Download CheckPoint 156-215.81 Exam Engine Online

NEW QUESTION 1
In which scenario is it a valid option to transfer a license from one hardware device to another?

• A. From a 4400 Appliance to a 2200 Appliance
• B. From a 4400 Appliance to an HP Open Server
• C. From an IBM Open Server to an HP Open Server
• D. From an IBM Open Server to a 2200 Appliance

Answer: A

Explanation:
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=

NEW QUESTION 2
Which of the following is NOT supported by Bridge Mode Check Point Security Gateway

• A. Antivirus
• B. Data Loss Prevention
• C. NAT
• D. Application Control

Answer: C

NEW QUESTION 3
Which is a suitable command to check whether Drop Templates are activated or not?

• A. fw ctl get int activate_drop_templates
• B. fwaccel stat
• C. fwaccel stats
• D. fw ctl templates –d

Answer: B

NEW QUESTION 4
Fill in the blank: Authentication rules are defined for ______.

• A. User groups
• B. Users using UserCheck
• C. Individual users
• D. All users in the database

Answer: A

NEW QUESTION 5
Why is a Central License the preferred and recommended method of licensing?

• A. Central Licensing is actually not supported with Gaia.
• B. Central Licensing is the only option when deploying Gaia
• C. Central Licensing ties to the IP address of a gateway and can be changed to any gateway if needed.
• D. Central Licensing ties to the IP address of the management server and is not dependent on the IP of any gateway in the event it changes.

Answer: D

Explanation:
https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_ThreatPrevention_AdminGuide/To

NEW QUESTION 6
What licensing feature is used to verify licenses and activate new licenses added to the License and Contracts repository?

• A. Verification tool
• B. Verification licensing
• C. Automatic licensing
• D. Automatic licensing and Verification tool

Answer: D

NEW QUESTION 7
When changes are made to a Rule base, it is important to _______ to enforce changes.

• A. Publish database
• B. Activate policy
• C. Install policy
• D. Save changes

Answer: C

NEW QUESTION 8
Fill in the blank: Permanent VPN tunnels can be set on all tunnels in the community, on all tunnels for specific gateways, or _______.

• A. On all satellite gateway to satellite gateway tunnels
• B. On specific tunnels for specific gateways
• C. On specific tunnels in the community
• D. On specific satellite gateway to central gateway tunnels

Answer: C

Explanation:
Each VPN tunnel in the community may be set to be a Permanent Tunnel. Since Permanent Tunnels are constantly monitored, if the VPN tunnel is down, then a log, alert, or user defined action, can be issued. A VPN tunnel is monitored by periodically sending "tunnel test" packets. As long as responses to the packets are received the VPN tunnel is considered "up." If no response is received within a given time period, the VPN tunnel is considered "down." Permanent Tunnels can only be established between Check Point Security Gateways. The configuration of Permanent Tunnels takes place on the community level and:

NEW QUESTION 9
When should you generate new licenses?

• A. Before installing contract files.
• B. After an RMA procedure when the MAC address or serial number of the appliance changes.
• C. When the existing license expires, license is upgraded or the IP-address where the license is tied changes.
• D. Only when the license is upgraded.

Answer: C

NEW QUESTION 10
Which default Gaia user has full read/write access?

• A. admin
• B. superuser
• C. monitor
• D. altuser

Answer: A

Explanation:
Has full read/write capabilities for all Gaia features, from the Gaia Portal and the Gaia Clish. This user has a User ID of 0, and therefore has all of the privileges of a root user. monitor Has read-only capabilities for all features in the Gaia Portal and the Gaia Clish, and can change its own password. You must give a password for this user before the account can be used.

NEW QUESTION 11
Which application is used for the central management and deployment of licenses and packages?

• A. SmartProvisioning
• B. SmartLicense
• C. SmartUpdate
• D. Deployment Agent

Answer: C

NEW QUESTION 12
After trust has been established between the Check Point components, what is TRUE about name and IP-address changes?

• A. Security Gateway IP-address cannot be changed without re-establishing the trust
• B. The Security Gateway name cannot be changed in command line without re-establishing trust
• C. The Security Management Server name cannot be changed in SmartConsole without re-establishing trust
• D. The Security Management Server IP-address cannot be changed without re-establishing the trust

Answer: A

NEW QUESTION 13
Which of the following is considered to be the more secure and preferred VPN authentication method?

• A. Password
• B. Certificate
• C. MD5
• D. Pre-shared secret

Answer: B

Explanation:
References:

NEW QUESTION 14
Which SmartConsole tab shows logs and detects security threats, providing a centralized display of potential attack patterns from all network devices?

• A. Gateway and Servers
• B. Logs and Monitor
• C. Manage Seeting
• D. Security Policies

Answer: B

NEW QUESTION 15
A SAM rule Is implemented to provide what function or benefit?

• A. Allow security audits.
• B. Handle traffic as defined in the policy.
• C. Monitor sequence activity.
• D. Block suspicious activity.

Answer: D

Explanation:
https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_LoggingAndMonitoring_AdminGu

NEW QUESTION 16
You are going to perform a major upgrade. Which back up solution should you use to ensure your database can be restored on that device?

• A. backup
• B. logswitch
• C. Database Revision
• D. snapshot

Answer: D

Explanation:
The snapshot creates a binary image of the entire root (lv_current) disk partition. This includes Check Point products, configuration, and operating system.
Starting in R77.10, exporting an image from one machine and importing that image on another machine of the same type is supported.
The log partition is not included in the snapshot. Therefore, any locally stored FireWall logs will not be save

NEW QUESTION 17
What is a reason for manual creation of a NAT rule?

• A. In R80 all Network Address Translation is done automatically and there is no need for manually defined NAT-rules.
• B. Network Address Translation of RFC1918-compliant networks is needed to access the Internet.
• C. Network Address Translation is desired for some services, but not for others.
• D. The public IP-address is different from the gateway’s external IP

Answer: D

NEW QUESTION 18
John is the administrator of a R80 Security Management server managing r R77.30 Check Point Security Gateway. John is currently updating the network objects and amending the rules using SmartConsole. To make John’s changes available to other administrators, and to save the database before installing a policy, what must John do?

• A. Logout of the session
• B. File > Save
• C. Install database
• D. Publish the session

Answer: D

Explanation:
Installing and Publishing
It is important to understand the differences between publishing and installing. You must do this:
After you did this: Publish
Opened a session in SmartConsole and made changes.
The Publish operation sends all SmartConsole modifications to other administrators, and makes the changes you made in a private session public.
Install the database
Modified network objects, such as servers, users, services, or IPS profiles, but not the Rule Base. Updates are installed on management servers and log servers.
Install a policy Changed the Rule Base.
The Security Management Server installs the updated policy and the entire database on Security Gateways (even if you did not modify any network objects).

NEW QUESTION 19
......