Changing the Concept of 156-215.81 Exam Preparation 2024
Getting 156-215.81 Certification Made Easy! Get professional help from our 156-215.81 Dumps PDF
NEW QUESTION # 153
What are the three types of UserCheck messages?
- A. inform, ask, and block
- B. ask, block, and notify
- C. action, inform, and ask
- D. block, action, and warn
Answer: A
Explanation:
Inform User
Inform
Shows when the action for the ruleClosed is inform. It informs users what the company policy is for that site.
Blocked Message
Block
Shows when a request is blocked.
Ask User
Ask
Shows when the action for the rule is ask. It informs users what the company policy is for that site and they must click OK to continue to the site.
https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_DataLossPrevention_AdminGuide/Topics-DLPG/UserCheck-Page.htm?tocpath=UserCheck%20Interaction%20Objects%7C_____3
NEW QUESTION # 154
Which of the following is NOT a tracking log option in R80.x?
- A. Full Log
- B. Extended Log
- C. Log
- D. Detailed Log
Answer: D
Explanation:
Explanation
Detailed Log is not a valid tracking log option in R80.x3. The tracking log options in R80.x are Log, Full Log, and Extended Log45. References: Where is 'full log' option in track column, LOGGINGAND MONITORING R80, Logging and Monitoring Administration Guide R80.20
NEW QUESTION # 155
You have enabled "Extended Log" as a tracking option to a security rule. However, you are still not seeing any data type information. What is the MOST likely reason?
- A. Log Trimming is enabled.
- B. Content Awareness is not enabled.
- C. Logging has disk space issues
- D. Identity Awareness is not enabled.
Answer: B
NEW QUESTION # 156
What are the advantages of a "shared policy" in R80?
- A. Allows the administrator to install a policy on one Security Gateway and it gets installed on another managed Security Gateway
- B. Allows the administrator to share a policy between all the administrators managing the Security Management Server
- C. Allows the administrator to share a policy so that it is available to use in another Policy Package
- D. Allows the administrator to share a policy between all the users identified by the Security Gateway
Answer: C
Explanation:
Ref: https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_SecurityManagement_AdminGuide/Topics-SECMG/SmartConsole-Toolbars-Shared-Policies.htm
NEW QUESTION # 157
Why would an administrator see the message below?
- A. A new Policy Package created on the Gateway and transferred to the management will be overwritten by the Policy Package currently on the Gateway but can be restored from a periodic backup on the Gateway.
- B. A new Policy Package created on both the Management and Gateway will be deleted and must be packed up first before proceeding.
- C. A new Policy Package created on the Management is going to be installed to the existing Gateway.
- D. A new Policy Package created on the Gateway is going to be installed on the existing Management.
Answer: C
NEW QUESTION # 158
Which of the completed statements is NOT true? The WebUI can be used to manage user accounts and:
- A. assign privileges to users.
- B. assign user rights to their home directory in the Security Management Server
- C. add users to your Gaia system.
- D. edit the home directory of the user.
Answer: B
Explanation:
Users
Use the WebUI and CLI to manage user accounts. You can:
NEW QUESTION # 159
Fill in the blank: The _____ feature allows administrators to share a policy with other policy packages.
- A. Global Policies
- B. Concurrent policy packages
- C. Shared policies
- D. Concurrent policies
Answer: C
Explanation:
Explanation
The Shared policies feature allows administrators to share a policy with other policy packages3. This can save time and effort when managing multiple gateways with similar security requirements. Shared policies can be applied to Access Control, Threat Prevention, and HTTPS Inspection layers4. References: Check Point R81 Security Management Administration Guide, Check Point R81 SmartConsole R81 Resolved Issues
NEW QUESTION # 160
Using ClusterXL, what statement is true about the Sticky Decision Function?
- A. All connections are processed and synchronized by the pivot
- B. Is only relevant when using SecureXL
- C. Can only be changed for Load Sharing implementations
- D. Is configured using cpconfig
Answer: C
NEW QUESTION # 161
Which set of objects have an Authentication tab?
- A. Networks, Hosts
- B. Templates, Users
- C. Users, Networks
- D. Users, User Group
Answer: B
NEW QUESTION # 162
Which of the following is NOT a role of the SmartCenter:
- A. Certificate authority
- B. Policy configuration
- C. Status monitoring
- D. Address translation
Answer: A
NEW QUESTION # 163
How many users can have read/write access in Gaia Operating System at one time?
- A. One
- B. Three
- C. Infinite
- D. Two
Answer: A
Explanation:
if another user has r/w access, you need to use "lock database override" or "unlock database" to claim r/w access. Ref: https://sc1.checkpoint.com/documents/R80.20_GA/WebAdminGuides/EN/CP_R80.20_Gaia_AdminGuide/html_frameset.htm?topic=documents/R80.20_GA/WebAdminGuides/EN/CP_R80.20_Gaia_AdminGuide/162435
NEW QUESTION # 164
At what point is the Internal Certificate Authority (ICA) created?
- A. During the primary Security Management Server installation process.
- B. When an administrator decides to create one.
- C. When an administrator initially logs into SmartConsole.
- D. Upon creation of a certificate
Answer: A
NEW QUESTION # 165
After the initial installation the First Time Configuration Wizard should be run. Select the BEST answer.
- A. First Time Configuration Wizard can be run from the Unified SmartConsole.
- B. First time Configuration Wizard can only be run from the WebUI.
- C. First Time Configuration Wizard can be run from the command line or from the WebUI.
- D. Connection to the internet is required before running the First Time Configuration wizard.
Answer: C
NEW QUESTION # 166
AdminA and AdminB are both logged in on SmartConsole What does it mean if AdmmB sees a lock icon on a rule? Choose the BEST answer.
- A. Rule is locked by AdminA because the rule is currently being edited
- B. Rule is locked by AdminA and if the session is saved, the rule will be made available
- C. Rule is locked by AdminA because the save button has not been pressed
- D. Rule is locked by AdminA and will be made available if the session is published
Answer: D
Explanation:
Explanation
If AdminB sees a lock icon on a rule, it means that the rule is locked by AdminA and will be made available if the session is published. A session is a set of changes made by an administrator in SmartConsole. A session can be published to save and share the changes with other administrators, or discarded to cancel the changes and unlock the objects1.
References: 1: Check Point R81 Security Management Administration Guide, page 18.
NEW QUESTION # 167
Fill in the blank: The position of an implied rule is manipulated in the __________________ window.
- A. Object Explorer
- B. NAT
- C. Global Properties
- D. Firewall
Answer: C
Explanation:
Explanation
The position of an implied rule is manipulated in the Global Properties window. Implied rules are predefined rules that are not displayed in the rule base. They allow or block traffic for essential services such as communication with Check Point servers, logging, and VPN traffic. The position of an implied rule can be changed in the Global Properties > Firewall > Implied Rules section56. References: How to view Implied Rules in R80.x / R81.x SmartConsole, Implied Rules
NEW QUESTION # 168
Fill in the blank: The position of an implied rule is manipulated in the __________________ window.
- A. Object Explorer
- B. NAT
- C. Global Properties
- D. Firewall
Answer: C
NEW QUESTION # 169
You installed Security Management Server on a computer using GAiA in the MegaCorp home office. You use IP address 10.1.1.1. You also installed the Security Gateway on a second GAiA computer, which you plan to ship to another Administrator at a MegaCorp hub office.
What is the correct order for pushing SIC certificates to the Gateway before shipping it?
1. Run cpconfig on the Gateway, select Secure Internal Communication, enter the activation key, and reconfirm.
2. Initialize Internal Certificate Authority (ICA) on the Security Management Server.
3. Configure the Gateway object with the host name and IP addresses for the remote site.
4. Click the Communication button in the Gateway object's General screen, enter the activation key, and click Initialize and OK.
5. Install the Security Policy.
- A. 2, 1, 3, 4, 5
- B. 2, 3, 4, 5, 1
- C. 1, 3, 2, 4, 5
- D. 2, 3, 4, 1, 5
Answer: A
NEW QUESTION # 170
After the initial installation the First Time Configuration Wizard should be run. Select the BEST answer.
- A. First Time Configuration Wizard can be run from the Unified SmartConsole.
- B. First time Configuration Wizard can only be run from the WebUI.
- C. First Time Configuration Wizard can be run from the command line or from the WebUI.
- D. Connection to the internet is required before running the First Time Configuration wizard.
Answer: C
Explanation:
Check Point Security Gateway and Check Point Security Management require running the First Time Configuration Wizard in order to be configured correctly. The First Time Configuration Wizard is available in Gaia Portal and also through CLI.
To invoke the First Time Configuration Wizard through CLI, run the config_system command from the Expert shell.
NEW QUESTION # 171
Which tool allows you to monitor the top bandwidth on smart console?
- A. Logs & Monitoring
- B. SmartView Monitor
- C. Smart Event
- D. Gateways & Severs Tab
Answer: B
Explanation:
Explanation
SmartView Monitor is the tool that allows you to monitor the top bandwidth on SmartConsole. SmartView Monitor is a graphical tool that displays real-time network and security performance data, such as traffic, throughput, connections, CPU usage, memory usage, etc. You can use SmartView Monitor to identify the top bandwidth consumers and optimize your network performance.References: [SmartView Monitor], [Monitoring Network Traffic]
NEW QUESTION # 172
After the initial installation on Check Point appliance, you notice that the Management interface and default gateway are incorrect.
Which commands could you use to set the IP to 192.168.80.200/24 and default gateway to 192.168.80.1.
- A. set interface Mgmt ipv4-address 192.168.80.200 mask-length 24set static-route default nexthop gateway address 192.168.80.1 onsave config
- B. add interface Mgmt ipv4-address 192.168.80.200 mask-length 24add static-route default nexthop gateway address 192.168.80.1 onsave config
- C. set interface Mgmt ipv4-address 192.168.80.200 255.255.255.0add static-route 0.0.0.0.0.0.0.0 gw 192.168.80.1 onsave config
- D. add interface Mgmt ipv4-address 192.168.80.200 255.255.255.0add static-route 0.0.0.0.0.0.0.0 gw 192.168.80.1 onsave config
Answer: A
NEW QUESTION # 173
Choose what BEST describes users on Gaia Platform.
- A. There is one default user that cannot be deleted.
- B. There are two default users that cannot be deleted and one SmartConsole Administrator.
- C. There is one default user that can be deleted.
- D. There are two default users and one cannot be deleted.
Answer: D
Explanation:
These users are created by default and cannot be deleted:
NEW QUESTION # 174
In HTTPS Inspection policy, what actions are available in the "Actions" column of a rule?
- A. "Inspect", "Bypass", "Categorize"
- B. "Inspect", "Bypass", "Block"
- C. "Detect", "Bypass"
- D. "Inspect", "Bypass"
Answer: D
Explanation:
https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_SecurityManagement_AdminGuide/Topics-SECMG/HTTPS-Inspection.htm#HTTPS_Inspection_Policy
NEW QUESTION # 175
What Check Point technologies deny or permit network traffic?
- A. IPS, Mobile Threat Protection
- B. Application Control, DLP
- C. ACL, SandBlast, MPT
- D. Packet Filtering, Stateful Inspection, Application Layer Firewall.
Answer: D
Explanation:
Explanation
Check Point technologies that deny or permit network traffic are packet filtering, stateful inspection, and application layer firewall1, p. 15-16. Packet filtering is a basic firewall technique that examines packets based on their source and destination addresses and ports2, p. 13. Stateful inspection is an advanced firewall technique that tracks the state and context of network connections and inspects packets based on their content and sequence2, p. 13. Application layer firewall is a firewall technique that operates at the application layer of the OSI model and inspects packets based on their application protocols and data2, p. 14. References: Check Point CCSA - R81: Practice Test & Explanation, 156-315.81 Checkpoint Exam Info and Free Practice Test
NEW QUESTION # 176
What is the SOLR database for?
- A. Used for full text search and enables powerful matching capabilities
- B. Serves GUI responsible to transfer request to the DLE server
- C. Enables powerful matching capabilities and writes data to the database
- D. Writes data to the database and full text search
Answer: A
Explanation:
Explanation
The SOLR database is used for full text search and enables powerful matching capabilities3 . SOLR is an open source enterprise search platform that provides fast and scalable indexing and searching of data. It supports advanced features such as faceting, highlighting, spell checking, synonyms, etc. The SOLR database is used by Check Point products such as SmartLog and SmartEvent to store and query logs and events3 . The other options are incorrect. Option B is false, as SOLR does not write data to the database, but only reads data from it. Option C is false, as SOLR does not serve GUI, but only provides a RESTful API for queries. Option D is false, as SOLR does not enable powerful matching capabilities and write data to the database, but only enables powerful matching capabilities. References: SOLR - Check Point Software, [Apache Solr]
NEW QUESTION # 177
To fully enable Dynamic Dispatcher on a Security Gateway:
- A. Edit /proc/interrupts to include multik set_mode 1 at the bottom of the file, save, and reboot
- B. Using cpconfig, update the Dynamic Dispatcher value to "full" under the CoreXL menu
- C. run fw ctl multik set_mode 1 in Expert mode and then reboot
- D. run fw ctl multik set_mode 9 in Expert mode and then reboot
Answer: D
NEW QUESTION # 178
......
156-215.81 Exam Crack Test Engine Dumps Training With 402 Questions: https://vcecollection.trainingdumps.com/156-215.81-valid-vce-dumps.html
