Top Tips Of Improve 156-215.81 Testing Material

NEW QUESTION 1
Which Check Point software blade provides Application Security and identity control?

• A. Identity Awareness
• B. Data Loss Prevention
• C. URL Filtering
• D. Application Control

Answer: D

Explanation:
Check Point Application Control provides the industry’s strongest application security and identity control to organizations of all sizes.

NEW QUESTION 2
What Check Point technologies deny or permit network traffic?

• A. Application Control, DLP
• B. Packet Filtering, Stateful Inspection, Application Layer Firewall.
• C. ACL, SandBlast, MPT
• D. IPS, Mobile Threat Protection

Answer: B

NEW QUESTION 3
Gaia has two default user accounts that cannot be deleted. What are those user accounts?

• A. Admin and Default
• B. Expert and Clish
• C. Control and Monitor
• D. Admin and Monitor

Answer: D

NEW QUESTION 4
One of major features in R80.x SmartConsole is concurrent administration. Which of the following is NOT possible considering that AdminA, AdminB, and AdminC are editing the same Security Policy?

• A. AdminC sees a lock icon which indicates that the rule is locked for editing by another administrator.
• B. AdminA and AdminB are editing the same rule at the same time.
• C. AdminB sees a pencil icon next the rule that AdminB is currently editing.
• D. AdminA, AdminB and AdminC are editing three different rules at the same time.

Answer: B

NEW QUESTION 5
Which of the following is used to initially create trust between a Gateway and Security Management Server?

• A. Internal Certificate Authority
• B. Token
• C. One-time Password
• D. Certificate

Answer: C

Explanation:
To establish the initial trust, a gateway and a Security Management Server use a one-time password. After the initial trust is established, further communication is based on security certificates.
https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_SecurityManagement_AdminGuide

NEW QUESTION 6
What is the default shell of Gaia CLI?

• A. clish
• B. Monitor
• C. Read-only
• D. Bash

Answer: A

Explanation:
https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_Gaia_AdminGuide/Topics-GAG/C

NEW QUESTION 7
Please choose correct command syntax to add an “emailserver1” host with IP address 10.50.23.90 using GAiA management CLI?

• A. host name myHost12 ip-address 10.50.23.90
• B. mgmt add host name ip-address 10.50.23.90
• C. add host name emailserver1 ip-address 10.50.23.90
• D. mgmt add host name emailserver1 ip-address 10.50.23.90

Answer: D

NEW QUESTION 8
What are the three deployment considerations for a secure network?

• A. Distributed, Bridge Mode, and Remote
• B. Bridge Mode, Remote, and Standalone
• C. Remote, Standalone, and Distributed
• D. Standalone, Distributed, and Bridge Mode

Answer: A

NEW QUESTION 9
Which of the following is NOT a valid configuration screen of an Access Role Object?

• A. Users
• B. Networks
• C. Time
• D. Machines

Answer: C

NEW QUESTION 10
What are the advantages of a “shared policy” in R80?

• A. Allows the administrator to share a policy between all the users identified by the Security Gateway
• B. Allows the administrator to share a policy between all the administrators managing the Security Management Server
• C. Allows the administrator to share a policy so that it is available to use in another Policy Package
• D. Allows the administrator to install a policy on one Security Gateway and it gets installed on another managed Security Gateway

Answer: C

Explanation:
Ref: https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_SecurityManagement_AdminGuide

NEW QUESTION 11
With URL Filtering, what portion of the traffic is sent to the Check Point Online Web Service for analysis?

• A. The complete communication is sent for inspection.
• B. The IP address of the source machine.
• C. The end user credentials.
• D. The host portion of the URL.

Answer: D

Explanation:
"A local cache that gives answers to 99% of URL categorization requests. When the cache does not have an answer, only the host name is sent to the Check Point Online Web Service for categorization. " https://downloads.checkpoint.com/fileserver/SOURCE/direct/ID/24853/FILE/CP_R77_ApplicationControlURL

NEW QUESTION 12
How many layers make up the TCP/IP model?

• A. 2
• B. 7
• C. 6
• D. 4

Answer: D

NEW QUESTION 13
You have discovered suspicious activity in your network. What is the BEST immediate action to take?

• A. Create a policy rule to block the traffic.
• B. Create a suspicious action rule to block that traffic.
• C. Wait until traffic has been identified before making any changes.
• D. Contact ISP to block the traffic.

Answer: B

NEW QUESTION 14
Which product correlates logs and detects security threats, providing a centralized display of potential attack patterns from all network devices?

• A. SmartDashboard
• B. SmartEvent
• C. SmartView Monitor
• D. SmartUpdate

Answer: B

Explanation:
SmartEvent correlates logs from all Check Point enforcement points, including end-points, to identify suspicious activity from the clutter. Rapid data analysis and custom event logs immediately alert administrators to anomalous behavior such as someone attempting to use the same credential in multiple geographies simultaneously. Ref: https://www.checkpoint.com/products/smartevent/

NEW QUESTION 15
Core Protections are installed as part of what Policy?

• A. Access Control Policy.
• B. Desktop Firewall Policy
• C. Mobile Access Policy.
• D. Threat Prevention Policy.

Answer: A

Explanation:
Core protections - These protections are included in the product and are assigned per gateway. They are part of the Access Control policy. ThreatCloud protections - Updated from the Check Point cloud, (see Updating IPS Protections). These protections are part of the Threat Prevention policy. https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_ThreatPrevention_AdminGuide/To

NEW QUESTION 16
What needs to be configured if the NAT property ‘Translate destination on client side’ is not enabled in Global properties?

• A. A host route to route to the destination IP
• B. Use the file local.arp to add the ARP entries for NAT to work
• C. Nothing, the Gateway takes care of all details necessary
• D. Enabling ‘Allow bi-directional NAT’ for NAT to work correctly

Answer: C

NEW QUESTION 17
In which scenario is it a valid option to transfer a license from one hardware device to another?

• A. From a 4400 Appliance to a 2200 Appliance
• B. From a 4400 Appliance to an HP Open Server
• C. From an IBM Open Server to an HP Open Server
• D. From an IBM Open Server to a 2200 Appliance

Answer: A

Explanation:
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=

NEW QUESTION 18
When should you generate new licenses?

• A. Before installing contract files.
• B. After an RMA procedure when the MAC address or serial number of the appliance changes.
• C. When the existing license expires, license is upgraded or the IP-address where the license is tied changes.
• D. Only when the license is upgraded.

Answer: C

NEW QUESTION 19
Which of the following are types of VPN communities?

• A. Pentagon, star, and combination
• B. Star, octagon, and combination
• C. Combined and star
• D. Meshed, star, and combination

Answer: D

NEW QUESTION 20
......