156-215.80 Practice Dumps - Verified By Lead2PassExam Updated 525 Questions
Updated 156-215.80 Exam Dumps - PDF Questions and Testing Engine
156-215.80 Exam topics
Candidates must know the exam topics before they start of preparation. Because it will really help them in hitting the core. Our 156-215.80 dumps will include the following topics:
- Monitoring Traffic and Connections
- User Management and Authentication
- Check Point Technology Overview
- Deployment Platforms and Security Policies
- Implementing Identify Awareness
- Network Address Translations
- Configuring VPN Tunnels
- Using Smart Update
CheckPoint 156-215.80 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
| Topic 6 |
|
| Topic 7 |
|
| Topic 8 |
|
| Topic 9 |
|
| Topic 10 |
|
| Topic 11 |
|
| Topic 12 |
|
| Topic 13 |
|
NEW QUESTION 274
Choose what BEST describes users on Gaia Platform.
- A. There is one default user that can be deleted.
- B. There are two default users that cannot be deleted and one SmartConsoleAdministrator.
- C. There is one default user that cannot be deleted.
- D. There are two default users and one cannot deleted.
Answer: D
Explanation:
Exlantion:These users are created by default and cannot be deleted:
NEW QUESTION 275
Which policy type has its own Exceptions section?
- A. Access Control
- B. Threat Emulation
- C. Thread Prevention
- D. Desktop Security
Answer: C
Explanation:
The Exceptions Groups pane lets you define exception groups. When necessary, you can createexception groups to use in the Rule Base. An exception group contains one or more defined exceptions. This option facilitates ease-of-use so you do not have to manually define exceptions in multiple rules for commonly required exceptions. You can choose towhich rules you want to add exception groups. This means they can be added to some rules and not to others, depending on necessity.
NEW QUESTION 276
On R80.10 when configuring Third-Party devices to read the logs using the LEA (Log Export API) the default Log Server uses port:
- A. 0
- B. 1
- C. 2
- D. 3
Answer: B
Explanation:
Explanation
References:
NEW QUESTION 277
Which tool is used to enable cluster membership on a Gateway?
- A. SmartConsole
- B. sysconfig
- C. SmartUpdate
- D. cpconfig
Answer: D
Explanation:
Explanation/Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_ClusterXL_WebAdminGuide/ html_frameset.htm?topic=documents/R77/CP_R77_ClusterXL_WebAdminGuide/161105
NEW QUESTION 278
What happens if the identity of a user is known?
- A. If the user credentials do not match an Access Role, the system displays a sandbox.
- B. If the user credentials match an Access Role, the rule is applied and traffic is accepted or dropped based on the defined action.
- C. If the user credentials do not match an Access Role, the system displays the Captive Portal.
- D. If the user credentials do not match an Access Role, the traffic is automatically dropped.
Answer: B
NEW QUESTION 279
Two administrators Dave and Jon both manage R80 Management as administrators for ABC Corp. Jon logged into the R80 Management and then shortly after Dave logged in to the same server. They are both in the Security Policies view. From the screenshots below, why does Dave not have the rule no.6 in his SmartConsole view even though Jon has it his in his SmartConsole view?
- A. Dave is currently editing rule no.6 and has deleted it from his Rule Base.
- B. Jon is currently editing rule no.6 but has Published part of his changes.
- C. Jon is currently editing rule no.6 but has not yet Published his changes.
- D. Dave is currently editing rule no.6 and has marked this rule for deletion.
Answer: C
Explanation:
When an administrator logs in to the Security Management Server through SmartConsole, a new editing session starts. The changes that the administrator makes during the session are only available to that administrator. Other administrators see a lock icon on object and rules that are being edited. To make changes available to all administrators, and to unlock the objects and rules that are being edited, the administrator must publish the session.
NEW QUESTION 280
Look at the screenshot below. What CLISH command provides this output?
- A. show configuration
- B. show configuration all
- C. show confd configuration
- D. show confd configuration all
Answer: A
Explanation:
Explanation/Reference:
Explanation:
Reference: http://dl3.checkpoint.com/paid/0c/0caa9c0daa67e0c1f2af3dd06790bc81/ CP_R77_Gaia_AdminGuide.pdf?HashKey=1479835768_76058f0fc4209e38bc801cd58a85d7c5&xtn=.pdf
NEW QUESTION 281
To ensure that VMAC mode is enabled, which CLI command you should run on all cluster members?
Choose the best answer.
- A. cphaprob -a if
- B. fw ctl get int fwha_vmac_global_param_enabled; result of command should return value 1
- C. fw ctl set int fwha vmac global param enabled
- D. fw ctl get int fwha vmac global param enabled; result of command should return value 1
Answer: D
Explanation:
Explanation/Reference:
Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_ClusterXL_AdminGuide/7292.htm
NEW QUESTION 282
Study the Rule base and Client Authentication Action properties screen.
After being authenticated by the Security Gateways, a user starts a HTTP connection to a Web site. What happens when the user tries to FTP to another site using the command line? The:
- A. FTP data connection is dropped after the user is authenticated successfully.
- B. user is prompted to authenticate from that FTP site only, and does not need to enter his username and password for Client Authentication
- C. user is prompted for authentication by the Security Gateways again.
- D. FTP connection is dropped by Rule 2.
Answer: B
NEW QUESTION 283
Which of the following is NOT a VPN routing option available in a star community?
- A. To center, or through the center to other satellites, to Internet and other VPN targets
- B. To center only
- C. To satellites through center only
- D. To center and to other satellites through center
Answer: B,C
Explanation:
Explanation/Reference:
Explanation:
SmartConsole
For simple hubs and spokes (or if there is only one Hub), the easiest way is to configure a VPN star community in R80 SmartConsole:
1. On the Star Community window, in the:
a. Center Gateways section, select the Security Gateway that functions as the "Hub".
b. Satellite Gateways section, select Security Gateways as the "spokes", or satellites.
2. On the VPN Routing page, Enable VPN routing for satellites section, select one of these options:
a. To center and to other Satellites through center - This allows connectivity between the Security Gateways, for example if the spoke Security Gateways are DAIP Security Gateways, and the Hub is a Security Gateway with a static IP address.
b. To center, or through the center to other satellites, to internet and other VPN targets - This allows connectivity between the Security Gateways as well as the ability to inspect all communication passing through the Hub to the Internet.
3. Create an appropriate Access Control Policy rule.
4. NAT the satellite Security Gateways on the Hub if the Hub is used to route connections from Satellites to the Internet.
The two Dynamic Objects (DAIP Security Gateways) can securely route communication through the Security Gateway with the static IP address.
Reference: https://sc1.checkpoint.com/documents/R80/CP_R80BC_VPN/html_frameset.htm
NEW QUESTION 284
What is the purpose of the CPCA process?
- A. Sending and receiving logs
- B. Generating and modifying certificates
- C. Monitoring the status of processes
- D. Communication between GUI clients and the SmartCenter server
Answer: B
Explanation:
Reference:https://supportcenter.checkpoint.com/supportcenter/portal?
eventSubmit_doGoviewsolutiondetails=&solutionid=sk97638
NEW QUESTION 285
When LDAP is integrated with Check Point Security Management, it is then referred to as _______
- A. User Directory
- B. UserCheck
- C. User Center
- D. User Administration
Answer: A
Explanation:
Explanation
Check Point User Directory integrates LDAP, and other external user management technologies, with the Check Point solution. If you have a large user count, we recommend that you use an external user management database such as LDAP for enhanced Security Management Server performance.
NEW QUESTION 286
What component of R80 Management is used for indexing?
- A. SOLR
- B. API Server
- C. fwm
- D. DBSync
Answer: A
Explanation:
Explanation/Reference:
Reference: https://www.checkpoint.com/downloads/product-related/r80.10-mgmt-architecture-overview.pdf
NEW QUESTION 287
Fill in the blank: ________information is included in the "Full Log" tracking option, but is not included in the "Log" tracking option?
- A. data type
- B. file attributes
- C. application
- D. destination port
Answer: A
Explanation:
Tracking Options
NEW QUESTION 288
Which of the following ClusterXL modes uses a non-unicast MAC address for the cluster IP address?
- A. Master/Backup
- B. Load Sharing Multicast
- C. Load Sharing Pivot
- D. High Availability
Answer: B
Explanation:
Explanation
ClusterXL uses the Multicast mechanism to associate the virtual cluster IP addresses with all cluster members.
By binding these IP addresses to a Multicast MAC address, it ensures that all packets sent to the cluster, acting as a gateway, will reach all members in the cluster.
NEW QUESTION 289
How many users can have read/write access in Gaia at one time?
- A. Two
- B. One
- C. Three
- D. Infinite
Answer: B
NEW QUESTION 290
What is the Transport layer of the TCP/IP model responsible for?
- A. It deals with all aspects of the physical components of network connectivity and connects with different network types.
- B. It defines the protocols that are used to exchange data between networks and how host programs interact with the Application layer.
- C. It transports packets as datagrams along different routes to reach their destination.
- D. It manages the flow of data between two hosts to ensure that the packets are correctly assembled and delivered to the target application.
Answer: D
Explanation:
Explanation
NEW QUESTION 291
Fill in the blanks: A High Availability deployment is referred to as a ______ cluster and a Load Sharing deployment is referred to as a ________ cluster.
- A. Standby/standby; active/active
- B. Active/standby; active/active
- C. Active/active; standby/standby
- D. Active/active; active/standby;
Answer: B
Explanation:
Explanation/Reference:
Explanation: In a High Availability cluster, only one member is active (Active/Standby operation).
ClusterXL Load Sharing distributes traffic within a cluster so that the total throughput of multiple members is increased. In Load Sharing configurations, all functioning members in the cluster are active, and handle network traffic (Active/Active operation).
Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_ClusterXL_WebAdminGuide/7292.htm
NEW QUESTION 292
What are the two types of NAT supported by the Security Gateway?
- A. Static and Source
- B. Source and Destination
- C. Destination and Hide
- D. Hide and Static
Answer: D
Explanation:
A Security Gateway can use these procedures to translate IP addresses in your network:
NEW QUESTION 293
......
New (2021) CheckPoint 156-215.80 Exam Dumps: https://www.lead2passexam.com/CheckPoint/valid-156-215.80-exam-dumps.html