CheckPoint 156-215.81 Exam Dumps

Check Point Certified Security Administrator R81.20

CheckPoint 156-215.81 Sample Questions

Question # 1

When changes are made to a Rule base, it is important to _______________ to enforce changes.

A. Publish database  
B. Activate policy  
C. Install policy  
D. Save changes  

Answer: C

Show Answer

Question # 2

When a SAM rule is required on Security Gateway to quickly block suspicious connections which are not restricted by the Security Policy, what actions does the administrator need to take?

A. SmartView Monitor should be opened and then the SAM rule/s can be applied immediately. Installing policy is not required. 
B. The policy type SAM must be added to the Policy Package and a new SAM rule must be applied. Simply Publishing the changes applies the SAM rule on the firewall. 
C. The administrator must work on the firewall CLI (for example with SSH and PuTTY) and the command 'sam block' must be used with the right parameters. 
D. The administrator should open the LOGS & MONITOR view and find the relevant log. Right clicking on the log entry will show the Create New SAM rule option. 

Answer: A

Show Answer

Question # 3

Identity Awareness allows the Security Administrator to configure network access based on which of the following?

A. Name of the application, identity of the user, and identity of the machine  
B. Identity of the machine, username, and certificate  
C. Network location, identity of a user, and identity of a machine  
D. Browser-Based Authentication, identity of a user, and network location  

Answer: C

Show Answer

Question # 4

Which command shows the installed licenses? 

A. cplic print  
B. print cplic  
C. fwlic print  
D. show licenses  

Answer: A

Show Answer

Question # 5

Which of the following is NOT an option to calculate the traffic direction? 

A. Incoming  
B. Internal  
C. External  
D. Outgoing  

Answer: D

Show Answer

Question # 6

Fill in the blank: When a policy package is installed, ________ are also distributed to the target installation Security Gateways.

A. User and objects databases  
B. Network databases  
C. SmartConsole databases  
D. User databases  

Answer: A

Show Answer

Question # 7

What is the most recommended installation method for Check Point appliances? 

A. SmartUpdate installation  
B. DVD media created with Check Point ISOMorphic  
C. USB media created with Check Point ISOMorphic  
D. Cloud based installation  

Answer: C

Show Answer

Question # 8

The Network Operations Center administrator needs access to Check Point Security devices mostly for troubleshooting purposes. You do not want to give her access to the expert mode, but she still should be able to run tcpdump. How can you achieve this requirement?

A. Add tcpdump to CLISH using add command.Create a new access role.Add tcpdump to the role.Create new user with any UID and assign role to the user.
B. Add tcpdump to CLISH using add command.Create a new access role.Add tcpdump to the role.Create new user with UID 0 and assign role to the user. 
C. Create a new access role.Add expert-mode access to the role.Create new user with UID 0 and assign role to the user. 
D. Create a new access role.Add expert-mode access to the role.Create new user with any UID and assign role to the user. 

Answer: A

Show Answer

Question # 9

When dealing with rule base layers, what two layer types can be utilized? 

A. Ordered Layers and Inline Layers  
B. Inbound Layers and Outbound Layers  
C. R81.10 does not support Layers  
D. Structured Layers and Overlap Layers  

Answer: A

Show Answer

Question # 10

Which of the following is NOT a tracking option? (Select three) 

A. Partial log  
B. Log  
C. Network log  
D. Full log  

Answer: A,C,D

Show Answer

Question # 11

Fill in the blank: In Security Gateways R75 and above, SIC uses ______________ for encryption.

A. AES-128  
B. AES-256  
C. DES  
D. 3DES  

Answer: A

Show Answer

Question # 12

Which two of these Check Point Protocols are used by ? 

A. ELA and CPD  
B. FWD and LEA  
C. FWD and CPLOG  
D. ELA and CPLOG  

Answer: B

Show Answer

Question # 13

Which of the following describes how Threat Extraction functions? 

A. Detect threats and provides a detailed report of discovered threats  
B. Proactively detects threats  
C. Delivers file with original content  
D. Delivers PDF versions of original files with active content removed  

Answer: B

Show Answer

Question # 14

A Check Point Software license consists of two components, the Software Blade and the Software Container. There are ______ types of Software Containers: ________. 

A. Two; Security Management and Endpoint Security  
B. Two; Endpoint Security and Security Gateway  
C. Three; Security Management, Security Gateway, and Endpoint Security  
D. Three; Security Gateway, Endpoint Security, and Gateway Management  

Answer: C

Show Answer

Question # 15

Your internal networks 10.1.1.0/24, 10.2.2.0/24 and 192.168.0.0/16 are behind the Internet Security Gateway. Considering that Layer 2 and Layer 3 setup is correct, what are the steps you will need to do in SmartConsole in order to get the connection working?

A. 1. Define an accept rule in Security Policy.2. Define Security Gateway to hide all internal networks behind the gateway’s external IP.3. Publish and install the policy.  
B. 1. Define an accept rule in Security Policy.2. Define automatic NAT for each network to NAT the networks behind a public IP.3. Publish the policy.  
C. 1. Define an accept rule in Security Policy.2. Define automatic NAT for each network to NAT the networks behind a public IP.3. Publish and install the policy.  
D. 1. Define an accept rule in Security Policy.2. Define Security Gateway to hide all internal networks behind the gateway’s external IP.3. Publish the policy. 

Answer: C

Show Answer

Question # 16

Which of the following is an authentication method used for Identity Awareness? 

A. SSL  
B. Captive Portal  
C. PKI  
D. RSA  

Answer: B

Show Answer

Question # 17

To ensure that VMAC mode is enabled, which CLI command you should run on all cluster members? Choose the best answer. 

A. fw ctl set int fwha vmac global param enabled  
B. fw ctl get int fwha vmac global param enabled; result of command should return value 1  
C. cphaprob –a if  
D. fw ctl get int fwha_vmac_global_param_enabled; result of command should return value 1

Answer: B

Show Answer

Question # 18

When URL Filtering is set, what identifying data gets sent to the Check Point Online Web Service?

A. The URL and server certificate are sent to the Check Point Online Web Service
B. The full URL, including page data, is sent to the Check Point Online Web Service
C. The host part of the URL is sent to the Check Point Online Web Service
D. The URL and IP address are sent to the Check Point Online Web Service 

Answer: C

Show Answer

Question # 19

When should you generate new licenses? 

A. Before installing contract files.  
B. After a device upgrade.  
C. When the existing license expires, license is upgraded or the IP-address associated with the license changes. 
D. Only when the license is upgraded.  

Answer: C

Show Answer

Question # 20

You are the Check Point administrator for Alpha Corp. You received a call that one of the users is unable to browse the Internet on their new tablet which is connected to the company wireless, which goes through a Check Point Gateway. How would you review the logs to see what is blocking this traffic? 

A. Open SmartLog and connect remotely to the wireless controller
B. Open SmartEvent to see why they are being blocked
C. Open SmartDashboard and review the logs tab
D. From SmartConsole, go to the Log & Monitor and filter for the IP address of the tablet.

Answer: D

Show Answer