156-215.81 Exam Questions

Customer's R80 management server needs to be upgraded to R80.10. What is the best upgrade method when the management server is not connected to the Internet?

SmartEvent does NOT use which of the following procedures to identity events:

John is using Management HA. Which Smartcenter should be connected to for making changes?

Which path below is available only when CoreXL is enabled?

Which of the following describes how Threat Extraction functions?

The SmartEvent R80 Web application for real-time event monitoring is called:

SandBlast offers flexibility in implementation based on their individual business needs. What is an option for deployment of Check Point SandBlast Zero-Day Protection?

What SmartEvent component creates events?

Which Threat Prevention Profile is not included by default in R80 Management?

When using Monitored circuit VRRP, what is a priority delta?

Which of the following is NOT an option to calculate the traffic direction?

When an encrypted packet is decrypted, where does this happen?

Which of the following is NOT a component of Check Point Capsule?

You have successfully backed up your Check Point configurations without the OS information. What command would you use to restore this backup?

What is the best sync method in the ClusterXL deployment?

Can multiple administrators connect to a Security Management Server at the same time?

What Identity Agent allows packet tagging and computer authentication?

In Logging and Monitoring, the tracking options are Log, Detailed Log and Extended Log. Which of the following options can you add to each Log, Detailed Log and Extended Log?

You noticed that CPU cores on the Security Gateway are usually 100% utilized and many packets were dropped. You don't have a budget to perform a hardware upgrade at this time. To o...

Which two of these Check Point Protocols are used by _____ ?

To ensure that VMAC mode is enabled, which CLI command you should run on all cluster members? Choose the best answer.

What is the SOLR database for?

Which of the following commands is used to monitor cluster members?

Fill in the blank: Service blades must be attached to a ______________.

Fill in the blank: An LDAP server holds one or more ______________.

Fill in the blank: In Security Gateways R75 and above, SIC uses ______________ for encryption.

What protocol is specifically used for clustered environments?

Which of the following is NOT a tracking option? (Select three)

Which command shows the installed licenses?

Of all the Check Point components in your network, which one changes most often and should be backed up most frequently?

Which option would allow you to make a backup copy of the OS and Check Point configuration, without stopping Check Point processes?

What is the Transport layer of the TCP/IP model responsible for?

What needs to be configured if the NAT property `Translate destination on client side' is not enabled in Global properties?

In the Check Point Security Management Architecture, which component(s) can store logs?

Fill in the blank: In order to install a license, it must first be added to the ____________.

When logging in for the first time to a Security management Server through SmartConsole, a fingerprint is saved to the:

Fill in the blank: By default, the SIC certificates issued by R80 Management Server are based on the ____________ algorithm.

Which message indicates IKE Phase 2 has completed successfully?

Administrator Dave logs into R80 Management Server to review and makes some rule changes. He notices that there is a padlock sign next to the DNS rule in the Rule Base. What is the...

Fill in the blank: When tunnel test packets no longer invoke a response, SmartView Monitor displays _____________ for the given VPN tunnel.

Which of the following is the most secure means of authentication?

What is the BEST command to view configuration details of all interfaces in Gaia CLISH?

Fill in the blank: Authentication rules are defined for ____________.

Which tool provides a list of trusted files to the administrator so they can specify to the Threat Prevention blade that these files do not need to be scanned or analyzed?

Which of the following is an authentication method used for Identity Awareness?

The SIC Status "Unknown" means

What is a reason for manual creation of a NAT rule?

Which of the following commands is used to verify license installation?

To enforce the Security Policy correctly, a Security Gateway requires:

Which configuration element determines which traffic should be encrypted into a VPN tunnel vs. sent in the clear?