156-215.80 Exam Questions
561 real 156-215.80 exam questions with expert-verified answers and explanations. Page 9 of 12.
- Question #401Security Policy Management
You have discovered activity in your network. What is the BEST immediate action to take?
suspicious activity rulestraffic blockingpolicy responseSmartConsole - Question #402Security Policy Management
Tom has connected to the R80 Management Server remotely using SmartConsole and is in the process of making some Rule Base changes, when he suddenly loses connectivity. Connectivity...
SmartConsole sessionsmanagement serverconnectivity losssession persistence - Question #403Deployment and Configuration
Which GUI tool can be used to view and apply Check Point licenses?
SmartUpdatelicense managementCheck Point GUI tools - Question #404Security Gateway Troubleshooting
How would you determine the software version from the CLI?
CLI commandsfw versoftware versioncommand line - Question #405Security Policy Management
In R80 Management, apart from using SmartConsole, objects or rules can also be modified using:
R80 Management APICLI integration3rd party integrationmanagement interface - Question #406Security Policy Management
When connected to the Check Point R80 Management Server using the SmartConsole the first administrator to connect has a lock on:
SmartConsole sessionsconcurrent administratorsmanagement database lockwrite permission - Question #407VPN Solutions
Which is NOT an encryption algorithm that can be used in an IPSEC Security Association (Phase 2)?
IPSec Phase 2encryption algorithmsAES-GCMVPN security association - Question #408Security Policy Management
Fill in the blank: To create policy for traffic to or from a particular location, use the _____________.
geo policylocation-based filteringshared policytraffic control - Question #409Deployment and Configuration
After trust has been established between the Check Point components, what is TRUE about name and IP- address changes?
SIC trustSecurity Gateway IPcomponent trustre-establishing trust - Question #410User Management and Authentication
Which two Identity Awareness commands are used to support identity sharing?
Identity AwarenessPDPPEPidentity sharing - Question #411Security Policy Management
True or False: In R80, more than one administrator can login to the Security Management Server with write permission at the same time.
concurrent administratorsR80 sessionswrite permissionmanagement server - Question #412Security Policy Management
Which one of the following is TRUE?
inline layerordered layerpolicy layersrule action - Question #413Deployment and Configuration
Which deployment adds a Security Gateway to an existing environment without changing IP routing?
bridge modedeployment topologyIP routingtransparent deployment - Question #414User Management and Authentication
Fill in the blank: An identity server uses a ___________ for user authentication.
identity servershared secretuser authenticationIdentity Awareness - Question #415User Management and Authentication
You can see the following graphic: What is presented on it?
p12 certificateuser certificatesPKIcertificate properties - Question #416User Management and Authentication
When configuring LDAP User Directory integration, Changes applied to a User Directory template are:
LDAP integrationUser Directoryuser templatedirectory changes - Question #417Monitoring and Reporting
Choose what BEST describes the reason why querying logs now is very fast.
log indexingSmartLoglog search performanceindexing engine - Question #418ClusterXL High Availability
Check Point ClusterXL Active/Active deployment is used when:
ClusterXL Active/Activeload sharinghigh availabilitycluster deployment - Question #419Security Policy Management
Which of the following methods can be used to update the trusted log server regarding the policy and configuration changes performed on the Security Management Server?
Install Policylog serverpolicy distributionmanagement synchronization - Question #420Deployment and Configuration
From the Gaia web interface, which of the following operations CANNOT be performed on a Security Management Server?
Gaia web interfaceSecurity Management Serverpolicy verificationadministrative operations - Question #421VPN Solutions
Which of the following are types of VPN communities?
VPN communitiesmeshed topologystar topologyVPN configuration - Question #422Security Policy Management
What are the three types of UserCheck messages?
UserCheckuser notificationblade messaginginform ask block - Question #423Security Policy Management
What two ordered layers make up the Access Control Policy Layer?
Access Control Policypolicy layersApplication ControlNetwork layer - Question #424Security Policy Management
Which statement is TRUE of anti-spoofing?
anti-spoofingrouting tablebest practicesinterface topology - Question #425Security Policy Management
Fill in the blank: The position of an implied rule is manipulated in the __________________ window.
implied rulesGlobal Propertiesrule positionfirewall policy - Question #426Monitoring and Reporting
How can the changes made by an administrator before publishing the session be seen by a superuser administrator?
session managementSmartView Trackeraudit logadministrator changes - Question #427Monitoring and Reporting
Which Check Point software blade monitors Check Point devices and provides a picture of network and security performance?
Monitoring bladesoftware bladesnetwork performancesecurity performance - Question #428Security Policy Management
Your internal networks 10.1.1.0/24, 10.2.2.0/24 and 192.168.0.0/16 are behind the Internet Security Gateway. Considering that Layer 2 and Layer 3 setup is correct, what are the ste...
SmartConsolesecurity policyNAT configurationinternal networks - Question #429Monitoring and Reporting
True or False: The destination server for Security Gateway logs depends on a Security Management Server configuration.
log serverSecurity Gateway logsSmartCenterlog forwarding - Question #430Security Policy Management
Consider the Global Properties following settings: The selected option "Accept Domain Name over UDP (Queries)" means:
Global Propertiesimplied rulesDNS over UDPanti-spoofing interfaces - Question #431Introduction to Check Point Technology
How is communication between different Check Point components secured in R80? As with all questions, select the best answer.
SICsecure communicationcomponent securityR80 architecture - Question #432User Management and Authentication
Identify the ports to which the Client Authentication daemon listens on by default?
Client Authenticationdaemon portsauthentication portsuser authentication - Question #433Introduction to Check Point Technology
What is the purpose of the CPCA process?
CPCAcertificate authorityICAPKI - Question #434Deployment and Configuration
The Network Operations Center administrator needs access to Check Point Security devices mostly for troubleshooting purposes. You do not want to give her access to the expert mode,...
CLISHexpert moderole-based accesstcpdump - Question #435Deployment and Configuration
After the initial installation on Check Point appliance, you notice that the Management interface and default gateway are incorrect. Which commands could you use to set the IP to 1...
Gaia OSCLI commandsmanagement interfacestatic route - Question #436Deployment and Configuration
What Check Point tool is used to automatically update Check Point products for the Gaia OS?
CPUSEautomatic updatesGaia OSupgrade service - Question #437Security Gateway Troubleshooting
You are the Check Point administrator for Alpha Corp with an R80 Check Point estate. You have received a call by one of the management users stating that they are unable to browse...
SmartView Trackerlog filteringtroubleshooting connectivityIP log query - Question #438Security Policy Management
What are the advantages of a "shared policy" in R80?
shared policypolicy packageR80 policy managementpolicy reuse - Question #439Monitoring and Reporting
What key is used to save the current CPView page in a filename format cpview_"cpview process ID".cap"number of captures"?
CPViewmonitoring toolkeyboard shortcutscapture output - Question #440Deployment and Configuration
Which back up utility captures the most information and tends to create the largest archives?
backup utilitiessnapshotsystem backuparchive size - Question #441User Management and Authentication
Access roles allow the firewall administrator to configure Network access according to:
access rolesIdentity Awarenessuser groupsnetwork access - Question #442Introduction to Check Point Technology
Fill in the blanks. There are ______ types of software containers________
software containersSecurity Gatewaysecurity managementendpoint security - Question #443Security Policy Management
What is the purpose of the Clean-up Rule?
cleanup rulerule basetraffic loggingimplicit deny - Question #444Deployment and Configuration
Which of the following is NOT a valid deployment option for R80?
deployment optionsR80standalonemulti-domain - Question #445Monitoring and Reporting
Which SmartConsole tab is used to monitor network and security performance?
SmartConsoleGateway and Serversnetwork performancesecurity monitoring - Question #446Monitoring and Reporting
Which SmartConsole tab shows logs and detects security threats, providing a centralized display of potential attack patterns from all network devices?
SmartConsoleLogs and Monitorthreat detectionsecurity logs - Question #447Deployment and Configuration
Which repositories are installed on the Security Management Server by SmartUpdate?
SmartUpdatelicense managementpackage repositorycontract - Question #448User Management and Authentication
What is the BEST method to deploy identity Awareness for roaming users?
Identity Awarenessroaming usersidentity agentscaptive portal - Question #449Monitoring and Reporting
What does it mean if Deyra sees the gateway status Choose the BEST answer.
gateway statussoftware bladesecurity alertsSmartConsole - Question #450Deployment and Configuration
Fill in the blanks: A _______ license requires an administrator to designate a gateway for attachment whereas a _________ license is automatically attached to a Security Gateway.
license typescentral licenselocal licensegateway attachment