[Nov 01, 2021] 156-215.80 Test Engine files, 156-215.80 Dumps PDF
Latest CheckPoint 156-215.80 PDF and Dumps (2021) Free Exam Questions Answers
The benefit in Obtaining the 156-215.80 Exam Certification
- This 156-215.80 exam covers a different technology to meet the needs of varying job roles
- Score CP job opportunities
- Capture the attention of recruiters
- Gain employer recognition for promotions and raises
NEW QUESTION 184
Fill in the blank: The R80 utility fw monitor is used to troubleshoot _____________
- A. Traffic issues
- B. LDAP conflicts
- C. Phase two key negotiation
- D. User data base corruption
Answer: A
Explanation:
Check Point's FW Monitor is a powerful built-in tool for capturing network traffic at the packet level.
The FW Monitor utility captures network packets at multiple capture points along the FireWall inspection chains. These captured packets can be inspected later using the WireShark
NEW QUESTION 185
Which statement describes what Identity Sharing is in Identity Awareness?
- A. Security Gateways can acquire and share identities with other Security Gateways
- B. Users can share identities with other users
- C. Administrators can share identities with other administrators
- D. Management servers can acquire and share identities with Security Gateways
Answer: A
NEW QUESTION 186
At what point is the Internal Certificate Authority (ICA) created?
- A. When an administrator initially logs into SmartConsole.
- B. During the primary Security Management Server installation process.
- C. When an administrator decides to create one.
- D. Upon creation of a certificate
Answer: B
Explanation:
Explanation
Introduction to the ICA
The ICA is a Certificate Authority which is an integral part of the Check Point product suite. It is fully compliant with X.509 standards for both certificates and CRLs. See the relevant X.509 and PKI documentation, as well as RFC 2459 standards for more information. You can read more about Check Point and PKI in the R76 VPN Administration Guide.
The ICA is located on the Security Management server. It is created during the installation process, when the Security Management server is configured.
References:
NEW QUESTION 187
Administrator Kofi has just made some changes on his Management Server and then clicks on the Publish button in SmartConsole but then gets the error message shown in the screenshot below.
Where can the administrator check for more information on these errors?
- A. The Log and Monitor section in SmartConsole
- B. The Validations section in SmartConsole
- C. The Policies section in SmartConsole
- D. The Objects section in SmartConsole
Answer: B
Explanation:
Explanation
Validation Errors
The validations pane in SmartConsole shows configuration error messages. Examples of errors are object names that are not unique, and the use of objects that are not valid in the Rule Base.
To publish, you must fix the errors.
References:
NEW QUESTION 188
Which of the following is NOT a VPN routing option available in a star community?
- A. To center and to other satellites through center
- B. To center only
- C. To center, or through the center to other satellites, to Internet and other VPN targets
- D. To satellites through center only
Answer: B,D
Explanation:
Explanation
SmartConsole
For simple hubs and spokes (or if there is only one Hub), the easiest way is to configure a VPN star community in R80 SmartConsole:
* On the Star Community window, in the:
* Center Gateways section, select the Security Gateway that functions as the "Hub".
* Satellite Gateways section, select Security Gateways as the "spokes", or satellites.
* On the VPN Routing page, Enable VPN routing for satellites section, select one of these options:
* To center and to other Satellites through center - This allows connectivity between the Security Gateways, for example if the spoke Security Gateways are DAIP Security Gateways, and the Hub is a Security Gateway with a static IP address.
* To center, or through the center to other satellites, to internet and other VPN targets - This allows connectivity between the Security Gateways as well as the ability to inspect all communication passing through the Hub to the Internet.
* Create an appropriate Access Control Policy rule.
* NAT the satellite Security Gateways on the Hub if the Hub is used to route connections from Satellites to the Internet.
The two Dynamic Objects (DAIP Security Gateways) can securely route communication through the Security Gateway with the static IP address.
NEW QUESTION 189
Examine the following Rule Base.
What can we infer about the recent changes made to the Rule Base?
- A. 8 changes have been made by administrators since the last policy installation
- B. Rule 7 was created by the 'admin' administrator in the current session
- C. Rule 1 and object webserver are locked by another administrator
- D. The rules 1, 5 and 6 cannot be edited by the 'admin' administrator
Answer: C
Explanation:
Explanation
On top of the print screen there is a number "8" which consists for the number of changes made and not saved.
Session Management Toolbar (top of SmartConsole)
References:
NEW QUESTION 190
Which of the following is NOT an option for internal network definition of Anti-spoofing?
- A. Network defined by the interface IP and Net Mask
- B. Route-based - derived from gateway routing table
- C. Specific - derived from a selected object
- D. Not-defined
Answer: B
NEW QUESTION 191
What does it mean if Bob gets this result on an object search? Refer to the image below. Choose the BEST answer.
- A. Object does not have a NAT IP address.
- B. There is no object on the database with that IP address.
- C. Search detailed is missing the subnet mask.
- D. There is no object on the database with that name or that IP address.
Answer: D
NEW QUESTION 192
The Captive Portal tool:
- A. Is only used for guest user authentication.
- B. Allows access to users already identified.
- C. Is deployed from the Identity Awareness page in the Global Properties settings.
- D. Acquires identities from unidentified users.
Answer: D
NEW QUESTION 193
What port is used for delivering logs from the gateway to the management server?
- A. Port 257
- B. Port 981
- C. Port 18209
- D. Port 258
Answer: A
NEW QUESTION 194
In Logging and Monitoring, the tracking options are Log, Detailed Log and Extended Log. Which of the following options can you add to each Log, Detailed Log and Extended Log?
- A. Accounting/Extended
- B. Suppression
- C. Accounting/Suppression
- D. Accounting
Answer: C
Explanation:
Explanation/Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_LoggingAndMonitoring/html_frameset.htm?
topic=documents/R80/CP_R80_LoggingAndMonitoring/131914
NEW QUESTION 195
What is the default shell of Gaia CLI?
- A. Bash
- B. Monitor
- C. Read-only
- D. CLI.sh
Answer: D
Explanation:
Explanation/Reference:
Explanation: This chapter gives an introduction to the Gaia command line interface (CLI).
The default shell of the CLI is called clish.
Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Gaia_WebAdmin/75697.htm
NEW QUESTION 196
A _______ is used by a VPN gateway to send traffic as if it was a physical interface.
- A. VPN interface
- B. VPN Tunnel Interface
- C. VPN router
- D. VPN community
Answer: B
Explanation:
Explanation
Route Based VPN
VPN traffic is routed according to the routing settings (static or dynamic) of the Security Gateway operating system. The Security Gateway uses a VTI (VPN Tunnel Interface) to send the VPN traffic as if it was a physical interface. The VTIs of Security Gateways in a VPN community connect and can support dynamic routing protocols.
NEW QUESTION 197
After the initial installation the First Time Configuration Wizard should be run. Select the BEST answer.
- A. First time Configuration Wizard can only be run from the WebUI.
- B. Connection to the internet is required before running the First Time Configuration wizard.
- C. First Time Configuration Wizard can be run from the command line or from the WebUI.
- D. First Time Configuration Wizard can be run from the Unified SmartConsole.
Answer: C
Explanation:
Explanation
Check Point Security Gateway and Check Point Security Management require running the First Time Configuration Wizard in order to be configured correctly. The First Time Configuration Wizard is available in Gaia Portal and also through CLI.
To invoke the First Time Configuration Wizard through CLI, run the config_system command from the Expert shell.
NEW QUESTION 198
John is the administrator of a R80 Security Management server managing r R77.30 Check Point Security
Gateway. John is currently updating the network objects and amending the rules using SmartConsole. To make
John's changes available to other administrators, and to save the database before installing a policy, what must
John do?
- A. Publish the session
- B. File > Save
- C. Logout of the session
- D. Install database
Answer: A
Explanation:
Explanation
Installing and Publishing
It is important to understand the differences between publishing and installing.
You must do this:
After you did this:
Publish
Opened a session in SmartConsole and made changes.
The Publish operation sends all SmartConsole modifications to other administrators, and makes the changes
you made in a private session public.
Install the database
Modified network objects, such as servers, users, services, or IPS profiles, but not the Rule Base.
Updates are installed on management servers and log servers.
Install a policy
Changed the Rule Base.
The Security Management Server installs the updated policy and the entire database on Security Gateways
(even if you did not modify any network objects).
NEW QUESTION 199
Provide very wide coverage for all products and protocols, with noticeable performance impact.
How could you tune the profile in order to lower the CPU load still maintaining security at good level? Select the BEST answer.
- A. Set the Performance Impact to Medium or lower.
- B. Set High Confidence to Low and Low Confidence to Inactive.
- C. Set the Performance Impact to Very Low Confidence to Prevent.
- D. The problem is not with the Threat Prevention Profile. Consider adding more memory to the appliance.
Answer: A
NEW QUESTION 200
......
Pass Your CCSA R80 156-215.80 Exam on Nov 01, 2021 with 525 Questions: https://www.pdfdumps.com/156-215.80-valid-exam.html