CheckPoint Checkpoint Certifications 156-215.81.20 Questions & Answers

• Question 71:

  Where is the "Hit Count" feature enabled or disabled in SmartConsole?

  A. In Global Properties.

  B. On each Security Gateway.

  C. On the Policy layer.

  D. On the Policy Package.

  Correct Answer: A

• Question 72:

  Log query results can be exported to what file format?

  A. Comma Separated Value (csv).

  B. Word Document (docx).

  C. Text (txt).

  D. Portable Document Format (pdf).

  Correct Answer: A

• Question 73:

  In order to modify Security Policies the administrator can use which of the following tools? Select the BEST answer.

  A. Command line of the Security Management Server or mgmt_cli.exe on any Windows computer.

  B. SmartConsole or mgmt_cli (API) on any computer where SmartConsole is installed.

  C. mgmt_cli (API) or WebUI on Security Gateway and SmartConsole on the Security Management Server.

  D. SmartConsole and WebUI on the Security Management Server.

  Correct Answer: B

• Question 74:

  Which Check Point software blade prevents malicious files from entering a network using virus signatures and anomaly-based protections from ThreatCloud?

  A. Anti-spam and Email Security

  B. Anti-Virus

  C. Firewall

  D. Application Control

  Correct Answer: B

• Question 75:

  When a Security Gateway communicates about its status to an IP address other than its own, which deployment option was chosen?

  A. Targeted

  B. Bridge Mode

  C. Distributed

  D. Standalone

  Correct Answer: C

• Question 76:

  In HTTPS Inspection policy, what actions are available in the "Actions" column of a rule?

  A. "Inspect", "Bypass", "Block"

  B. "Inspect", "Bypass", "Categorize"

  C. "Inspect", "Bypass"

  D. "Detect", "Bypass"

  Correct Answer: C

• Question 77:

  Why is a Central License the preferred and recommended method of licensing?

  A. Central Licensing ties to the IP address of the management server and is not dependent on the IP of any gateway in the event it changes.

  B. Central Licensing actually not supported with Gaia.

  C. Central Licensing ties to the IP address of a gateway and can be changed to any gateway if needed.

  D. Central Licensing is the only option when deploying Gaia.

  Correct Answer: A

• Question 78:

  In order for changes made to policy to be enforced by a Security Gateway, what action must an administrator perform?

  A. Install policy

  B. Publish changes

  C. Install database

  D. Save changes

  Correct Answer: A

• Question 79:

  Which of the following is NOT an alert option?

  A. SNMP

  B. User defined alert

  C. High alert

  D. Mail

  Correct Answer: C

• Question 80:

  The VPN Link Selection will perform the following if the primary VPN link goes down?

  A. The Firewall will send out the packet on all interfaces

  B. The Firewall will inform the client that the tunnel is down

  C. The Firewall can update the Link Selection entries to start using a different link for the same tunnel

  D. The Firewall will drop the packets

  Correct Answer: C