156-215.80 Exam Questions
561 real 156-215.80 exam questions with expert-verified answers and explanations. Page 8 of 12.
- Question #351Deployment and Configuration
Customer's R80 management server needs to be upgraded to R80.10. What is the best upgrade method when the management server is not connected to the Internet?
CPUSEoffline upgrademanagement server upgradeR80.10 - Question #352Monitoring and Reporting
SmartEvent does NOT use which of the following procedures to identity events:
SmartEventevent identificationlog matchingevent definition - Question #353Deployment and Configuration
John is using Management HA. Which Smartcenter should be connected to for making changes?
Management HAactive SmartCenterhigh availabilityconfiguration changes - Question #354Introduction to Check Point Technology
Which path below is available only when CoreXL is enabled?
CoreXLmedium pathtraffic pathsSecureXL - Question #355Introduction to Check Point Technology
Which of the following describes how Threat Extraction functions?
Threat ExtractionSandBlastactive content removalPDF conversion - Question #356Monitoring and Reporting
The SmartEvent R80 Web application for real-time event monitoring is called:
SmartEventSmartEventWebreal-time monitoringweb application - Question #357Deployment and Configuration
SandBlast offers flexibility in implementation based on their individual business needs. What is an option for deployment of Check Point SandBlast Zero-Day Protection?
SandBlastZero-Day ProtectionSmart Cloud Servicesdeployment options - Question #358Monitoring and Reporting
What SmartEvent component creates events?
SmartEventCorrelation Unitevent creationlog analysis - Question #359Security Policy Management
Which Threat Prevention Profile is not included by default in R80 Management?
Threat Preventiondefault profilesR80 managementsecurity profiles - Question #360ClusterXL High Availability
When using Monitored circuit VRRP, what is a priority delta?
VRRPpriority deltamonitored circuitinterface failover - Question #361Security Policy Management
Which of the following is NOT an option to calculate the traffic direction?
traffic directionfirewall rulespacket inspectionsecurity policy - Question #362VPN Solutions
When an encrypted packet is decrypted, where does this happen?
packet decryptionVPN processinginbound chainsecurity policy - Question #363Introduction to Check Point Technology
Which of the following is NOT a component of Check Point Capsule?
Check Point Capsulemobile securityCapsule componentsproduct portfolio - Question #364Deployment and Configuration
You have successfully backed up your Check Point configurations without the OS information. What command would you use to restore this backup?
backup restorerestore_backup commandconfiguration backupCLI commands - Question #365ClusterXL High Availability
What is the best sync method in the ClusterXL deployment?
ClusterXL syncdedicated sync interfacecluster configurationhigh availability - Question #366Security Policy Management
Can multiple administrators connect to a Security Management Server at the same time?
multi-adminconcurrent administratorsSmartConsole sessionsManagement Server - Question #367User Management and Authentication
What Identity Agent allows packet tagging and computer authentication?
Identity Agentpacket taggingcomputer authenticationFull Agent - Question #368Monitoring and Reporting
In Logging and Monitoring, the tracking options are Log, Detailed Log and Extended Log. Which of the following options can you add to each Log, Detailed Log and Extended Log?
logging trackingaccountingsuppressionlog options - Question #369Security Gateway Troubleshooting
You noticed that CPU cores on the Security Gateway are usually 100% utilized and many packets were dropped. You don't have a budget to perform a hardware upgrade at this time. To o...
Dynamic DispatcherPriority Queuesfw ctl multikperformance optimization - Question #370Monitoring and Reporting
Which two of these Check Point Protocols are used by _____ ?
Check Point protocolsFWDLEAlog export - Question #371ClusterXL High Availability
To ensure that VMAC mode is enabled, which CLI command you should run on all cluster members? Choose the best answer.
VMAC modeClusterXLfw ctlcluster verification - Question #372Monitoring and Reporting
What is the SOLR database for?
SOLR databasefull text searchSmartLogdatabase components - Question #373ClusterXL High Availability
Which of the following commands is used to monitor cluster members?
cphaprobcluster monitoringClusterXL commandsCLI - Question #374Introduction to Check Point Technology
Fill in the blank: Service blades must be attached to a ______________.
service bladesSecurity Gatewayblade architectureCheck Point components - Question #375User Management and Authentication
Fill in the blank: An LDAP server holds one or more ______________.
LDAPAccount Unitsuser managementdirectory services - Question #376Deployment and Configuration
Fill in the blank: In Security Gateways R75 and above, SIC uses ______________ for encryption.
SICAES-128encryptionSecure Internal Communication - Question #377ClusterXL High Availability
What protocol is specifically used for clustered environments?
Cluster Control ProtocolCCPClusterXLcluster communication - Question #378Security Policy Management
Which of the following is NOT a tracking option? (Select three)
tracking optionslog typessecurity policymonitoring - Question #379Deployment and Configuration
Which command shows the installed licenses?
cplic printlicense managementCheck Point commandsCLI - Question #380Deployment and Configuration
Of all the Check Point components in your network, which one changes most often and should be backed up most frequently?
backup frequencySecurity Gatewayconfiguration backupdisaster recovery - Question #381Deployment and Configuration
Which option would allow you to make a backup copy of the OS and Check Point configuration, without stopping Check Point processes?
backup commandsnapshotmigrate exportCheck Point processes - Question #382Introduction to Check Point Technology
What is the Transport layer of the TCP/IP model responsible for?
TCP/IP modeltransport layerflow controlnetworking fundamentals - Question #383Network Address Translation (NAT)
What needs to be configured if the NAT property `Translate destination on client side' is not enabled in Global properties?
translate destination client sideNAT global propertiesARPautomatic NAT - Question #384Introduction to Check Point Technology
In the Check Point Security Management Architecture, which component(s) can store logs?
SMS architecturelog storageSecurity GatewaySmartConsole - Question #385Deployment and Configuration
Fill in the blank: In order to install a license, it must first be added to the ____________.
license managementpackage repositorySmartUpdatelicense installation - Question #386Deployment and Configuration
When logging in for the first time to a Security management Server through SmartConsole, a fingerprint is saved to the:
fingerprintSmartConsole loginSICfirst-time authentication - Question #387Deployment and Configuration
Fill in the blank: By default, the SIC certificates issued by R80 Management Server are based on the ____________ algorithm.
SICcertificate algorithmSHA-256R80 Management Server - Question #388VPN Solutions
Which message indicates IKE Phase 2 has completed successfully?
IKE Phase 2Quick ModeIPsec negotiationVPN tunnel establishment - Question #389Security Policy Management
Administrator Dave logs into R80 Management Server to review and makes some rule changes. He notices that there is a padlock sign next to the DNS rule in the Rule Base. What is the...
rule lockingconcurrent admin accessR80 policy managementpadlock indicator - Question #390VPN Solutions
Fill in the blank: When tunnel test packets no longer invoke a response, SmartView Monitor displays _____________ for the given VPN tunnel.
VPN tunnel statusSmartView Monitortunnel testingtunnel state - Question #391User Management and Authentication
Which of the following is the most secure means of authentication?
authentication methodscertificatetokensecurity comparison - Question #392Deployment and Configuration
What is the BEST command to view configuration details of all interfaces in Gaia CLISH?
Gaia CLISHshow configuration interfaceinterface detailsCLI commands - Question #393User Management and Authentication
Fill in the blank: Authentication rules are defined for ____________.
authentication rulesuser groupsUserCheckrule definition - Question #394Security Policy Management
Which tool provides a list of trusted files to the administrator so they can specify to the Threat Prevention blade that these files do not need to be scanned or analyzed?
ThreatWikiThreat Prevention bladetrusted fileswhitelist - Question #395User Management and Authentication
Which of the following is an authentication method used for Identity Awareness?
Identity AwarenessCaptive Portalauthentication methodsuser identification - Question #396Deployment and Configuration
The SIC Status "Unknown" means
SIC statusUnknown stategateway connectivitySecurity Management Server - Question #397Network Address Translation (NAT)
What is a reason for manual creation of a NAT rule?
manual NAT ruleautomatic NATpublic IPNAT rule creation - Question #398Deployment and Configuration
Which of the following commands is used to verify license installation?
cplic printlicense verificationCLI commandslicense management - Question #399Introduction to Check Point Technology
To enforce the Security Policy correctly, a Security Gateway requires:
network topologypolicy enforcementanti-spoofingSecurity Gateway requirements - Question #400VPN Solutions
Which configuration element determines which traffic should be encrypted into a VPN tunnel vs. sent in the clear?
VPN domainsencryption domainRule BaseVPN traffic selection