CheckPoint Checkpoint Certifications 156-215.81.20 Questions & Answers

• Question 621:

  Joey is using the computer with IP address 192.168.20.13. He wants to access web page "www.CheckPoint.com", which is hosted on Web server with IP address 203.0.113.111. How many rules on Check Point Firewall are required for this connection?

  A. Two rules ?first one for the HTTP traffic and second one for DNS traffic.

  B. Only one rule, because Check Point firewall is a Packet Filtering firewall

  C. Two rules ?one for outgoing request and second one for incoming replay.

  D. Only one rule, because Check Point firewall is using Stateful Inspection technology.

  Correct Answer: D

• Question 622:

  Fill in the blank: Licenses can be added to the License and Contract repository ________ .

  A. From the User Center, from a file, or manually

  B. From a file, manually, or from SmartView Monitor

  C. Manually, from SmartView Monitor, or from the User Center

  D. From SmartView Monitor, from the User Center, or from a file

  Correct Answer: A

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Installation_and_Upgrade_Guide-webAdmin/13128.htm

• Question 623:

  Fill in the blank: A(n) _____ rule is created by an administrator and is located before the first and before last rules in the Rule Base.

  A. Firewall drop

  B. Explicit

  C. Implicit accept

  D. Implicit drop

  E. Implied

  Correct Answer: E

  This is the order that rules are enforced:

  1.

  First Implied Rule: You cannot edit or delete this rule and no explicit rules can be placed before it.

  2.

  Explicit Rules: These are rules that you create.

  3.

  Before Last Implied Rules: These implied rules are applied before the last explicit rule.

  4.

  Last Explicit Rule: We recommend that you use the Cleanup rule as the last explicit rule.

  5.

  Last Implied Rules: Implied rules that are configured as Last in Global Properties.

  6.

  Implied Drop Rule: Drops all packets without logging.

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Firewall_WebAdmin/92703.htm

• Question 624:

  Fill in the blank: The IPS policy for pre-R80 gateways is installed during the _______ .

  A. Firewall policy install

  B. Threat Prevention policy install

  C. Anti-bot policy install

  D. Access Control policy install

  Correct Answer: B

  https://sc1.checkpoint.com/documents/R80/CP_R80BC_ThreatPrevention/html_frameset.htm?topic=documents/R80/CP_R80BC_ThreatPrevention/136486

• Question 625:

  Fill in the blank: RADIUS Accounting gets ______ data from requests generated by the accounting client

  A. Destination

  B. Identity

  C. Payload

  D. Location

  Correct Answer: B

  How RADIUS Accounting Works with Identity Awareness RADIUS Accounting gets identity data from RADIUS Accounting Requests generated by the RADIUS accounting client. Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_IdentityAwareness_WebAdminGuide/html_frameset.htm?topic=documents/R77/CP_R77_IdentityAwareness_WebAdminGuide/62050

• Question 626:

  Fill in the blank: The R80 SmartConsole, SmartEvent GUI client, and _______ consolidate billions of logs and shows them as prioritized security events.

  A. SmartMonitor

  B. SmartView Web Application

  C. SmartReporter

  D. SmartTracker

  Correct Answer: B

  Event Analysis with SmartEvent The SmartEvent Software Blade is a unified security event management and analysis solution that delivers real-time, graphical threat management information. SmartConsole, SmartView Web Application, and the SmartEvent GUI client consolidate billions of logs and show them as prioritized security events so you can immediately respond to security incidents, and do the necessary actions to prevent more attacks. You can customize the views to monitor the events that are most important to you. You can move from a high level view to detailed forensic analysis in a few clicks. With the free-text search and suggestions, you can quickly run data analysis and identify critical security events. Reference: https:// sc1.checkpoint.com/documents/R80/CP_R80_LoggingAndMonitoring/html_frameset.htm?topic=documents/R80/CP_R80_LoggingAndMonitoring/131915

• Question 627:

  Which Check Point software blade provides visibility of users, groups and machines while also providing access control through identity-based policies?

  A. Firewall

  B. Identity Awareness

  C. Application Control

  D. URL Filtering

  Correct Answer: B

  Check Point Identity Awareness Software Blade provides granular visibility of users, groups and machines, providing unmatched application and access control through the creation of accurate, identity-based policies. Centralized

  management and monitoring allows for policies to be managed from a single, unified console.

  Reference: https://www.checkpoint.com/products/identity-awareness-software-blade/

• Question 628:

  To view the policy installation history for each gateway, which tool would an administrator use?

  A. Revisions

  B. Gateway installations

  C. Installation history

  D. Gateway history

  Correct Answer: C

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm?topic=documents/R80/CP_R80_SecMGMT/119225

• Question 629:

  What is the purpose of a Stealth Rule?

  A. A rule used to hide a server's IP address from the outside world.

  B. A rule that allows administrators to access SmartDashboard from any device.

  C. To drop any traffic destined for the firewall that is not otherwise explicitly allowed.

  D. A rule at the end of your policy to drop any traffic that is not explicitly allowed.

  Correct Answer: C

  Reference: http://www.pearsonitcertification.com/articles/article.aspx?p=387728andseqNum=3

• Question 630:

  Fill in the blank: An Endpoint identity agent uses a ___________ for user authentication.

  A. Shared secret

  B. Token

  C. Username/password or Kerberos Ticket

  D. Certificate

  Correct Answer: C

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_IdentityAwareness_AdminGuide/62050.htm