156-215.80 Guide
156-215.80 Free Practice Questions 2021
Posted by Alex Baker to 156-215.80
Follow @2passeasy
Your success in 156-215.80 Free Practice Questions is our sole target and we develop all our 156-215.80 Braindumps in a way that facilitates the attainment of this target. Not only is our 156-215.80 Study Guides material the best you can find, it is also the most detailed and the most updated. 156-215.80 Dumps Questions for 156-215.80 are written to the highest standards of technical accuracy.
Online 156-215.80 free dumps demo Below:
NEW QUESTION 1
When doing a Stand-Alone Installation, you would install the Security Management Server with which other Check Point architecture component?
- A. None, Security Management Server would be installed by itself.
- B. SmartConsole
- C. SecureClient
- D. SmartEvent
Answer: D
Explanation: There are different deployment scenarios for Check Point software products.
Standalone Deployment - The Security Management Server and the Security Gateway are installed on the same computer or appliance.
NEW QUESTION 2
Which of the following are types of VPN communicates?
- A. Pentagon, star, and combination
- B. Star, octagon, and combination
- C. Combined and star
- D. Meshed, star, and combination
Answer: D
NEW QUESTION 3
What happens if the identity of a user is known?
- A. If the user credentials do not match an Access Role, the traffic is automatically dropped.
- B. If the user credentials do not match an Access Role, the system displays a sandbox.
- C. If the user credentials do not match an Access Role, the gateway moves onto the next rule.
- D. If the user credentials do not match an Access Role, the system displays the Captive Portal.
Answer: C
NEW QUESTION 4
Ken wants to obtain a configuration lock from other administrator on R80 Security Management Server. He can do this via WebUI or a via CLI. Which command should be use in CLI? Choose the correct answer.
- A. remove database lock
- B. The database feature has one command lock database override.
- C. override database lock
- D. The database feature has two commands: lock database override and unlock databas
- E. Both will work.
Answer: D
Explanation: Use the database feature to obtain the configuration lock. The database feature has two commands:
lock database [override].
unlock database
The commands do the same thing: obtain the configuration lock from another administrator.
NEW QUESTION 5
When an encrypted packet is decrypted, where does this happen?
- A. Security policy
- B. Inbound chain
- C. Outbound chain
- D. Decryption is not supported
Answer: A
NEW QUESTION 6
What are types of Check Point APIs available currently as part of R80.10 code?
- A. Security Gateway API, Management API, Threat Prevention API and Identity Awareness Web Services API
- B. Management API, Threat Prevention API, Identity Awareness Web Services API and OPSEC SDK API
- C. OSE API, OPSEC SDK API, Threat Prevention API and Policy Editor API
- D. CPMI API, Management API, Threat Prevention API and Identity Awareness Web Services API
Answer: B
NEW QUESTION 7
Which of the following is the most secure means of authentication?
- A. Password
- B. Certificate
- C. Token
- D. Pre-shared secret
Answer: B
NEW QUESTION 8
Which Check Point software blade provides visibility of users, groups and machines while also providing access control through identity-based policies?
- A. Firewall
- B. Identity Awareness
- C. Application Control
- D. URL Filtering
Answer: B
Explanation: Check Point Identity Awareness Software Blade provides granular visibility of users, groups and machines, providing unmatched application and access control through the creation of accurate, identity-based policies. Centralized management and monitoring allows for policies to be managed from a single, unified console.
NEW QUESTION 9
What are the three conflict resolution rules in the Threat Prevention Policy Layers?
- A. Conflict on action, conflict on exception, and conflict on settings
- B. Conflict on scope, conflict on settings, and conflict on exception
- C. Conflict on settings, conflict on address, and conflict on exception
- D. Conflict on action, conflict on destination, and conflict on settings
Answer: C
NEW QUESTION 10
In order to modify Security Policies the administrator can use which of the following tools? Select the BEST answer.
- A. Command line of the Security Management Server or mgmt_cli.exe on any Windows computer.
- B. SmartConsole and WebUI on the Security Management Server.
- C. mgmt_cli or WebUI on Security Gateway and SmartConsole on the Security Management Server.
- D. SmartConsole or mgmt_cli on any computer where SmartConsole is installed.
Answer: D
NEW QUESTION 11
According to Check Point Best Practice, when adding a 3rd party gateway to a Check Point security solution what object SHOULD be added? A(n):
- A. Interoperable Device
- B. Network Node
- C. Externally managed gateway
- D. Gateway
Answer: A
NEW QUESTION 12
Which one of the following is true about Threat Extraction?
- A. Always delivers a file to user
- B. Works on all MS Office, Executables, and PDF files
- C. Can take up to 3 minutes to complete
- D. Delivers file only if no threats found
Answer: B
NEW QUESTION 13
Which of the below is the MOST correct process to reset SIC from SmartDashboard?
- A. Run cpconfig, and click Reset.
- B. Click the Communication button for the firewall object, then click Rese
- C. Run cpconfig on the gateway and type a new activation key.
- D. Run cpconfig, and select Secure Internal Communication > Change One Time Password.
- E. Click Communication > Reset on the Gateway object, and type a new activation key.
Answer: B
NEW QUESTION 14
Full synchronization between cluster members is handled by Firewall Kernel. Which port is used for this?
- A. UDP port 265
- B. TCP port 265
- C. UDP port 256
- D. TCP port 256
Answer: B
NEW QUESTION 15
Administrator Dave logs into R80 Management Server to review and makes some rule changes. He notices that there is a padlock sign next to the DNS rule in the Rule Base.
What is the possible Explanation: for this?
- A. DNS Rule is using one of the new feature of R80 where an administrator can mark a rule with the padlock icon to let other administrators know it is important.
- B. Another administrator is logged into the Management and currently editing the DNS Rule.
- C. DNS Rule is a placeholder rule for a rule that existed in the past but was deleted.
- D. This is normal behavior in R80 when there are duplicate rules in the Rule Base.
Answer: B
NEW QUESTION 16
What is the difference between an event and a log?
- A. Events are generated at gateway according to Event Policy
- B. A log entry becomes an event when it matches any rule defined in Event Policy
- C. Events are collected with SmartWorkflow from Trouble Ticket systems
- D. Logs and Events are synonyms
Answer: B
NEW QUESTION 17
Where do we need to reset the SIC on a gateway object?
- A. SmartDashboard > Edit Gateway Object > General Properties > Communication
- B. SmartUpdate > Edit Security Management Server Object > SIC
- C. SmartUpdate > Edit Gateway Object > Communication
- D. SmartDashboard > Edit Security Management Server Object > SIC
Answer: A
Recommend!! Get the Full 156-215.80 dumps in VCE and PDF From 2passeasy, Welcome to Download: https://www.2passeasy.com/dumps/156-215.80/ (New 440 Q&As Version)
To know more about the 156-215.80, click here.