating system. The Security Gateway uses a VTI (VPN Tunnel Interface) to send the VPN traffic as if it were a physical interface. The VTIs of Security Gateways in a VPN community connect and can support dynamic routing protocols. Reference: http://sc1.checkpoint.com/documents/R77/CP_R77_VPN_AdminGuide/13868.htm

• Question 613:

  Fill in the blank: The ________ feature allows administrators to share a policy with other policy packages.

  A. Shared policy packages

  B. Shared policies

  C. Concurrent policy packages

  D. Concurrent policies

  Correct Answer: A

• Question 614:

  You want to define a selected administrator's permission to edit a layer. However, when you click the + sign in the "Select additional profile that will be able edit this layer" you do not see anything. What is the most likely cause of this problem? Select the BEST answer.

  

  A. "Edit layers by Software Blades" is unselected in the Permission Profile

  B. There are no permission profiles available and you need to create one first.

  C. All permission profiles are in use.

  D. "Edit layers by selected profiles in a layer editor" is unselected in the Permission profile.

  Correct Answer: B

• Question 615:

  Which of the following is NOT an alert option?

  A. SNMP

  B. High alert

  C. Mail

  D. User defined alert

  Correct Answer: B

  In Action, select:

  1.

  none - No alert.

  2.

  log - Sends a log entry to the database.

  3.

  alert - Opens a pop-up window to your desktop.

  4.

  mail - Sends a mail alert to your Inbox.

  5.

  snmptrap - Sends an SNMP alert.

  6.

  useralert - Runs a script. Make sure a user-defined action is available. Go to SmartDashboard > Global Properties > Log and Alert > Alert Commands.

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_SmartViewMonitor_AdminGuide/101104.htm

• Question 616:

  Fill in the blanks: A High Availability deployment is referred to as a ______ cluster and a Load Sharing deployment is referred to as a ________ cluster.

  A. Standby/standby; active/active

  B. Active/active; standby/standby

  C. Active/active; active/standby;

  D. Active/standby; active/active

  Correct Answer: D

  In a High Availability cluster, only one member is active (Active/Standby operation).

  ClusterXL Load Sharing distributes traffic within a cluster so that the total throughput of multiple members is increased. In Load Sharing configurations, all functioning members in the cluster are active, and handle network traffic (Active/Active

  operation).

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_ClusterXL_WebAdminGuide/7292.htm

• Question 617:

  AdminA and AdminB are both logged in on SmartConsole. What does it mean if AdminB sees a locked icon on a rule? Choose the BEST answer.

  A. Rule is locked by AdminA, because the save bottom has not been press.

  B. Rule is locked by AdminA, because an object on that rule is been edited.

  C. Rule is locked by AdminA, and will make it available if session is published.

  D. Rule is locked by AdminA, and if the session is saved, rule will be available

  Correct Answer: C

• Question 618:

  Which of the following is TRUE about the Check Point Host object?

  A. Check Point Host has no routing ability even if it has more than one interface installed.

  B. When you upgrade to R80 from R77.30 or earlier versions, Check Point Host objects are converted to gateway objects.

  C. Check Point Host is capable of having an IP forwarding mechanism.

  D. Check Point Host can act as a firewall.

  Correct Answer: A

  A Check Point host is a host with only one interface, on which Check Point software has been installed, and which is managed by the Security Management server. It is not a routing mechanism and is not capable of IP forwarding. Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_SecMan_WebAdmin/html_frameset.htm?topic=documents/R76/CP_R76_SecMan_WebAdmin/13139

• Question 619:

  Which of the following is NOT a set of Regulatory Requirements related to Information Security?

  A. ISO 37001

  B. Sarbanes Oxley (SOX)

  C. HIPPA

  D. PCI

  Correct Answer: A

  ISO 37001 - Anti-bribery management systems Reference: http://www.iso.org/iso/home/standards/management-standards/iso37001.htm

• Question 620:

  Which command is used to obtain the configuration lock in Gaia?

  A. Lock database override

  B. Unlock database override

  C. Unlock database lock

  D. Lock database user

  Correct Answer: A

  Obtaining a Configuration Lock

  1.

  lock database override

  2.

  unlock database

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Gaia_WebAdmin/75697.htm#o73091