156-215.81 Exam Questions
690 real 156-215.81 exam questions with expert-verified answers and explanations. Page 1 of 14.
- Question #1VPN
Which of the following is NOT an integral part of VPN communication within a network?
VPN communityVPN domainVPN trust entitiesVPN components - Question #2Security Policy Management
Two administrators Dave and Jon both manage R80 Management as administrators for Alpha Corp. Jon logged into the R80 Management and then shortly after Dave logged in to the same se...
R80 SmartConsolepublish changesconcurrent administratorssession management - Question #3Deployment and Configuration
Vanessa is firewall administrator in her company; her company is using Check Point firewalls on central and remote locations, which are managed centrally by R80 Security Management...
SICencryptiongateway compatibilityversion support - Question #4
Review the following screenshot and select the BEST answer.
- Question #5Traffic Management
Which of the following is NOT a SecureXL traffic flow?
SecureXLtraffic flowacceleration pathsperformance - Question #6Network Address Translation (NAT)
Which of the following Automatically Generated Rules NAT rules have the lowest implementation priority?
NATauto-generated rulesrule priorityhide NAT - Question #7VPN
Fill in the blanks: VPN gateways authenticate using ___________ and ___________ .
VPN authenticationcertificatespre-shared secrets - Question #8Security Policy Management
In R80 spoofing is defined as a method of:
IP spoofinganti-spoofingpacket inspection - Question #9
Fill in the blank: The __________ is used to obtain identification and security information about network users.
- Question #10Check Point Technology Overview
Which Check Point feature enables application scanning and the detection?
AppWikiapplication controlapplication detection - Question #11Policy Management
DLP and Geo Policy are examples of what type of Policy?
DLPGeo Policyshared policiespolicy types - Question #12Deployment
In which deployment is the security management server and Security Gateway installed on the same appliance?
standalone deploymentdeployment modessecurity management server - Question #13VPN
Fill in the blank: A _________ VPN deployment is used to provide remote users with secure access to internal corporate resources by authenticating the user through an internet brow...
clientless VPNremote accessSSL VPNbrowser-based access - Question #14
Which of the following statements is TRUE about R80 management plug-ins?
- Question #15Deployment and Configuration
Fill in the blank: Gaia can be configured using the _______ or ______ .
Gaia OSWebUICLIconfiguration methods - Question #16ClusterXL High Availability
Where can you trigger a failover of the cluster members? Log in to Security Gateway CLI and run command clusterXL_admin down. In SmartView Monitor right-click the Security Gateway...
ClusterXLfailovercluster admin commandshigh availability - Question #17Deployment and Configuration
Which utility allows you to configure the DHCP service on GAIA from the command line?
DHCPGaia CLIsysconfignetwork configuration - Question #18VPN
Which VPN routing option uses VPN routing for every connection a satellite gateway handles?
VPN routingsatellite gatewaycenter gatewayVPN topology - Question #19Monitoring and Reporting
Which product correlates logs and detects security threats, providing a centralized display of potential attack patterns from all network devices?
SmartEventlog correlationthreat detectionSIEM - Question #20Policy Management
What will be the effect of running the following command on the Security Management Server?
security policymanagement server CLIpolicy removalfw commands - Question #21
An administrator is creating an IPsec site-to-site VPN between his corporate office and branch office. Both offices are protected by Check Point Security Gateway managed by the sam...
- Question #22Policy Management
Alpha Corp., and have recently returned from a training course on Check Point's new advanced R80 management platform. You are presenting an in-house R80 Management to the other adm...
R80 managementpublish sessionconcurrent administrationpolicy changes - Question #23ClusterXL High Availability
Which of the following ClusterXL modes uses a non-unicast MAC address for the cluster IP address.
ClusterXLload sharing multicastnon-unicast MACcluster modes - Question #24User Management and Authentication
Fill in the blank: With the User Directory Software Blade, you can create R80 user definitions on a(an) ___________ Server.
User DirectoryLDAPSoftware Bladeuser definitions - Question #25User Management and Authentication
Which of the following is NOT a component of a Distinguished Name?
Distinguished NamePKILDAP structureX.500 - Question #26
What are the three authentication methods for SIC?
- Question #27Security Gateway Troubleshooting
You have enabled "Full Log" as a tracking option to a security rule. However, you are still not seeing any data type information. What is the MOST likely reason?
full logData Awarenesslog troubleshootingdata types - Question #28Network Address Translation (NAT)
What is the order of NAT priorities?
NAT prioritiesstatic NAThide NATIP pool NAT - Question #29User Management and Authentication
Which of the following is an identity acquisition method that allows a Security Gateway to identify Active Directory users and computers?
Active Directory Queryidentity acquisitionuser identificationSecurity Gateway - Question #30
Ken wants to obtain a configuration lock from other administrator on R80 Security Management Server. He can do this via WebUI or a via CLI. Which command should be use in CLI? Choo...
- Question #31Policy Management
Examine the following Rule Base. What can we infer about the recent changes made to the Rule Base?
locked objectsconcurrent administratorsRule Basesession management - Question #32Deployment and Configuration
ALPHA Corp has a new administrator who logs into the Gaia Portal to make some changes. He realizes that even though he has logged in as an administrator, he is unable to make any c...
Gaia Portaldatabase lockconcurrent accessSSH session - Question #33Policy Management
Administrator Kofi has just made some changes on his Management Server and then clicks on the Publish button in SmartConsole but then gets the error message shown in the screenshot...
SmartConsolepublish errorsValidations sectionpolicy management - Question #34
You are working with multiple Security Gateways enforcing an extensive number of rules. To simplify security administration, which action would you choose?
- Question #35Security Policy Management
Harriet wants to protect sensitive information from intentional loss when users browse to a specific URL: https://personal.mymail.com, which blade will she enable to achieve her go...
DLPdata loss preventionsensitive informationblade selection - Question #36Policy Management
To optimize Rule Base efficiency the most hit rules should be where?
Rule Base optimizationrule orderinghit countperformance - Question #37
Which of the following is NOT a license activation method?
- Question #38Security Policy Management
Which policy type has its own Exceptions section?
Threat Preventionexceptionspolicy typesrule base - Question #39Deployment and Configuration
By default, which port does the WebUI listen on?
WebUIdefault portHTTPSGaia - Question #40
When doing a Stand-Alone Installation, you would install the Security Management Server with which other Check Point architecture component?
- Question #41User Management and Authentication
Which options are given on features, when editing a Role on Gaia Platform?
Gaia rolespermissionsRead/Writeaccess control - Question #42Monitoring and Reporting
What is the default time length that Hit Count Data is kept?
Hit Countdata retentionpolicy monitoringRule Base - Question #43Deployment and Configuration
Choose the Best place to find a Security Management Server backup file named backup_fw, on a Check Point Appliance.
backupfile pathcpbackuptgz - Question #44
With which command can view the running configuration of Gaia-based system.
- Question #45
Which of the following is TRUE regarding Gaia command line?
- Question #46Policy Management
If there are two administrators logged in at the same time to the SmartConsole, and there are objects locked for editing, what must be done to make them available to other administ...
session managementlocked objectspublish sessiondiscard session - Question #47Check Point Technology Overview
Which one of the following is the preferred licensing model? Select the Best answer.
central licensinglicense managementSecurity Management ServerIP address - Question #48Deployment and Configuration
Tom has been tasked to install Check Point R80 in a distributed deployment. Before Tom installs the systems this way, how many machines will he need if he does NOT include a SmartC...
distributed deploymentSecurity GatewayManagement Serverdeployment planning - Question #49Deployment and Configuration
Fill in the blank: A new license should be generated and installed in all of the following situations EXCEPT when ________ .
license managementlicense generationIP address changeSecurity Gateway - Question #50Deployment and Configuration
What is the default shell for the command line interface?
ClishCLIdefault shellGaia