156-215.81 Exam Questions

Which directory holds the SmartLog index files by default?

To install a brand new Check Point Cluster, the MegaCorp IT department bought 1 Smart-1 and 2 Security Gateway Appliances to run a cluster. Which type of cluster is it?

Can a Check Point gateway translate both source IP address and destination IP address in a given packet?

Which of the following is NOT defined by an Access Role object?

You installed Security Management Server on a computer using GAiA in the MegaCorp home office. You use IP address 10.1.1.1. You also installed the Security Gateway on a second GAiA...

You want to reset SIC between smberlin and sgosaka. In SmartDashboard, you choose sgosaka, Communication, Reset. On sgosaka, you start cpconfig, choose Secure Internal Communicatio...

Which of these components does NOT require a Security Gateway R77 license?

What statement is true regarding Visitor Mode?

Mesh and Star are two types of VPN topologies. Which statement below is TRUE about these types of communities?

What CLI utility allows an administrator to capture traffic along the firewall inspection chain?

Your bank's distributed R77 installation has Security Gateways up for renewal. Which SmartConsole application will tell you which Security Gateways have licenses that will expire w...

NAT can NOT be configured on which of the following objects?

The fw monitor utility is used to troubleshoot which of the following problems?

You are the Security Administrator for MegaCorp. In order to see how efficient your firewall Rule Base is, you would like to see how many often the particular rules match. Where ca...

Study the Rule base and Client Authentication Action properties screen. After being authenticated by the Security Gateways, a user starts a HTTP connection to a Web site. What happ...

What are the three tabs available in SmartView Tracker?

In SmartView Tracker, which rule shows when a packet is dropped due to anti-spoofing?

Which SmartConsole component can Administrators use to track changes to the Rule Base?

Which set of objects have an Authentication tab?

Spoofing is a method of:

Which rule is responsible for the user authentication failure?

Which tool CANNOT be launched from SmartUpdate R77?

Which of the following is a hash algorithm?

Katie has been asked to do a backup on the Blue Security Gateway. Which command would accomplish this in the Gaia CLI?

You want to establish a VPN, using certificates. Your VPN will exchange certificates with an external partner. Which of the following activities sh you do first?

What must a Security Administrator do to comply with a management requirement to log all traffic accepted through the perimeter Security Gateway?

What is the appropriate default Gaia Portal address?

Your boss wants you to closely monitor an employee suspected of transferring company secrets to the competition. The IT department discovered the suspect installed a WinSCP client...

Match the following commands to their correct function. Each command has one function only listed.

Which of the following is NOT an option for internal network definition of Anti-spoofing?

MegaCorp's security infrastructure separates Security Gateways geographically. You must request a central license for one remote Security Gateway. How do you apply the license?

A digital signature:

According to Check Point Best Practice, when adding a 3rd party gateway to a Check Point security solution what object SHOULD be added? A(n):

You find a suspicious connection from a problematic host. You decide that you want to block everything from that whole network, not just the problematic host. You want to block thi...

When launching SmartDashboard, what information is required to log into R77?

A Cleanup rule:

You manage a global network extending from your base in Chicago to Tokyo, Calcutta and Dallas. Management wants a report detailing the current software level of each Enterprise cla...

Which of the below is the MOST correct process to reset SIC from SmartDashboard?

Which of the following authentication methods can be configured in the Identity Awareness setup wizard?

An internal router is sending UDP keep-alive packets that are being encapsulated with GRE and sent through your R77 Security Gateway to a partner site. A rule for GRE traffic is co...

Choose the correct statement regarding Implicit Rules.

You find that Users are not prompted for authentication when they access their Web servers, even though you have created an HTTP rule via User Authentication. Choose the BEST reaso...

You have two rules, ten users, and two user groups in a Security Policy. You create database version 1 for this configuration. You then delete two existing users and add a new user...

Which of the following are available SmartConsole clients which can be installed from the R77 Windows CD? Read all answers and select the most complete and valid list.

You have configured SNX on the Security Gateway. The client connects to the Security Gateway and the user enters the authentication credentials. What must happen after authenticati...

All R77 Security Servers can perform authentication with the exception of one. Which of the Security Servers can NOT perform authentication?

Your users are defined in a Windows 2008 R2 Active Directory server. You must add LDAP users to a Client Authentication rule. Which kind of user group do you need in the Client Aut...

What is Consolidation Policy?

Where do you verify that UserDirectory is enabled?

Which of the following actions do NOT take place in IKE Phase 1?