156-215.81.20 Exam Questions

The VPN Link Selection will perform the following if the primary VPN link goes down?

A layer can support different combinations of blades. What are the supported blades:

Fill in the blanks: The Application Layer Firewalls inspect traffic through the _____ layer(s) of the TCP/IP model and up to and including the _____ layer.

When configuring Anti-Spoofing, which tracking options can an Administrator select?

What licensing feature automatically verifies current licenses and activates new licenses added to the License and Contracts repository?

What are valid authentication methods for mutual authenticating the VPN gateways?

Which option in tracking allows you to see the amount of data passed in the connection?

Both major kinds of NAT support Hide and Static NAT. However, one offers more flexibility. Which statement is true?

Fill in the blank: Once a certificate is revoked from the Security Gateway by the Security Management Server, the certificate information is _____.

Which of the following blades is NOT subscription-based and therefore does not have to be renewed on a regular basis?

In order to see real-time and historical graph views of Security Gateway statistics in SmartView Monitor, what feature needs to be enabled on the Security Gateway?

How do logs change when the "Accounting" tracking option is enabled on a traffic rule?

What are the software components used by Autonomous Threat Prevention Profiles in R81.20 and higher?

In large organizations where there are a number of managed Check Point firewalls that generate a lot of logs it is recommended to install the Log Server on a dedicated computer. Wh...

What is required for a site-to-site VPN tunnel that does not use certificates?

Fill in the blanks: A _____ license requires an administrator to designate a gateway for attachment whereas a license is automatically attached to a Security Gateway.

When URL Filtering is set, what identifying data gets sent to the Check Point Online Web Service?

What is the main difference between Static NAT and Hide NAT?

What default layers are included when creating a new policy layer?

If there is an Accept Implied Policy set to 揊irst? what is the reason Jorge cannot see any logs?

What are the types of Software Containers?

At what point is the Internal Certificate Authority (ICA) created?

The purpose of the Communication Initialization process is to establish a trust between the Security Management Server (SMS) to other Check Point Gateways and Servers. Which statem...

Which SmartConsole tab shows logs and detected security threats, providing a centralized display of potential attack patterns from all network devices?

In a Distributed deployment, the Security Gateway and the Security Management software are installed on what platforms?

What is the default shell for the Gaia command line interface?

Fill in the blanks: Gaia can be configured using the ______ or ______.

The default shell of the Gaia CLI is cli.sh. How do you change from the cli.sh shell to the advanced shell to run Linux commands?

How many users can have read/write access in Gaia Operating System at one time?

Which part of SmartConsole allows administrators to add, edit, delete, and clone objects?

Is it possible to have more than one administrator connected to a Security Management Server at once?

When an Admin logs into SmartConsole and sees a lock icon on a gateway object and cannot edit that object, what does that indicate?

Which of the following is considered a 揝ubscription Blade? requiring renewal every 1-3 years?

The Online Activation method is available for Check Point manufactured appliances. How does the administrator use the Online Activation method?

Check Point licenses come in two forms. What are those forms?

True or False: In a Distributed Environment, a Central License can be installed via CLI on a Security Gateway.

Which application is used for the central management and deployment of licenses and packages?

Which command shows the installed licenses in Expert mode?

In SmartConsole, objects are used to represent physical and virtual network components and also some logical components. These objects are divided into several categories. Which of...

What is the purpose of the Stealth Rule?

What are the advantages of a 搒hared policy?

Which policy type is used to enforce bandwidth and traffic control rules?

Which Check Point Application Control feature enables application scanning and detection?

What type of NAT is a one-to-one relationship where each host is translated to a unique address?

For Automatic Hide NAT rules created by the administrator what is a TRUE statement?

In which scenario will an administrator need to manually define Proxy ARP?

What is UserCheck?

Which Autonomous Threat Prevention profile uses sanitization technology?

URL Filtering employs a technology, which educates users on web usage policy in real time. What is the name of that technology?

You want to set up a VPN tunnel to an external gateway. You had to make sure that the IKE P2 SA will only be established between two subnets and not all subnets defined in the defa...