CheckPoint Checkpoint Certifications 156-215.81.20 Questions & Answers

• Question 661:

  When a Security Gateway sends its logs to an IP address other than its own, which deployment option is installed?

  A. Distributed

  B. Standalone

  C. Bridge Mode

  D. Targeted

  Correct Answer: A

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Installation_and_Upgrade_Guide-webAdmin/86429.htm

• Question 662:

  In ____________ NAT, the ____________ is translated.

  A. Hide; source

  B. Static; source

  C. Simple; source

  D. Hide; destination

  Correct Answer: A

• Question 663:

  An administrator wishes to enable Identity Awareness on the Check Point firewalls. However they allow users to use company issued or personal laptops. Since the administrator cannot manage the personal laptops, which of the following methods would BEST suit this company?

  A. AD Query

  B. Browser-Based Authentication

  C. Identity Agents

  D. Terminal Servers Agent

  Correct Answer: B

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_IdentityAwareness_AdminGuide/62007.htm

• Question 664:

  Which of the following situations would not require a new license to be generated and installed?

  A. The Security Gateway is upgraded.

  B. The existing license expires.

  C. The license is upgraded.

  D. The IP address of the Security Management or Security Gateway has changed.

  Correct Answer: A

• Question 665:

  When should you generate new licenses?

  A. Before installing contract files.

  B. After a device upgrade.

  C. When the existing license expires, license is upgraded or the IP-address associated with the license changes.

  D. Only when the license is upgraded.

  Correct Answer: B

• Question 666:

  Which of the following is NOT a valid deployment option for R80?

  A. All-in-one (stand-alone)

  B. CloudGuard

  C. Distributed

  D. Bridge Mode

  Correct Answer: B

• Question 667:

  When Identity Awareness is enabled, which identity source(s) is(are) used for Application Control?

  A. RADIUS

  B. Remote Access and RADIUS

  C. All of the above

  D. AD Query and Browser-based Authentication

  Correct Answer: D

  Identity Awareness gets identities from these acquisition sources:

  1.

  AD Query

  2.

  Browser-Based Authentication

  3.

  Endpoint Identity Agent

  4.

  Terminal Servers Identity Agent

  5.

  Remote Access Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_IdentityAwareness_AdminGuide/62007.htm

• Question 668:

  Which of the following is NOT a valid backup command for a Security Management Server?

  A. save backup

  B. add backup

  C. add snapshot

  D. migrate export

  Correct Answer: A

  Reference: https://www.networksecurityplus.net/2015/02/check-point-backup-and-restore-command-reference.html

• Question 669:

  When configuring Anti-Spoofing, which tracking options can an Administrator select?

  A. Log, Send SNMP Trap, Email

  B. Drop Packet, Alert, None

  C. Log, Alert, None

  D. Log, Allow Packets, Email

  Correct Answer: C

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80BC_Firewall/html_frameset.htm?topic=documents/R80/CP_R80BC_Firewall/136417

• Question 670:

  Which of the following cannot be configured in an Access Role Object?

  A. Users

  B. Networks

  C. Time

  D. Machines

  Correct Answer: C

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Firewall_WebAdmin/92705.htm