CheckPoint Checkpoint Certifications 156-215.81.20 Questions & Answers

• Question 641:

  Which key is created during Phase 2 of a site-to-site VPN?

  A. Pre-shared secret

  B. Diffie-Hellman Public Key

  C. Symmetrical IPSec key

  D. Diffie-Hellman Private Key

  Correct Answer: C

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_VPN_AdminGuide/13847.htm

• Question 642:

  Fill in the blank: Each cluster, at a minimum, should have at least ___________ interfaces.

  A. Five

  B. Two

  C. Three

  D. Four

  Correct Answer: C

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_ClusterXL_AdminGuide/7292.htm

• Question 643:

  Examine the sample Rule Base.

  

  What will be the result of a verification of the policy from SmartConsole?

  A. No errors or Warnings

  B. Verification Error. Empty Source-List in Rule 5 (Mail Inbound)

  C. Verification Error. Rule 4 (Web Inbound) hides Rule 6 (Webmaster access)

  D. Verification Error. Rule 7 (Clean-Up Rule) hides Implicit Clean-up Rule

  Correct Answer: C

• Question 644:

  You are the Check Point administrator for Alpha Corp. You received a call that one of the users is unable to browse the Internet on their new tablet which is connected to the company wireless, which goes through a Check Point Gateway. How would you review the logs to see what is blocking this traffic?

  A. Open SmartLog and connect remotely to the wireless controller

  B. Open SmartEvent to see why they are being blocked

  C. Open SmartDashboard and review the logs tab

  D. Open SmartLog and filter for the IP address of the tablet

  Correct Answer: D

• Question 645:

  What is a role of Publishing?

  A. The Publish operation sends the modifications made via SmartConsole in the private session and makes them public

  B. The Security Management Server installs the updated policy and the entire database on Security Gateways

  C. The Security Management Server installs the updated session and the entire Rule Base on Security Gateways

  D. Modifies network objects, such as servers, users, services, or IPS profiles, but not the Rule Base

  Correct Answer: A

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm?topic=documents/R80/CP_R80_SecMGMT/119225

• Question 646:

  Which software blade enables Access Control policies to accept, drop, or limit web site access based on user, group, and/or machine?

  A. Application Control

  B. Data Awareness

  C. Identity Awareness

  D. Threat Emulation

  Correct Answer: A

• Question 647:

  Fill in the blank: ____________ is the Gaia command that turns the server off.

  A. sysdown

  B. exit

  C. halt

  D. shut-down

  Correct Answer: C

• Question 648:

  Which option in a firewall rule would only match and allow traffic to VPN gateways for one Community in common?

  A. All Connections (Clear or Encrypted)

  B. Accept all encrypted traffic

  C. Specific VPN Communities

  D. All Site-to-Site VPN Communities

  Correct Answer: C

• Question 649:

  Which SmartConsole tab is used to monitor network and security performance?

  A. Manage and Settings

  B. Security Policies

  C. Gateway and Servers

  D. Logs and Monitor

  Correct Answer: D

• Question 650:

  Which statement describes what Identity Sharing is in Identity Awareness?

  A. Management servers can acquire and share identities with Security Gateways

  B. Users can share identities with other users

  C. Security Gateways can acquire and share identities with other Security Gateways

  D. Administrators can share identities with other administrators

  Correct Answer: C