156-315.81 Exam Questions

Fill in the blank: Permanent VPN tunnels can be set on all tunnels in the community, on all tunnels for specific gateways, or ______ .

True or False: In a Distributed Environment, a Central License can be installed via CLI on a Security Gateway.

In which VPN community is a satellite VPN gateway not allowed to create a VPN tunnel with another satellite VPN gateway?

When a packet arrives at the gateway, the gateway checks it against the rules in the hop Policy Layer, sequentially from top to bottom, and enforces the first rule that matches a p...

Which of the following is an identity acquisition method that allows a Security Gateway to identify Active Directory users and computers?

Why would an administrator see the message below?

Which command is used to add users to or from existing roles?

Which option, when applied to a rule, allows traffic to VPN gateways in specific VPN communities?

Fill in the blank: An identity server uses a __________ for user authentication.

In SmartConsole, objects are used to represent physical and virtual network components and also some logical components. These objects are divided into several categories. Which of...

Which of the following blades is NOT subscription-based and therefore does not have to be renewed on a regular basis?

Fill in the blank: __________ information is included in "Full Log" tracking option, but is not included in "Log" tracking option?

Which options are given on features, when editing a Role on Gaia Platform?

Fill in the blanks: Gaia can be configured using the ______ or _____ .

What is the purpose of the CPCA process?

What is the default shell of Gaia CLI?

You have created a rule at the top of your Rule Base to permit Guest Wireless access to the Internet. However, when guest users attempt to reach the Internet, they are not seeing t...

Fill in the blank: A new license should be generated and installed in all of the following situations EXCEPT when ________ .

Which Check Point software blade provides protection from zero-day and undiscovered threats?

If there are two administration logged in at the same time to the SmartConsole, and there are objects locked for editing, what must be done to make them available or other administ...

Fill in the blanks: A _______ license requires an administrator to designate a gateway for attachment whereas a ________ license is automatically attached to a Security Gateway.

An administrator is creating an IPsec site-to-site VPN between his corporate office and branch office. Both offices are protected by Check Point Security Gateway managed by the sam...

Fill in the blank: Authentication rules are defined for ________ .

How is communication between different Check Point components secured in R81? As with all questions, select the BEST answer.

You work as a security administrator for a large company. CSO of your company has attended a security conference where he has learnt how hackers constantly modify their strategies...

You have enabled "Full Log" as a tracking option to a security rule. However, you are still not seeing any data type information. What is the MOST likely reason?

What are the two high availability modes?

Which feature is NOT provided by all Check Point Mobile Access solutions?

Which of the following is NOT a type of Endpoint Identity Agent?

What can we infer about the recent changes made to the Rule Base?

In the R81 SmartConsole, on which tab are Permissions and Administrators defined?

Fill in the blank: A ________ VPN deployment is used to provide remote users with secure access to internal corporate resources by authenticating the user through an internet brows...

What needs to be configured if the NAT property `Translate destination or client side' is not enabled in Global Properties?

At what point is the Internal Certificate Authority (ICA) created?

Which pre-defined Permission Profile should be assigned to an administrator that requires full access to audit all configurations without modifying them?

When Identity Awareness is enabled, which identity source(s) is(are) used for Application Control?

True or False: In R81, more than one administrator can login to the Security Management Server with write permission at the same time.

Which utility allows you to configure the DHCP service on Gaia from the command line?

There are two R77.30 Security Gateways in the Firewall Cluster. They are named FW_A and FW_B. The cluster is configured to work as HA (High availability) with default cluster confi...

DLP and Geo Policy are examples of what type of Policy?

Fill in the blank: The IPS policy for pre-R81 gateways is installed during the _______ .

How many users can have read/write access in Gaia at one time?

Which software blade does NOT accompany the Threat Prevention policy?

Check Point ClusterXL Active/Active deployment is used when:

To optimize Rule Base efficiency, the most hit rules should be where?

What two ordered layers make up the Access Control Policy Layer?

Fill in the blanks: In the Network policy layer, the default action for the Implied last rule is ____ all traffic. However, in the Application Control policy layer, the default act...

Which command is used to obtain the configuration lock in Gaia?

What is the default shell for the command line interface?

You plan to automate creating new objects using new R81 Management API. You decide to use GAIA CLI for this task. What is the first step to run management API commands on GAIA's sh...