156-215.81 | Rebirth 156-215.81 Pdf For Check Point Certified Security Administrator R81 Certification

NEW QUESTION 1
In Logging and Monitoring, the tracking options are Log, Detailed Log and Extended Log. Which of the following options can you add to each Log, Detailed Log and Extended Log?

• A. Accounting
• B. Suppression
• C. Accounting/Suppression
• D. Accounting/Extended

Answer: C

NEW QUESTION 2
What type of NAT is a one-to-one relationship where each host is translated to a unique address?

• A. Source
• B. Static
• C. Hide
• D. Destination

Answer: B

NEW QUESTION 3
In what way is Secure Network Distributor (SND) a relevant feature of the Security Gateway?

• A. SND is a feature to accelerate multiple SSL VPN connections
• B. SND is an alternative to IPSec Main Mode, using only 3 packets
• C. SND is used to distribute packets among Firewall instances
• D. SND is a feature of fw monitor to capture accelerated packets

Answer: C

NEW QUESTION 4
Which of the following technologies extracts detailed information from packets and stores that information in state tables?

• A. INSPECT Engine
• B. Next-Generation Firewall
• C. Packet Filtering
• D. Application Layer Firewall

Answer: A

Explanation:
Check Point FireWall-1’s Stateful Inspection overcomes the limitations of the previous two approaches by providing full application-layer awareness without breaking the client/server model. With Stateful Inspection, the packet is intercepted at the network layer, but then the INSPECT Engine takes over. It extracts state-related information required for the security decision from all application layers and maintains this information in dynamic state tables for evaluating subsequent connection attempts. This provides a solution which is highly secure and offers maximum performance, scalability, and extensibility.

NEW QUESTION 5
What Identity Agent allows packet tagging and computer authentication?

• A. Endpoint Security Client
• B. Full Agent
• C. Light Agent
• D. System Agent

Answer: B

Explanation:
Identity Agent Description Full
Default Identity AgentClosed that includes packet tagging and computer authentication. It applies to all users on the computer on which it is installed.
Administrator permissions are required to use the Full Identity Agent type. For the Full Identity Agent, you can enforce IP spoofing protection. In addition, you can leverage computer authentication if you specify computers in Access Roles.
Light
Default Identity Agent that does not include packet tagging and computer authentication. You can install this Identity Agent individually for each user on the target computer. Light Identity Agent type does not require Administrator permissions.
https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_IdentityAwareness_AdminGuide/T

NEW QUESTION 6
The Gateway Status view in SmartConsole shows the overall status of Security Gateways and Software Blades. What does the Status Attention mean?

• A. Cannot reach the Security Gateway.
• B. The gateway and all its Software Blades are working properly.
• C. At least one Software Blade has a minor issue, but the gateway works.
• D. Cannot make SIC between the Security Management Server and the Security Gateway

Answer: C

Explanation:
https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_LoggingAndMonitoring_AdminGu

NEW QUESTION 7
An administrator can use section titles to more easily navigate between large rule bases. Which of these statements is FALSE?

• A. Section titles are not sent to the gateway side.
• B. These sections are simple visual divisions of the Rule Base and do not hinder the order of rule enforcement.
• C. A Sectional Title can be used to disable multiple rules by disabling only the sectional title.
• D. Sectional Titles do not need to be created in the SmartConsole.

Answer: C

Explanation:
Section titles are only for visual categorization of rules.

NEW QUESTION 8
What is the best sync method in the ClusterXL deployment?

• A. Use 1 cluster + 1st sync
• B. Use 1 dedicated sync interface
• C. Use 3 clusters + 1st sync + 2nd sync + 3rd sync
• D. Use 2 clusters + 1st sync + 2nd sync

Answer: B

NEW QUESTION 9
In HTTPS Inspection policy, what actions are available in the "Actions" column of a rule?

• A. "Inspect", "Bypass"
• B. "Inspect", "Bypass", "Categorize"
• C. "Inspect", "Bypass", "Block"
• D. "Detect", "Bypass"

Answer: A

Explanation:
https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_SecurityManagement_AdminGuide

NEW QUESTION 10
The Online Activation method is available for Check Point manufactured appliances. How does the administrator use the Online Activation method?

• A. The SmartLicensing GUI tool must be launched from the SmartConsole for the Online Activation tool to start automatically.
• B. No action is required if the firewall has internet access and a DNS server to resolve domain names.
• C. Using the Gaia First Time Configuration Wizard, the appliance connects to the Check Point User Center and downloads all necessary licenses and contracts.
• D. The cpinfo command must be run on the firewall with the switch -online-license-activation.

Answer: C

Explanation:
"Online activation: this method of activation is available for Check Point manufactured appliances. These appliances should be configured to have internet connectivity during the completion of the First Time Configuration Wizard for software version R77 and below. Customers using R80 and higher will be able to use this feature during or after the completion of the First Time Configuration Wizard."
https://supportcenter.checkpoint.com/supportcenter/portal?eventsubmit_dogoviewsolutiondetails=&solutionid=s

NEW QUESTION 11
When using Automatic Hide NAT, what is enabled by default?

• A. Source Port Address Translation (PAT)
• B. Static NAT
• C. Static Route
• D. HTTPS Inspection

Answer: A

Explanation:
Hiding multiple IP addresses behind one, gateway, IP address requires PAT to differentiate between traffic.

NEW QUESTION 12
Administrator Dave logs into R80 Management Server to review and makes some rule changes. He notices that there is a padlock sign next to the DNS rule in the Rule Base.

What is the possible explanation for this?

• A. DNS Rule is using one of the new feature of R80 where an administrator can mark a rule with the padlock icon to let other administrators know it is important.
• B. Another administrator is logged into the Management and currently editing the DNS Rule.
• C. DNS Rule is a placeholder rule for a rule that existed in the past but was deleted.
• D. This is normal behavior in R80 when there are duplicate rules in the Rule Base.

Answer: B

NEW QUESTION 13
When should you generate new licenses?

• A. Before installing contract files.
• B. After an RMA procedure when the MAC address or serial number of the appliance changes.
• C. When the existing license expires, license is upgraded or the IP-address where the license is tied changes.
• D. Only when the license is upgraded.

Answer: C

NEW QUESTION 14
Fill in the blank: In Security Gateways R75 and above, SIC uses ________ for encryption.

• A. AES-128
• B. AES-256
• C. DES
• D. 3DES

Answer: A

NEW QUESTION 15
What two ordered layers make up the Access Control Policy Layer?

• A. URL Filtering and Network
• B. Network and Threat Prevention
• C. Application Control and URL Filtering
• D. Network and Application Control

Answer: D

NEW QUESTION 16
Application Control/URL filtering database library is known as:

• A. Application database
• B. AppWiki
• C. Application-Forensic Database
• D. Application Library

Answer: B

Explanation:
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=

NEW QUESTION 17
What command would show the API server status?

• A. cpm status
• B. api restart
• C. api status
• D. show api status

Answer: D

NEW QUESTION 18
......