156-215.81 Exam Questions

Which of the following is NOT supported by Bridge Mode Check Point Security Gateway

Which option, when applied to a rule, allows all encrypted and non-VPN traffic that matches the rule?

In which scenario is it a valid option to transfer a license from one hardware device to another?

Fill in the blanks: A ____ license requires an administrator to designate a gateway for attachment whereas a _____ license is automatically attached to a Security Gateway.

Which of the following is NOT a valid configuration screen of an Access Role Object?

What is the purpose of the Stealth Rule?

What key is used to save the current CPView page in a filename format cpview_"cpview process ID". cap"number of captures"?

Fill in the blank: It is Best Practice to have a _____ rule at the end of each policy layer.

The ______ software blade package uses CPU-level and OS-level sandboxing in order to detect and block malware.

Fill in the blank: Once a certificate is revoked from the Security GateWay by the Security Management Server, the certificate information is _______.

Which type of attack can a firewall NOT prevent?

R80 is supported by which of the following operating systems:

What Check Point technologies deny or permit network traffic?

How do you manage Gaia?

What licensing feature is used to verify licenses and activate new licenses added to the License and Contracts repository?

The "Hit count" feature allows tracking the number of connections that each rule matches. Will the Hit count feature work independently from logging and Track the hits even if the...

How many layers make up the TCP/IP model?

Which of the following is used to enforce changes made to a Rule Base?

What is UserCheck?

When doing a Stand-Alone Installation, you would install the Security Management Server with which other Check Point architecture component?

Fill in the blank: An Endpoint identity agent uses a ___________ for user authentication.

What is the purpose of a Stealth Rule?

To view the policy installation history for each gateway, which tool would an administrator use?

Which SmartConsole tab shows logs and detects security threats, providing a centralized display of potential attack patterns from all network devices?

Which of the following is NOT a valid deployment option for R80?

You have created a rule at the top of your Rule Base to permit Guest Wireless access to the Internet. However, when guest users attempt to reach the Internet, they are not seeing t...

Identity Awareness allows the Security Administrator to configure network access based on which of the following?

Which option will match a connection regardless of its association with a VPN community?

Which of the following is NOT a tracking log option in R80.x?

Which information is included in the "Extended Log" tracking option, but is not included in the "Log" tracking option?

Where is the "Hit Count" feature enabled or disabled in SmartConsole?

Which tool is used to enable cluster membership on a Gateway?

Which key is created during Phase 2 of a site-to-site VPN?

Each cluster, at a minimum, should have at least ___________ interfaces.

Examine the sample Rule Base. What will be the result of a verification of the policy from SmartConsole?

You are the Check Point administrator for Alpha Corp. You received a call that one of the users is unable to browse the Internet on their new tablet which is connected to the compa...

What is a role of Publishing?

Which software blade enables Access Control policies to accept, drop, or limit web site access based on user, group, and/or machine?

____________ is the Gaia command that turns the server off.

Which option in a firewall rule would only match and allow traffic to VPN gateways for one Community in common?

Which SmartConsole tab is used to monitor network and security performance?

When Identity Awareness is enabled, which identity source(s) is(are) used for Application Control?

Which of the following is NOT a policy type available for each policy package?

An administrator is creating an IPsec site-to-site VPN between his corporate office and branch office. Both offices are protected by Check Point Security Gateway managed by the sam...

Which of the following technologies extracts detailed information from packets and stores that information in state tables?

What object type would you use to grant network access to an LDAP user group?

View the rule below. What does the pen-symbol in the left column mean?

What data MUST be supplied to the SmartConsole System Restore window to restore a backup?

Which repositories are installed on the Security Management Server by SmartUpdate?

Which back up method uses the command line to create an image of the OS?