156-215.80 Dumps 2021

NEW QUESTION 1
You have configured SNX on the Security Gateway. The client connects to the Security Gateway and the user enters the authentication credentials. What must happen after authentication that allows the client to connect to the Security Gateway's VPN domain?

• A. SNX modifies the routing table to forward VPN traffic to the Security Gateway.
• B. An office mode address must be obtained by the client.
• C. The SNX client application must be installed on the client.
• D. Active-X must be allowed on the client.

Answer: A

NEW QUESTION 2
When a Security Gateways sends its logs to an IP address other than its own, which deployment option is installed?

• A. Distributed
• B. Standalone
• C. Bridge

Answer: A

NEW QUESTION 3
In the Check Point three-tiered architecture, which of the following is NOT a function of the Security Management Server (Security Management Server)?

• A. Display policies and logs on the administrator's workstation.
• B. Verify and compile Security Policies.
• C. Processing and sending alerts such as SNMP traps and email notifications.
• D. Store firewall logs to hard drive storage.

Answer: A

NEW QUESTION 4
Which type of the Check Point license ties the package license to the IP address of the Security Management Server?

• A. Local
• B. Central
• C. Corporate
• D. Formal

Answer: B

NEW QUESTION 5
While enabling the Identity Awareness blade the Identity Awareness wizard does not automatically detect the windows domain. Why does it not detect the windows domain?

• A. Security Gateways is not part of the Domain
• B. SmartConsole machine is not part of the domain
• C. SMS is not part of the domain
• D. Identity Awareness is not enabled on Global properties

Answer: B

Explanation: To enable Identity Awareness:
Log in to SmartDashboard.
From the Network Objects tree, expand the Check Poinbtranch.
Double-click the Security Gateway on which to enable Identity Awareness.
In the Software Blades section, select Identity Awarenesosn the Network Security tab. The Identity Awareness Configuration wizard opens.
Select one or more options. These options set the methods for acquiring identities of managed and unmanaged assets.
AD Query - Lets the Security Gateway seamlessly identify Active Directory users and computers.
Browser-Based Authentication - Sends users to a Web page to acquire identities from unidentified users. If Transparent Kerberos Authentication is configured, AD users may be identified transparently.
Terminal Servers - Identify users in a Terminal Server environment (originating from one IP address).
See Choosing Identity Sources.
Note - When you enable Browser-Based Authentication on a Security Gateway that is on an IP Series appliance, make sure to set the Voyager management application port to a port other than 443 or 80.
Click Next.
The Integration With Active Directory window opens.
When SmartDashboard is part of the domain, SmartDashboard suggests this domain automatically. If you select this domain, the system creates an LDAP Account Unit with alolf the domain controllers in the organization's Active Directory.

NEW QUESTION 6
Which of the following statements accurately describes the command snapshot?

• A. snapshot creates a full OS-level backup, including network-interface data, Check Point production information, and configuration settings of a GAiA Security Gateway.
• B. snapshot creates a Security Management Server full system-level backup on any OS
• C. snapshot stores only the system-configuration settings on the Gateway
• D. A Gateway snapshot includes configuration settings and Check Point product information from the remote Security Management Server

Answer: A

NEW QUESTION 7
Fill in the blank: A(n) _____ rule is created by an administrator and is located before the first and before last rules in the Rule Base.

• A. Firewall drop
• B. Explicit
• C. Implicit accept
• D. Implicit drop
• E. Implied

Answer: E

Explanation: This is the order that rules are enforced:
First Implied Rule: You cannot edit or delete this rule and no explicit rules can be placed before it.
Explicit Rules: These are rules that you create.
Before Last Implied Rules: These implied rules are applied before the last explicit rule.
Last Explicit Rule: We recommend that you use the Cleanup rule as the last explicit rule.
Last Implied Rules: Implied rules that are configured as Last in Global Properties.
Implied Drop Rule: Drops all packets without logging.

NEW QUESTION 8
The SmartEvent R80 Web application for real-time event monitoring is called:

• A. SmartView Monitor
• B. SmartEventWeb
• C. There is no Web application for SmartEvent
• D. SmartView

Answer: B

NEW QUESTION 9
When connected to the Check Point R80 Management Server using the SmartConsole the first administrator to connect has a lock on:

• A. Only the objects being modified in the Management Database and other administrators can connect to make changes using a special session as long as they all connect from the same LAN network.
• B. The entire Management Database and other administrators can connect to make changes only if the first administrator switches to Read-only.
• C. The entire Management Database and all sessions and other administrators can connect only as Read-only.
• D. Only the objects being modified in his session of the Management Database and other administrators can connect to make changes using different sessions.

Answer: D

NEW QUESTION 10
Look at the following screenshot and select the BEST answer.

• A. Clients external to the Security Gateway can download archive files from FTP_Ext server using FTP.
• B. Internal clients can upload and download any-files to FTP_Ext-server using FTP.
• C. Internal clients can upload and download archive-files to FTP_Ext server using FTP.
• D. Clients external to the Security Gateway can upload any files to the FTP_Ext-server using FTP.

Answer: A

NEW QUESTION 11
Which option would allow you to make a backup copy of the OS and Check Point configuration, without stopping Check Point processes?

• A. All options stop Check Point processes
• B. backup
• C. migrate export
• D. snapshot

Answer: D

NEW QUESTION 12
What is the default shell of Gaia CLI?

• A. Monitor
• B. CLI.sh
• C. Read-only
• D. Bash

Answer: B

Explanation: This chapter gives an introduction to the Gaia command line interface (CLI). The default shell of the CLI is called clish.

NEW QUESTION 13
In what way is Secure Network Distributor (SND) a relevant feature of the Security Gateway?

• A. SND is a feature to accelerate multiple SSL VPN connections
• B. SND is an alternative to IPSec Main Mode, using only 3 packets
• C. SND is used to distribute packets among Firewall instances
• D. SND is a feature of fw monitor to capture accelerated packets

Answer: C

NEW QUESTION 14
Fill in the blank: A ____ VPN deployment is used to provide remote users with secure access to internal corporate resources by authenticating the user through an internet browser.

• A. Clientless remote access
• B. Clientless direct access
• C. Client-based remote access
• D. Direct access

Answer: A

Explanation: Clientless - Users connect through a web browser and use HTTPS connections. Clientless solutions usually supply access to web-based corporate resources.

NEW QUESTION 15
The ______ software blade package uses CPU-level and OS-level sandboxing in order to delect and block malware.

• A. Next Generation Threat Prevention
• B. Next Generation Threat Emulation
• C. Next Generation Threat Extraction
• D. Next Generation Firewall

Answer: B

NEW QUESTION 16
Phase 1 of the two-phase negotiation process conducted by IKE operates in a_____ mode.

• A. Main
• B. Authentication
• C. Quick
• D. High Alert

Answer: A

NEW QUESTION 17
Which of the following methods can be used to update the trusted log server regarding the policy and configuration changes performed on the Security Management Server?

• A. Save Policy
• B. install Database
• C. Save Session
• D. install Policy

Answer: D