156-215.80 Training & Certification Get Latest CCSA R80 Updated on Oct 17, 2021
Certification Training for 156-215.80 Exam Dumps Test Engine
NEW QUESTION 47
The fw monitor utility is used to troubleshoot which of the following problems?
- A. Log Consolidation Engine
- B. Address translation
- C. Phase two key negotiation
- D. User data base corruption
Answer: B
NEW QUESTION 48
Which feature in R80 permits blocking specific IP addresses for a specified time period?
- A. Local Interface Spoofing
- B. HTTP Methods
- C. Suspicious Activity Monitoring
- D. Block Port Overflow
Answer: C
NEW QUESTION 49
View the rule below. What does the pen-symbol in the left column mean?
- A. The configuration lock is present. Click the pen symbol in order to gain the lock.
- B. Those rules have been published in the current session.
- C. Rules have been edited by the logged in administrator, but the policy has not been published yet.
- D. Another user has currently locked the rules for editing.
Answer: C
NEW QUESTION 50
In Logging and Monitoring, the tracking options are Log, Detailed Log and Extended Log. Which of the following options can you add to each Log, Detailed Log and Extended Log?
- A. Accounting/Extended
- B. Accounting/Suppression
- C. Accounting
- D. Suppression
Answer: B
Explanation:
Explanation/Reference:
Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_LoggingAndMonitoring/ html_frameset.htm?topic=documents/R80/CP_R80_LoggingAndMonitoring/131914
NEW QUESTION 51
Identify the API that is not supported by Check Point currently.
- A. Open REST API
- B. OPSEC SDK
- C. R80 Management API-
- D. Identity Awareness Web Services API
Answer: A
Explanation:
Explanation/Reference: http://dl3.checkpoint.com/paid/29/29532b9eec50d0a947719ae631f640d0/ CP_R80_CheckPoint_API_ReferenceGuide.pdf?
HashKey=1517091458_be29bd4732d8d22283df32ccaaffc482&xtn=.pdf
NEW QUESTION 52
You have discovered suspicious activity in your network. What is the BEST immediate action to take?
- A. Wait until traffic has been identified before making any changes.
- B. Create a policy rule to block the traffic.
- C. Contact ISP to block the traffic.
- D. Create a suspicious action rule to block that traffic.
Answer: D
Explanation:
Explanation/Reference: https://sc1.checkpoint.com/documents/R80.10/WebAdminGuides/EN/ CP_R80.10_LoggingAndMonitoring_AdminGuide/html_frameset.htm?topic=documents/R80.10/ WebAdminGuides/EN/CP_R80.10_LoggingAndMonitoring_AdminGuide/118300
NEW QUESTION 53
Look at the screenshot below. What CLISH command provides this output?
- A. show confd configuration
- B. show confd configuration all
- C. show configuration
- D. show configuration all
Answer: C
Explanation:
Explanation
NEW QUESTION 54
What type of NAT is a one-to-one relationship where each host is translated to a unique address?
- A. Hide
- B. Destination
- C. Source
- D. Static
Answer: D
NEW QUESTION 55
Which GUI tool can be used to view and apply Check Point licenses?
- A. SmartUpdate
- B. SmartConsole
- C. cpconfig
- D. Management Command Line
Answer: A
Explanation:
Explanation
SmartUpdate GUI is the recommended way of managing licenses.
NEW QUESTION 56
Choose what BEST describes a Session.
- A. Sessions ends when policy is pushed to the Security Gateway.
- B. Starts when an Administrator logs in to the Security Management Server through SmartConsole and ends when it is published.
- C. Sessions locks the policy package for editing.
- D. Starts when an Administrator publishes all the changes made on SmartConsole.
Answer: B
Explanation:
Explanation/Reference:
Explanation: Administrator Collaboration
More than one administrator can connect to the Security Management Server at the same time. Every administrator has their own username, and works in a session that is independent of the other administrators.
When an administrator logs in to the Security Management Server through SmartConsole, a new editing session starts. The changes that the administrator makes during the session are only available to that administrator. Other administrators see a lock icon on object and rules that are being edited.
To make changes available to all administrators, and to unlock the objects and rules that are being edited, the administrator must publish the session.
Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm?
topic=documents/R80/CP_R80_SecMGMT/117948
NEW QUESTION 57
Traffic from source 192.168.1.1 is going to www.google.com. The Application Control Blade on the gateway
is inspecting the traffic. Assuming acceleration is enable which path is handling the traffic?
- A. Fast Path
- B. Accelerated Path
- C. Slow Path
- D. Medium Path
Answer: C
NEW QUESTION 58
Fill in the blank:_________________information is included in "Full Log" tracking option, but is not included in "Log" tracking option?
- A. Application
- B. File attributes
- C. Destination port
- D. Data type
Answer: D
NEW QUESTION 59
Which utility shows the security gateway general system information statistics like operating system information and resource usage, and individual software blade statistics of VPN, Identity Awareness and DLP?
- A. cpconfig
- B. fw ctl pstat
- C. cpview
- D. fw ctl multik stat
Answer: C
Explanation:
Explanation
CPView Utility is a text based built-in utility that can be run ('cpview' command) on Security Gateway / Security Management Server / Multi-Domain Security Management Server. CPView Utility shows statistical data that contain both general system information (CPU, Memory, Disk space) and information for different Software Blades (only on Security Gateway). The data is continuously updated in easy to access views.
References:
NEW QUESTION 60
Which of the completed statements is NOT true? The WebUI can be used to manage user accounts and:
- A. assign user rights to their home directory in the Security Management Server
- B. edit the home directory of the user.
- C. assign privileges to users.
- D. add users to your Gaia system.
Answer: A
Explanation:
Explanation
Users
Use the WebUI and CLI to manage user accounts. You can:
Add users to your Gaia system.
Edit the home directory of the user.
Edit the default shell for a user.
Give a password to a user.
Give privileges to users.
NEW QUESTION 61
Which of the following is a hash algorithm?
- A. IDEA
- B. 3DES
- C. MD5
- D. DES
Answer: C
NEW QUESTION 62
You want to reset SIC between smberlin and sgosaka.
In SmartDashboard, you choose sgosaka, Communication, Reset. On sgosaka, you start cpconfig, choose Secure Internal Communication and enter the new SIC Activation Key.
The screen reads The SIC was successfully initialized and jumps back to the menu. When trying to establish a connection, instead of a working connection, you receive this error message:
What is the reason for this behavior?
- A. The Gateway was not rebooted, which is necessary to change the SIC key.
- B. You must first initialize the Gateway object in SmartDashboard (i.e., right-click on the object, choose Basic Setup > Initialize).
- C. The activation key contains letters that are on different keys on localized keyboards.
Therefore, the activation can not be typed in a matching fashion. - D. The check Point services on the Gateway were not restarted because you are still in the cpconfig utility.
Answer: D
NEW QUESTION 63
Which one of these features is NOT associated with the Check Point URL Filtering and Application Control Blade?
- A. Use UserCheck to help users understand that certain websites are against the company's security policy.
- B. Configure rules to limit the available network bandwidth for specified users or groups.
- C. Detects and blocks malware by correlating multiple detection engines before users are affected.
- D. Make rules to allow or block applications and Internet sites for individual applications, categories, and risk levels.
Answer: C
NEW QUESTION 64
Fill in the blank: The _________ collects logs and sends them to the _________ .
- A. Log server;security management server
- B. Log server; Security Gateway
- C. Security management server; Security Gateway
- D. Security Gateways; log server
Answer: D
NEW QUESTION 65
Identify the ports to which the Client Authentication daemon listens on by default?
- A. 80, 256
- B. 8080, 529
- C. 256, 257
- D. 259, 900
Answer: D
Explanation:
Reference:http://digitalcrunch.com/check-point-firewall/list-of-check-point-ports/
NEW QUESTION 66
Fill in the blank: To create policy for traffic to or from a particular location, use the _____________.
- A. Geo policy shared policy
- B. HTTPS inspection
- C. Mobile Access software blade
- D. DLP shared policy
Answer: A
Explanation:
Explanation
Shared Policies
The Shared Policies section in the Security Policies shows the policies that are not in a Policy package. They are shared between all Policy packages.
Shared policies are installed with the Access Control Policy.
Software Blade
Description
Mobile Access
Launch Mobile Access policy in a SmartConsole. Configure how your remote users access internal resources, such as their email accounts, when they are mobile.
DLP
Launch Data Loss Prevention policy in a SmartConsole. Configure advanced tools to automatically identify data that must not go outside the network, to block the leak, and to educate users.
Geo Policy
Create a policy for traffic to or from specific geographical or political locations.
NEW QUESTION 67
You are going to perform a major upgrade. Which back up solution should you use to ensure your database
can be restored on that device?
- A. backup
- B. Database Revision
- C. logswitch
- D. snapshot
Answer: D
Explanation:
Explanation
The snapshot creates a binary image of the entire root (lv_current) disk partition. This includes Check Point
products, configuration, and operating system.
Starting in R77.10, exporting an image from one machine and importing that image on another machine of the
same type is supported.
The log partition is not included in the snapshot. Therefore, any locally stored FireWall logs will not be saved.
NEW QUESTION 68
Using mgmt_cli, what is the correct syntax to import a host object called Server_1 from the CLI?
- A. mgmt_cli add-host "Server_1" ip_address "10.15.123.10" --format txt
- B. mgmt_cli add object "Server_1" ip_address "10.15.123.10" --format json
- C. mgmt_cli add object-host "Server_1" ip_address "10.15.123.10" --format json
- D. mgmt_cli add host name "Server_1" ip_address "10.15.123.10" --format json
Answer: A
Explanation:
Explanation
References:
NEW QUESTION 69
In R80, Unified Policy is a combination of
- A. Firewall policy, address Translation and application and URL filtering, QoS Policy, Desktop Security Policy and Threat Prevention Policy.
- B. Access control policy, QoS Policy, Desktop Security Policy and VPN policy.
- C. Access control policy, QoS Policy, Desktop Security Policy and endpoint policy.
- D. Access control policy, QoS Policy, Desktop Security Policy and Threat Prevention Policy.
Answer: B
Explanation:
Explanation
D is the best answer given the choices.
Unified Policy
In R80 the Access Control policy unifies the policies of these pre-R80 Software Blades:
* Firewall and VPN
* Application Control and URL Filtering
* Identity Awareness
* Data Awareness
* Mobile Access
* Security Zones
NEW QUESTION 70
Administrator Kofi has just made some changes on his Management Server and then clicks on the Publish button in SmartConsole but then gets the error message shown in the screenshot below.
Where can the administrator check for more information on these errors?
- A. The Validations section in SmartConsole
- B. The Objects section in SmartConsole
- C. The Log and Monitor section in SmartConsole
- D. The Policies section in SmartConsole
Answer: A
Explanation:
Explanation
Validation Errors
The validations pane in SmartConsole shows configuration error messages. Examples of errors are object names that are not unique, and the use of objects that are not valid in the Rule Base.
To publish, you must fix the errors.
NEW QUESTION 71
......
Step by Step Guide to Prepare for 156-215.80 Exam: https://www.itexamdownload.com/156-215.80-valid-questions.html