156-215.81 Exam Questions

Fill in the blank: The ________ feature allows administrators to share a policy with other policy packages.

You want to define a selected administrator's permission to edit a layer. However, when you click the + sign in the "Select additional profile that will be able edit this layer" yo...

Which of the following is NOT an alert option?

Fill in the blanks: A High Availability deployment is referred to as a ______ cluster and a Load Sharing deployment is referred to as a ________ cluster.

AdminA and AdminB are both logged in on SmartConsole. What does it mean if AdminB sees a locked icon on a rule?Choose the BEST answer.

Which of the following is TRUE about the Check Point Host object?

Which of the following is NOT a set of Regulatory Requirements related to Information Security?

Which command is used to obtain the configuration lock in Gaia?

Joey is using the computer with IP address 192.168.20.13. He wants to access web page many rules on Check Point Firewall are required for this connection?

Fill in the blank: Licenses can be added to the License and Contract repository ________ .

Fill in the blank: A(n) _____ rule is created by an administrator and is located before the first and before last rules in the Rule Base.

Fill in the blank: The IPS policy for pre-R80 gateways is installed during the _______ .

Fill in the blank: RADIUS Accounting gets ______ data from requests generated by the accounting client

Fill in the blank: The R80 SmartConsole, SmartEvent GUI client, and _______ consolidate billions of logs and shows them as prioritized security events.

Which Check Point software blade provides visibility of users, groups and machines while also providing access control through identity-based policies?

How many users can have read/write access in Gaia at one time?

Which SmartConsole component can Administrators use to track changes to the Rule Base?

UDP packets are delivered if they are ___________.

The INSPECT engine inserts itself into the kernel between which two OSI model layers?

What is a Consolidation Policy?

Which of the following statements regarding SecureXL and CoreXL is TRUE?

Of the three mechanisms Check Point uses for controlling traffic, which enables firewalls to incorporate layer 4 awareness in packet inspection?

Which of the following statements about Bridge mode is TRUE?

Which SmartConsole component can Administrators use to track remote administrative activities?

UDP packets are delivered if they are _________.

The Check Point Security Gateway's virtual machine (kernel) exists between which two layers of the OSI model?

You are a security architect and need to design a secure firewall, VPN and IPS solution. Where would be the best place to install IPS in the topology if the internal network is alr...

You are running the Security Gateway on SecurePlatform and configure SNX with default settings. The client fails to connect to the Security Gateway. What is wrong?

The Internal Certificate Authority (ICA) CANNOT be used for:

The command fw fetch causes the:

Using the output below, what type of VPN Community is configured for fw-stlouis?

Which of the following is NOT supported with office mode?

Which of the following SSL Network Extender server-side prerequisites is NOT correct?

You wish to configure an IKE VPN between two R75 Security Gateways, to protect two networks. The network behind one Gateway is 10.1(5)0.0/16, and network 19(2)168.9.0/24 is behind...

Sally has a Hot Fix Accumulator (HFA) she wants to install on her Security Gateway which operates with GAiA, but she cannot SCP the HFA to the system. She can SSH into the Security...

John Adams is an HR partner in the ACME organization. ACME IT wants to limit access to HR servers to designated IP addresses to minimize malware infection and unauthorized access r...

Which feature in R77 permits blocking specific IP addresses for a specified time period?

MyCorp has the following NAT rules. You need to disable the NAT function when Alpha-internal networks try to reach the Google DNS (8.8.8.8) server. What can you do in this case?

What is the potential downside or drawback to choosing the Standalone deployment option instead of the Distributed deployment option?

Which of the following statements accurately describes the command snapshot?

The Captive Portal tool:

Where do we need to reset the SIC on a gateway object?

Anti-Spoofing is typically set up on which object type?

What happens if the identity of a user is known?

Message digests use which of the following?

When using LDAP as an authentication method for Identity Awareness, the query:

You are conducting a security audit. While reviewing configuration files and logs, you notice logs accepting POP3 traffic, but you do not see a rule allowing POP3 traffic in the Ru...

What action can be performed from SmartUpdate R77?

Your manager requires you to setup a VPN to a new business partner site. The administrator from the partner site gives you his VPN settings and you notice that he setup AES 128 for...

Choose the SmartLog property that is TRUE.