156-215.81.20 Exam Questions

Can Check Point and Third-party Gateways establish a certificate-based Site-to-Site VPN tunnel?

Which tool allows you to monitor the top bandwidth on smart console?

Where can alerts be viewed?

Which product correlates logs and detects security threats, providing a centralized display of potential attack patterns from all network devices?

In the Check Point Security Management Architecture, which component(s) can store logs?

Which of the following is NOT a tracking log option in R81.x?

What makes log queries faster?

Which information is included in the "Extended Log" tracking option, but is not included in the "Log" tracking option?

How many layers make up the TCP/IP model?

What is the user ID of a user that have all the privileges of a root user?

In SmartEvent, a correlation unit (CU) is used to do what?

Choose what BEST describes users on Gaia Platform.

What is the purpose of a Stealth Rule?

Gaia has two default user accounts that cannot be deleted. What are those user accounts?

Which Threat Prevention Software Blade provides comprehensive protection against malicious and unwanted network traffic, focusing on application and server vulnerabilities?

You had setup the VPN Community 'VPN-Stores' with 3 gateways. There are some issues with one remote gateway(1.1.1.1) and an your local gateway. What will be the best log filter to...

Which Security Blade needs to be enabled in order to sanitize and remove potentially malicious content from files, before those files enter the network?

John is the administrator of a Security Management server managing a Check Point Security Gateway. John is currently updating the network objects and amending the rules using Smart...

To provide updated malicious data signatures to all Threat Prevention blades, the Threat Prevention gateway does what with the data?

Which of the following is TRUE regarding Gaia command line?

When connected to the Check Point Management Server using the SmartConsole, the first administrator to connect has a lock on:

When you upload a package or license to the appropriate repository in SmartUpdate, where is the package or license stored?

Security Gateway software blades must be attached to what?

Which of the following is NOT supported by Bridge Mode on the Check Point Security Gateway?

Secure Internal Communication (SIC) is handled by what process?

Which of the following licenses are considered temporary?

What technologies are used to deny or permit network traffic?

When using Automatic Hide NAT, what is enabled by default?

Fill in the blank: The _____________ feature allows administrators to share a policy with other policy packages.

Name the utility that is used to block activities that appear to be suspicious?

What is a role of Publishing?

A network administrator has informed you that they have identified a malicious host on the network, and instructed you to block it. Corporate policy dictates that firewall policy c...

What is NOT an advantage of Stateful Inspection?

From the GAiA Portal, which of the following operations CANNOT be performed on a Security Management Server?

AdminA and AdminB are both logged into SmartConsole. What does it mean if AdminB sees a lock icon on a rule? (Choose the best answer.)

Which of the following is true about Stateful Inspection?

Aggressive Mode in iKEv1 uses how many packages for negotiation?

Bob and Joe both have Administrator Roles on their Gaia Platform. Bob logs in on the WebUI and then Joe logs in through CLI. Choose what BEST describes the following scenario, wher...

What does the 'unknown' SIC status shown on SmartConsole mean?

When comparing Stateful Inspection and Packet Filtering, what is a benefit that Stateful Inspection offers over Packer Filtering?

A stateful inspection firewall works by registering connection data and compares traffic to this information. Where is the information stored?

You have discovered suspicious activity in your network. What is the BEST immediate action to take?

Where can the administrator edit a list of trusted SmartConsole clients?

Fill in the blank: The_____is used to obtain identification and security information about network users.

Fill in the blank: An identity server uses a______________to trust a Terminal Server Identity Agent.

Stateful Inspection compiles and registers connections where?

Security Zones do no work with what type of defined rule?

Most Check Point deployments use Gaia but which product deployment utilizes special Check Point code (with unification in R81.10)?

Which default Gaia user has full read/write access?

Which icon in the WebUI indicates that read/write access is enabled?