CheckPoint Checkpoint Certifications 156-215.81.20 Questions & Answers

• Question 81:

  A layer can support different combinations of blades. What are the supported blades:

  A. Firewall, NAT, Content Awareness and Mobile Access

  B. Firewall, URLF, Content Awareness and Mobile Access

  C. Firewall (Network Access Control), Application and URL Filtering and Content Awareness

  D. Firewall (Network Access Control), Application and URL Filtering, Content Awareness and Mobile Access

  Correct Answer: D

• Question 82:

  Fill in the blanks: The Application Layer Firewalls inspect traffic through the _____ layer(s) of the TCP/IP model and up to and including the _____ layer.

  A. Upper; Application

  B. Lower; Application

  C. First two; Internet

  D. First two; Transport

  Correct Answer: B

• Question 83:

  When configuring Anti-Spoofing, which tracking options can an Administrator select?

  A. Log, Alert, None

  B. Drop Packet, Alert, None

  C. Log, Allow Packets, Email

  D. Log, Send SNMP Trap, Email

  Correct Answer: A

• Question 84:

  What licensing feature automatically verifies current licenses and activates new licenses added to the License and Contracts repository?

  A. Automatic Licensing and Verification tool

  B. Verification licensing

  C. Verification tool

  D. Automatic licensing

  Correct Answer: D

• Question 85:

  What are valid authentication methods for mutual authenticating the VPN gateways?

  A. Pre-shared Secret and PKI Certificates

  B. PKI Certificates and Kerberos Tickets

  C. Pre-Shared Secrets and Kerberos Ticket

  D. PKI Certificates and DynamicID OTP

  Correct Answer: A

• Question 86:

  Which option in tracking allows you to see the amount of data passed in the connection?

  A. Advanced

  B. Accounting

  C. Data

  D. Logs

  Correct Answer: B

• Question 87:

  Both major kinds of NAT support Hide and Static NAT. However, one offers more flexibility. Which statement is true?

  A. Manual NAT can offer more flexibility than Automatic NAT.

  B. Dynamic NAT with Port Address Translation can offer more flexibility than Network Address Translation (NAT) Overloading.

  C. Automatic NAT can offer more flexibility than Manual NAT.

  D. Dynamic Network Address Translation (NAT) Overloading can offer more flexibility than Port Address Translation.

  Correct Answer: A

• Question 88:

  Fill in the blank: Once a certificate is revoked from the Security Gateway by the Security Management Server, the certificate information is _____.

  A. Stored on the Security Management Server.

  B. Stored on the Certificate Revocation List.

  C. Sent to the Internal Certificate Authority.

  D. Sent to the Security Administrator.

  Correct Answer: B

• Question 89:

  Which of the following blades is NOT subscription-based and therefore does not have to be renewed on a regular basis?

  A. Threat Emulation

  B. Anti-Virus

  C. Advanced Networking Blade

  D. Application Control

  Correct Answer: C

• Question 90:

  In order to see real-time and historical graph views of Security Gateway statistics in SmartView Monitor, what feature needs to be enabled on the Security Gateway?

  A. Monitoring Blade

  B. SNMP

  C. None - the data is available by default

  D. Logging and Monitoring

  Correct Answer: A