The Secret Of Check-Point 156-215.80 Answers

NEW QUESTION 1

You can see the following graphic:

What is presented on it?

• A. Properties of personal .p12 certificate file issued for user John.
• B. Shared secret properties of John’s password.
• C. VPN certificate properties of the John’s gateway.
• D. Expired .p12 certificate properties for user John.

Answer: A

NEW QUESTION 2

John is using Management HA. Which Smartcenter should be connected to for making changes?

• A. secondary Smartcenter
• B. active Smartcenter
• C. connect virtual IP of Smartcenter HA
• D. primary Smartcenter

Answer: B

NEW QUESTION 3

Your company enforces a strict change control policy. Which of the following would be MOST effective for quickly dropping an attacker's specific active connection?

• A. Change the Rule Base and install the Policy to all Security Gateways
• B. Block Intruder feature of SmartView Tracker
• C. Intrusion Detection System (IDS) Policy install
• D. SAM – Suspicious Activity Rules feature of SmartView Monitor

Answer: B

NEW QUESTION 4

Using mgmt_cli, what is the correct syntax to import a host object called Server_1 from the CLI?

• A. mgmt_cli add-host “Server_1” ip_address “10.15.123.10” --format txt
• B. mgmt_cli add host name “Server_1” ip_address “10.15.123.10” --format json
• C. mgmt_cli add object-host “Server_1” ip_address “10.15.123.10” --format json
• D. mgmt_cli add object “Server_1” ip_address “10.15.123.10” --format json

Answer: A

NEW QUESTION 5

When using Monitored circuit VRRP, what is a priority delta?

• A. When an interface fails the priority changes to the priority delta
• B. When an interface fails the delta claims the priority
• C. When an interface fails the priority delta is subtracted from the priority
• D. When an interface fails the priority delta decides if the other interfaces takes over

Answer: C

NEW QUESTION 6

Joey wants to configure NTP on R80 Security Management Server. He decided to do this via WebUI. What is the correct address to access the Web UI for Gaia platform via browser?

• A. https://<Device_IP_Address>
• B. https://<Device_IP_Address>:443
• C. https://<Device_IP_Address>:10000
• D. https://<Device_IP_Address>:4434

Answer: A

Explanation:
Access to Web UI Gaia administration interface, initiate a connection from a browser to the default administration IP address: Logging in to the WebUI
Logging in
To log in to the WebUI:
Enter this URL in your browser: https://<Gaia IP address>
Enter your user name and password. References:

NEW QUESTION 7

What is the purpose of Priority Delta in VRRP?

• A. When a box is up, Effective Priority = Priority + Priority Delta
• B. When an Interface is up, Effective Priority = Priority + Priority Delta
• C. When an Interface fails, Effective Priority = Priority - Priority Delta
• D. When a box fails, Effective Priority = Priority - Priority Delta

Answer: C

NEW QUESTION 8

To fully enable Dynamic Dispatcher on a Security Gateway:

• A. run fw ctl multik set_mode 9 in Expert mode and then reboot
• B. Using cpconfig, update the Dynamic Dispatcher value to “full” under the CoreXL menu
• C. Edit /proc/interrupts to include multik set_mode 1 at the bottom of the file, save, and reboot
• D. run fw ctl multik set_mode 1 in Expert mode and then reboot

Answer: A

NEW QUESTION 9

Which GUI tool can be used to view and apply Check Point licenses?

• A. cpconfig
• B. Management Command Line
• C. SmartConsole
• D. SmartUpdate

Answer: D

Explanation:
SmartUpdate GUI is the recommended way of managing licenses. References:

NEW QUESTION 10

Which utility shows the security gateway general system information statistics like operating system information and resource usage, and individual software blade statistics of VPN, Identity Awareness and DLP?

• A. cpconfig
• B. fw ctl pstat
• C. cpview
• D. fw ctl multik stat

Answer: C

Explanation:
CPView Utility is a text based built-in utility that can be run ('cpview' command) on Security Gateway / Security Management Server / Multi-Domain Security Management Server. CPView Utility shows statistical data that contain both general system information (CPU, Memory, Disk space) and information for different Software Blades (only on Security Gateway). The data is continuously updated in easy to access views.

NEW QUESTION 11

Which SmartConsole tab is used to monitor network and security performance?

• A. Manage Seeting
• B. Security Policies
• C. Gateway and Servers
• D. Logs and Monitor

Answer: C

NEW QUESTION 12

What must a Security Administrator do to comply with a management requirement to log all traffic accepted through the perimeter Security Gateway?

• A. In Global Properties > Reporting Tools check the box Enable tracking all rules (including rules marked as None in the Track column). Send these logs to a secondary log server for a complete logging histor
• B. Use your normal log server for standard logging for troubleshooting.
• C. Install the View Implicit Rules package using SmartUpdate.
• D. Define two log servers on the R77 Gateway objec
• E. Lof Implied Rules on the first log serve
• F. Enable Log Rule Base on the second log serve
• G. Use SmartReporter to merge the two log server records into the same database for HIPPA log audits.
• H. Check the Log Implied Rules Globally box on the R77 Gateway object.

Answer: A

NEW QUESTION 13

What is the default time length that Hit Count Data is kept?

• A. 3 month
• B. 4 weeks
• C. 12 months
• D. 6 months

Answer: A

Explanation:
Keep Hit Count data up to - Select one of the time range options. The default is 6 months. Data is kept in the Security Management Server database for this period and is shown in the Hits column.

NEW QUESTION 14

Fill in the blank: The tool ____ generates a R80 Security Gateway configuration report.

• A. infoCP
• B. infoview
• C. cpinfo
• D. fw cpinfo

Answer: C

Explanation:
CPInfo is an auto-updatable utility that collects diagnostics data on a customer's machine at the time of execution and uploads it to Check Point servers (it replaces the standalone cp_uploader utility for uploading files to Check Point servers).
The CPinfo output file allows analyzing customer setups from a remote location. Check Point support engineers can open the CPinfo file in a demo mode, while viewing actual customer Security Policies and Objects. This allows the in-depth analysis of customer's configuration and environment settings.
When contacting Check Point Support, collect the cpinfo files from the Security Management server and Security Gateways involved in your case.

NEW QUESTION 15

What component of R80 Management is used for indexing?

• A. DBSync
• B. API Server
• C. fwm
• D. SOLR

Answer: D

NEW QUESTION 16

SandBlast has several functional components that work together to ensure that attacks are prevented in real-time. Which the following is NOT part of the SandBlast component?

• A. Threat Emulation
• B. Mobile Access
• C. Mail Transfer Agent
• D. Threat Cloud

Answer: C

NEW QUESTION 17

What protocol is specifically used for clustered environments?

• A. Clustered Protocol
• B. Synchronized Cluster Protocol
• C. Control Cluster Protocol
• D. Cluster Control Protocol

Answer: D

NEW QUESTION 18

What is the BEST command to view configuration details of all interfaces in Gaia CLISH?

• A. ifconfig -a
• B. show interfaces
• C. show interfaces detail
• D. show configuration interface

Answer: D

NEW QUESTION 19

Which of the following is NOT an element of VPN Simplified Mode and VPN Communities?

• A. “Encrypt” action in the Rule Base
• B. Permanent Tunnels
• C. “VPN” column in the Rule Base
• D. Configuration checkbox “Accept all encrypted traffic”

Answer: A

Explanation:
Migrating from Traditional Mode to Simplified Mode
To migrate from Traditional Mode VPN to Simplified Mode:
1. On the Global Properties > VPN page, select one of these options:
• Simplified mode to all new Firewall Policies
• Traditional or Simplified per new Firewall Policy
2. Click OK.
3. From the R80 SmartConsole Menu, select Manage policies. The Manage Policies window opens.
4. Click New.
The New Policy window opens.
5. Give a name to the new policy and select Access Control.
In the Security Policy Rule Base, a new column marked VPN shows and the Encrypt option is no longer available in the Action column. You are now working in Simplified Mode.

NEW QUESTION 20

Which Threat Prevention Software Blade provides comprehensive against malicious and unwanted network traffic, focusing on application and server vulnerabilities?

• A. Anti-Virus
• B. IPS
• C. Anti-Spam
• D. Anti-bot

Answer: B

Explanation:
The IPS Software Blade provides a complete Intrusion Prevention System security solution, providing comprehensive network protection against malicious and unwanted network traffic, including:
Malware attacks
Dos and DDoS attacks
Application and server vulnerabilities
Insider threats
Unwanted application traffic, including IM and P2P

NEW QUESTION 21

Which of the following is NOT a valid option when configuring access for Captive Portal?

• A. From the Internet
• B. Through internal interfaces
• C. Through all interfaces
• D. According to the Firewall Policy

Answer: A

NEW QUESTION 22

Examine the following Rule Base.

What can we infer about the recent changes made to the Rule Base?

• A. Rule 7 was created by the 'admin' administrator in the current session
• B. 8 changes have been made by administrators since the last policy installation
• C. The rules 1, 5 and 6 cannot be edited by the 'admin' administrator
• D. Rule 1 and object webserver are locked by another administrator

Answer: D

Explanation:
On top of the print screen there is a number "8" which consists for the number of changes made and not saved. Session Management Toolbar (top of SmartConsole)

NEW QUESTION 23
......