The Best Practice Test Preparation for the 156-215.81 Certification Exam [Q170-Q190]

4.4/5 - (9 votes)

The Best Practice Test Preparation for the 156-215.81 Certification Exam

156-215.81 Exam Dumps, Practice Test Questions BUNDLE PACK

NEW QUESTION 170
What is a reason for manual creation of a NAT rule?

In R81 all Network Address Translation is done automatically and there is no need for manually defined NAT-rules.

Network Address Translation of RFC1918-compliant networks is needed to access the Internet.

Network Address Translation is desired for some services, but not for others.

The public IP-address is different from the gateway’s external IP

NEW QUESTION 171
View the rule below. What does the pen-symbol in the left column mean?

Those rules have been published in the current session.

Rules have been edited by the logged in administrator, but the policy has not been published yet.

Another user has currently locked the rules for editing.

The configuration lock is present. Click the pen symbol in order to gain the lock.

NEW QUESTION 172
You find a suspicious connection from a problematic host. You decide that you want to block everything from that whole network, not just the problematic host. You want to block this for an hour while you investigate further, but you do not want to add any rules to the Rule Base. How do you achieve this?

Use dbedit to script the addition of a rule directly into the Rule Bases_5_0.fws configuration file.

Select Block intruder from the Tools menu in SmartView Tracker.

Create a Suspicious Activity Rule in Smart Monitor.

Add a temporary rule using SmartDashboard and select hide rule.

NEW QUESTION 173
While in SmartView Tracker, Brady has noticed some very odd network traffic that he thinks could be an intrusion. He decides to block the traffic for 60 minutes, but cannot remember all the steps.
What is the correct order of steps needed to set up the block?
1) Select Active Mode tab in SmartView Tracker.
2) Select Tools > Block Intruder.
3) Select Log Viewing tab in SmartView Tracker.
4) Set Blocking Timeout value to 60 minutes.
5) Highlight connection that should be blocked.

1, 2, 5, 4

3, 2, 5, 4

1, 5, 2, 4

3, 5, 2, 4

NEW QUESTION 174
What is the difference between an event and a log?

Events are generated at gateway according to Event Policy

A log entry becomes an event when it matches any rule defined in Event Policy

Events are collected with SmartWorkflow from Trouble Ticket systems

Logs and Events are synonyms

NEW QUESTION 175
What is the purpose of Priority Delta in VRRP?

When a box is up, Effective Priority = Priority + Priority Delta

When an Interface is up, Effective Priority = Priority + Priority Delta

When an Interface fails, Effective Priority = Priority – Priority Delta

When a box fails, Effective Priority = Priority – Priority Delta

NEW QUESTION 176
Fill in the blank: The IPS policy for pre-R81 gateways is installed during the _______ .

Firewall policy install

Threat Prevention policy install

Anti-bot policy install

Access Control policy install

NEW QUESTION 177
What does it mean if Bob gets this result on an object search? Refer to the image below. Choose the BEST answer.

Search detailed is missing the subnet mask.

There is no object on the database with that name or that IP address.

There is no object on the database with that IP address.

Object does not have a NAT IP address.

NEW QUESTION 178
When using GAiA, it might be necessary to temporarily change the MAC address of the interface eth 0 to 00:0C:29:12:34:56. After restarting the network the old MAC address should be active.
How do you configure this change?

As expert user, issue these commands: # IP link set eth0 down# IP link set eth0 addr 00:0C:29:12:34:56# IP link set eth0 up

Edit the file /etc/sysconfig/netconf.C and put the new MAC address in the field (conf:(conns:(conn:hwaddr (“00:0C:29:12:34:56”)

As expert user, issue the command: # IP link set eth0 addr 00:0C:29:12:34:56

Open the WebUI, select Network > Connections > eth0. Place the new MAC address in the field Physical Address, and press Apply to save the settings.

NEW QUESTION 179
Fill in the blank: When LDAP is integrated with Check Point Security Management, it is then referred to as _______

UserCheck

User Directory

User Administration

User Center

Check Point User Directory integrates LDAP, and other external user management technologies, with the Check Point solution. If you have a large user count, we recommend that you use an external user management database such as LDAP for enhanced Security Management Server performance.

NEW QUESTION 180
You are going to perform a major upgrade. Which back up solution should you use to ensure your database can be restored on that device?

backup

logswitch

Database Revision

snapshot

The snapshot creates a binary image of the entire root (lv_current) disk partition. This includes Check Point products, configuration, and operating system.
Starting in R77.10, exporting an image from one machine and importing that image on another machine of the same type is supported.
The log partition is not included in the snapshot. Therefore, any locally stored FireWall logs will not be saved.

NEW QUESTION 181
Choose the SmartLog property that is TRUE.

SmartLog has been an option since release R71.10.

SmartLog is not a Check Point product.

SmartLog and SmartView Tracker are mutually exclusive.

SmartLog is a client of SmartConsole that enables enterprises to centrally track log records and security activity with Google-like search.

NEW QUESTION 182
In R80 Management, apart from using SmartConsole, objects or rules can also be modified using:

3rd Party integration of CLI and API for Gateways prior to R80.

A complete CLI and API interface using SSH and custom CPCode integration.

3rd Party integration of CLI and API for Management prior to R80.

A complete CLI and API interface for Management with 3rd Party integration.

NEW QUESTION 183
True or False: More than one administrator can log into the Security Management Server with SmartConsole with write permission at the same time.

True, every administrator works on a different database that Is independent of the other administrators

False, this feature has to be enabled in the Global Properties.

True, every administrator works in a session that is independent of the other administrators

False, only one administrator can login with write permission

Multiple R/W admins can log into SmartConsole and edit rules but they can’t edit a rule that is being worked on by another admin.

NEW QUESTION 184
SmartEvent does NOT use which of the following procedures to identity events:

Matching a log against each event definition

Create an event candidate

Matching a log against local exclusions

Matching a log against global exclusions

NEW QUESTION 185
Fill in the blanks: The _______ collects logs and sends them to the _______.

Log server; Security Gateway

Log server; security management server

Security management server; Security Gateway

Security Gateways; log server

Gateways send their logs to the log server.

NEW QUESTION 186
Which of these attributes would be critical for a site-to-site VPN?

Scalability to accommodate user groups

Centralized management

Strong authentication

Strong data encryption

NEW QUESTION 187
Which type of Check Point license ties the package license to the IP address of the Security Management Server?

Central

Corporate

Local

Formal

NEW QUESTION 188
Which Threat Prevention Profile is not included by default in R81 Management?

Basic – Provides reliable protection on a range of non-HTTP protocols for servers, with minimal impact on network performance

Optimized – Provides excellent protection for common network products and protocols against recent or popular attacks

Strict – Provides a wide coverage for all products and protocols, with impact on network performance

Recommended – Provides all protection for all common network products and servers, with impact on network performance

NEW QUESTION 189
The fw monitor utility is used to troubleshoot which of the following problems?

Phase two key negotiation

Address translation

Log Consolidation Engine

User data base corruption

NEW QUESTION 190
Fill in the bank: In Office mode, a Security Gateway assigns a remote client to an IP address once___________.

the user connects and authenticates

office mode is initiated

the user requests a connection

the user connects

Office Mode enables a Security Gateway to assign a remote client an IP address. The assignment takes place once the user connects and authenticates. The assignment lease is renewed as long as the user is connected.

Loading …

What are some best practices for taking the CheckPoint 156-215.81 Exam?

Be prepared for every question, including ones you don’t know the answer to. The exam is not a “pass or fail” type of exam. If you don’t know the answer to a question, leave it blank and move on to the next one without worrying about it too much. Instead, focus on completing all of them correctly, because doing so will mean that when you do get an answer wrong, you have time to come up with an educated guess as to why it was wrong and make corrections in other areas of your knowledge base.
Take a practice test before your actual exam date to see how well you’re prepared for it and what areas need more study. CheckPoint 156-215.81 exam dumps is the best choice to prepare for this exam.
Practice test questions are available online from certification questions; use them as much as possible throughout your preparation process so that you can become familiar with them and know how to approach each question properly before taking your actual exam date (which is when you’ll spend most of your time studying).

Prepare for the Actual Checkpoint Certified Security Administrator 156-215.81 Exam Practice Materials Collection: https://www.passleadervce.com/Checkpoint-Certified-Security-Administrator/reliable-156-215.81-exam-learning-guide.html