156-215.81 Exam Questions

Office mode means that:

Administrator wishes to update IPS from SmartConsole by clicking on the option "update now" under the IPS tab. Which device requires internet access for the update to work?

Jack works for a managed service provider and he has been tasked to create 17 new policies for several new customers. He does not have much time. What is the BEST way to do this wi...

When Identity Awareness is enabled, which identity source(s) is(are) used for Application Control?

Which of the following is NOT a back up method?

Which of the following is NOT an advantage to using multiple LDAP servers?

Which Check Point software blade prevents malicious files from entering a network using virus signatures and anomaly-based protections from ThreatCloud?

What is the default method for destination NAT?

Choose what BEST describes a Session.

Which of the following is NOT a VPN routing option available in a star community?

What is the default shell of Gaia CLI?

Which of the following licenses are considered temporary?

Where can administrator edit a list of trusted SmartConsole clients in R80?

Fill in the blanks: In the Network policy layer, the default action for the Implied last rule is ________ all traffic. However, in the Application Control policy layer, the default...

Vanessa is a Firewall administrator. She wants to test a backup of her company's production Firewall cluster Dallas_GW. She has a lab environment that is identical to her productio...

On the following picture an administrator configures Identity Awareness: After clicking "Next" the above configuration is supported by:

What does it mean if Bob gets this result on an object search?Refer to the image below. Choose the BEST answer.

Why would an administrator see the message below?

Fill in the blank: The _________ software blade enables Application Security policies to allow, block, or limit website access based on user, group, and machine identities.

At what point is the Internal Certificate Authority (ICA) created?

In which VPN community is a satellite VPN gateway not allowed to create a VPN tunnel with another satellite VPN gateway?

Which information is included in the "Full Log" tracking option, but is not included in the "Log" tracking option?

In the R80 SmartConsole, on which tab are Permissions and Administrators defined?

Which type of Endpoint Identity Agent includes packet tagging and computer authentication?

Fill in the blanks: The Application Layer Firewalls inspect traffic through the ________ layer(s) of the TCP/IP model and up to and including the ________ layer.

There are two R77.30 Security Gateways in the Firewall Cluster. They are named FW_A and FW_B. The cluster is configured to work as HA (High availability) with default cluster confi...

After the initial installation the First Time Configuration Wizard should be run. Select the BEST answer.

In order to modify Security Policies the administrator can use which of the following tools?Select the BEST answer.

Which of the following is NOT an element of VPN Simplified Mode and VPN Communities?

Fill in the blanks: A Check Point software license consists of a _______ and _______ .

Fill in the blank: Once a license is activated, a ________ should be installed.

Which policy type is used to enforce bandwidth and traffic control rules?

Bob and Joe both have Administrator Roles on their Gaia Platform. Bob logs in on the WebUI and then Joe logs in through CLI. Choose what BEST describes the following scenario, wher...

Fill in the blank: When LDAP is integrated with Check Point Security Management, it is then referred to as _______

Which Check Point software blade provides protection from zero-day and undiscovered threats?

Which of the completed statements is NOT true?The WebUI can be used to manage user accounts and:

Look at the following screenshot and select the BEST answer.

Fill in the blanks: A security Policy is created in _________ , stored in the _________ , and Distributed to the various __________ .

Look at the screenshot below. What CLISH command provides this output?

Which authentication scheme requires a user to possess a token?

If there is an Accept Implied Policy set to "First", what is the reason Jorge cannot see any logs?

The most important part of a site-to-site VPN deployment is the ________ .

R80 Security Management Server can be installed on which of the following operating systems?

What port is used for delivering logs from the gateway to the management server?

The organization's security manager wishes to back up just the Gaia operating system parameters. Which command can be used to back up only Gaia operating system parameters like int...

Choose what BEST describes users on Gaia Platform.

You are going to upgrade from R77 to R80. Before the upgrade, you want to back up the system so that, if there are any problems, you can easily restore to the old version with all...

The IT Management team is interested in the new features of the Check Point R80 Management and wants to upgrade but they are concerned that the existing R77.30 Gaia Gateways cannot...

Provide very wide coverage for all products and protocols, with noticeable performance impact. How could you tune the profile in order to lower the CPU load still maintaining secur...

Fill in the blank: A _______ is used by a VPN gateway to send traffic as if it were a physical interface.