CheckPoint Checkpoint Certifications 156-315.80 Questions & Answers

• Question 441:

  What needs to be configured if the NAT property `Translate destination or client side' is not enabled in Global Properties?

  A. A host route to route to the destination IP.

  B. Use the file local.arp to add the ARP entries for NAT to work.

  C. Nothing, the Gateway takes care of all details necessary.

  D. Enabling `Allow bi-directional NAT' for NAT to work correctly.

  Correct Answer: C

• Question 442:

  At what point is the Internal Certificate Authority (ICA) created?

  A. Upon creation of a certificate.

  B. During the primary Security Management Server installation process.

  C. When an administrator decides to create one.

  D. When an administrator initially logs into SmartConsole.

  Correct Answer: B

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_SecMan_WebAdmin/html_frameset.htm?

  topic=documents/R76/CP_R76_SecMan_WebAdmin/13118

• Question 443:

  Which pre-defined Permission Profile should be assigned to an administrator that requires full access to audit all configurations without modifying them?

  A. Auditor

  B. Read Only All

  C. Super User

  D. Full Access

  Correct Answer: B

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm? topic=documents/R80/CP_R80_SecMGMT/124265

• Question 444:

  When Identity Awareness is enabled, which identity source(s) is(are) used for Application Control?

  A. RADIUS

  B. Remote Access and RADIUS

  C. AD Query

  D. AD Query and Browser-based Authentication

  Correct Answer: D

  Identity Awareness gets identities from these acquisition sources:

  1.

  AD Query

  2.

  Browser-Based Authentication

  3.

  Endpoint Identity Agent

  4.

  Terminal Servers Identity Agent

  5.

  Remote Access

• Question 445:

  

  What can we infer about the recent changes made to the Rule Base?

  A. Rule 7 was created by the `admin' administrator in the current session

  B. 8 changes have been made by administrators since the last policy installation

  C. The rules 1, 5 and 6 cannot be edited by the `admin' administrator

  D. Rule 1 and object webserver are locked by another administrator

  Correct Answer: D

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm? topic=documents/R80/CP_R80_SecMGMT/117948

• Question 446:

  Which of the following is NOT a type of Endpoint Identity Agent?

  A. Terminal

  B. Light

  C. Full

  D. Custom

  Correct Answer: A

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_IdentityAwareness_WebAdminGuide/ html_frameset.htm?topic=documents/R77/CP_R77_IdentityAwareness_WebAdminGuide/64917

• Question 447:

  You work as a security administrator for a large company. CSO of your company has attended a security conference where he has learnt how hackers constantly modify their strategies and techniques to evade detection and reach corporate resources. He wants to make sure that his company has the tight protections in place. Check Point has been selected for the security vendor.

  Which Check Point product protects BEST against malware and zero-day attacks while ensuring quick delivery of safe content to your users?

  A. IPS AND Application Control

  B. IPS, anti-virus and anti-bot

  C. IPS, anti-virus and e-mail security

  D. SandBlast

  Correct Answer: D

  Reference: https://www.checkpoint.com/products-solutions/zero-day-protection/

• Question 448:

  You have enabled "Full Log" as a tracking option to a security rule. However, you are still not seeing any data type information. What is the MOST likely reason?

  A. Logging has disk space issues. Change logging storage options on the logging server or Security Management Server properties and install database.

  B. Data Awareness is not enabled.

  C. Identity Awareness is not enabled.

  D. Logs are arriving from Pre-R80 gateways.

  Correct Answer: A

• Question 449:

  What are the two high availability modes?

  A. Load Sharing and Legacy

  B. Traditional and New

  C. Active and Standby

  D. New and Legacy

  Correct Answer: D

  ClusterXL has four working modes. This section briefly describes each mode and its relative advantages and disadvantages.

  1.

  Load Sharing Multicast Mode

  2.

  Load Sharing Unicast Mode

  3.

  New High Availability Mode

  4.

  High Availability Legacy Mode

• Question 450:

  Which feature is NOT provided by all Check Point Mobile Access solutions?

  A. Support for IPv6

  B. Granular access control

  C. Strong user authentication

  D. Secure connectivity

  Correct Answer: A

  Types of Solutions

  All of Check Point's Remote Access solutions provide:

  1.

  Enterprise-grade, secure connectivity to corporate resources.

  2.

  Strong user authentication.

  3.

  Granular access control.