156-915.80 Exam Questions

You enable Automatic Static NAT on an internal host node object with a private IP address of 10.10.10.5, which is NATed into 216.216.216.5. (You use the default settings in Global...

What are the three components for Check Point Capsule?

Fill in the blank: The R80 feature ________ permits blocking specific IP addresses for a specified time period.

You are a Security Administrator who has installed Security Gateway R80 on your network. You need to allow a specific IP address range for a partner site to access your intranet We...

What mechanism does a gateway configured with Identity Awareness and LDAP initially use to communicate with a Windows 2003 or 2008 server?

What gives administrators more flexibility when configuring Captive Portal instead of LDAP query for Identity Awareness authentication?

On R80.10 the IPS Blade is managed by:

How do you recover communications between your Security Management Server and Security Gateway if you lock yourself out through a rule or policy mis-configuration?

MegaCorp is using SmartCenter Server with several gateways. Their requirements result in a heavy log load. Would it be feasible to add the SmartEvent Correlation Unit and SmartEven...

Which file gives you a list of all security servers in use, including port number?

Captive Portal is a __________ that allows the gateway to request login information from the user.

SmartEvent does NOT use which of the following procedures to identify events?

You have configured Automatic Static NAT on an internal host-node object. You clear the box Translate destination on client site from Global Properties > NAT. Assuming all other NA...

Match the ClusterXL modes with their configurations.

How do you configure the Security Policy to provide user access to the Captive Portal through an external (Internet) interface?

To run GAiA in 64bit mode, which of the following is true? 1) Run set edition default 64-bit. 2) Install more than 4 GB RAM. 3) Install more than 4 TB of Hard Disk.

When migrating the SmartEvent data base from one server to another, the last step is to save the files on the new server. Which of the following commands should you run to save the...

You are MegaCorp's Security Administrator. There are various network objects which must be NATed. Some of them use the Automatic Hide NAT method, while others use the Automatic Sta...

You are trying to configure Directional VPN Rule Match in the Rule Base. But the Match column does not have the option to see the Directional Match. You see the following window. W...

If Jack was concerned about the number of log entries he would receive in the SmartReporter system, which policy would he need to modify?

Using mgmt_cli, what is the correct syntax to import a host object called Server_1 from the CLI?

Which directory below contains log files?

You find that Users are not prompted for authentication when they access their Web servers, even though you have created an HTTP rule via User Authentication. Choose the BEST reaso...

Which of the following is the preferred method for adding static routes in GAiA?

You are the Security Administrator for ABC-Corp. A Check Point Firewall is installed and in use on GAiA. You are concerned that the system might not be retaining your entries for t...

Several Security Policies can be used for different installation targets. The Firewall protecting Human Resources' servers should have its own Policy Package. These rules must be i...

You need to back up the routing, interface, and DNS configuration information from your R80 GAiA Security Gateway. Which backup-and-restore solution do you use?

Jennifer McHanry is CEO of ACME. She recently bought her own personal iPad. She wants use her iPad to access the internal Finance Web server. Because the iPad is not a member of th...

You are investigating issues with two gateway cluster members that are not able to establish the first initial cluster synchronization. What service is used by the FWD daemon to do...

SmartReporter reports can be used to analyze data from a penetration-testing regimen in all of the following examples, EXCEPT:

If you need strong protection for the encryption of user data, what option would be the BEST choice?

Your R80 primary Security Management Server is installed on GAiA. You plan to schedule the Security Management Server to run fw logswitch automatically every 48 hours. How do you c...

Access Role objects define users, machines, and network locations as:

Firewall policies must be configured to accept VRRP packets on the GAiA platform if it runs Firewall software. The Multicast destination assigned by the Internet Assigned Numbers A...

John Adams is an HR partner in the ACME organization. ACME IT wants to limit access to HR servers to a set of designated IP addresses to minimize malware infection and unauthorized...

Your organization maintains several IKE VPN's. Executives in your organization want to know which mechanism Security Gateway R80 uses to guarantee the authenticity and integrity of...

Before upgrading SecurePlatform to GAiA, you should create a backup. To save time, many administrators use the command backup. This creates a backup of the Check Point configuratio...

A snapshot delivers a complete GAiA backup. The resulting file can be stored on servers or as a local file in /var/CPsnapshot/snapshots. How do you restore a local snapshot named M...

Which Check Point address translation method allows an administrator to use fewer ISP- assigned IP addresses than the number of internal hosts requiring Internet connectivity?

Your company is running Security Management Server R80 on GAiA, which has been migrated through each version starting from Check Point 4.1. How do you add a new administrator accou...

Where do you verify that UserDirectory is enabled?

Sticky Decision Function (SDF) is required to prevent which of the following? Assume you set up an Active-Active cluster.

What is the officially accepted diagnostic tool for IP Appliance Support?

What is a feature that enables VPN connections to successfully maintain a private and secure VPN session without employing Stateful Inspection?

Which command collects diagnostic data for analyzing customer setup remotely?

An internal host initiates a session to the Google.com website and is set for Hide NAT behind the Security Gateway. The initiating traffic is an example of __________.

You are about to integrate RSA SecurID users into the Check Point infrastructure. What kind of users are to be defined via SmartDashboard?

You have created a Rule Base for firewall, websydney. Now you are going to create a new policy package with security and address translation rules for a second Gateway. What is TRU...

John is configuring a new R80 Gateway cluster but he can not configure the cluster as Third Party IP Clustering because this option is not available in Gateway Cluster Properties....

What is the purpose of Priority Delta in VRRP?