Top Quality 156-215.80 Exam Questions and Answers 2021

NEW QUESTION 1
Which utility allows you to configure the DHCP service on GAIA from the command line?

• A. ifconfig
• B. dhcp_cfg
• C. sysconfig
• D. cpconfig

Answer: C

Explanation: Sysconfig Configuration Options

NEW QUESTION 2
Fill in the blank: Each cluster has _____ interfaces.

• A. Five
• B. Two
• C. Three
• D. Four

Answer: C

Explanation: Each cluster member has three interfaces: one external interface, one internal interface, and one for synchronization. Cluster member interfaces facing in each direction are connected via a switch, router, or VLAN switch.

NEW QUESTION 3
When installing a dedicated R80 SmartEvent server, what is the recommended size of the root partition?

• A. Any size
• B. Less than 20GB
• C. More than 10GB and less than 20 GB
• D. At least 20GB

Answer: D

NEW QUESTION 4
What is the appropriate default Gaia Portal address?

• A. HTTP://[IPADDRESS]
• B. HTTPS://[IPADDRESS]:8080
• C. HTTPS://[IPADDRESS]:4434
• D. HTTPS://[IPADDRESS]

Answer: D

NEW QUESTION 5
John Adams is an HR partner in the ACME organization. ACME IT wants to limit access to HR servers to designated IP addresses to minimize malware infection and unauthorized access risks. Thus, gateway policy permits access only from Join's desktop which is assigned an IP address 10.0.0.19 via DHCP.
John received a laptop and wants to access the HR Web Server from anywhere in the organization. The IT department gave the laptop a static IP address, but the limits him to operating it only from his desk. The current Rule Base contains a rule that lets John Adams access the HR Web Server from his laptop. He wants to move around the organization and continue to have access to the HR Web Server. To make this scenario work, the IT administrator:
1) Enables Identity Awareness on a gateway, selects AD Query as one of the Identity Sources.
2) Adds an access role object to the Firewall Rule Base that lets John Adams PC access the HR Web Server from any machine and from any location.
John plugged in his laptop to the network on a different network segment and he is not able to connect. How does he solve this problem?

• A. John should install the identity Awareness Agent
• B. The firewall admin should install the Security Policy
• C. John should lock and unlock the computer
• D. Investigate this as a network connectivity issue

Answer: C

NEW QUESTION 6
Which of the following is NOT a valid deployment option for R80?

• A. All-in-one (stand-alone)
• B. Log Server
• C. SmartEvent
• D. Multi-domain management server

Answer: D

NEW QUESTION 7
In what way are SSL VPN and IPSec VPN different?

• A. SSL VPN is using HTTPS in addition to IKE, whereas IPSec VPN is clientless
• B. SSL VPN adds an extra VPN header to the packet, IPSec VPN does not
• C. IPSec VPN does not support two factor authentication, SSL VPN does support this
• D. IPSec VPN uses an additional virtual adapter, SSL VPN uses the client network adapter only

Answer: D

NEW QUESTION 8
Which of these components does NOT require a Security Gateway R77 license?

• A. Security Management Server
• B. Check Point Gateway
• C. SmartConsole
• D. SmartUpdate upgrading/patching

Answer: C

NEW QUESTION 9
You installed Security Management Server on a computer using GAiA in the MegaCorp home office. You use IP address 10.1.1.1. You also installed the Security Gateway on a second GAiA computer, which you plan to ship to another Administrator at a MegaCorp hub office. What is the correct order for pushing SIC certificates to the Gateway before shipping it?
1. Run cpconfig on the Gateway, select Secure Internal Communication, enter the activation key, and reconfirm.
2. Initialize Internal Certificate Authority (ICA) on the Security Management Server.
3. Configure the Gateway object with the host name and IP addresses for the remote site.
4. Click the Communication button in the Gateway object's General screen, enter the activation key, and click Initialize and OK.
5. Install the Security Policy.

• A. 2, 3, 4, 1, 5
• B. 2, 1, 3, 4, 5
• C. 1, 3, 2, 4, 5
• D. 2, 3, 4, 5, 1

Answer: B

NEW QUESTION 10
Fill in the blank: A ____ is used by a VPN gateway to send traffic as if it were a physical interface.

• A. VPN Tunnel Interface
• B. VPN community
• C. VPN router
• D. VPN interface

Answer: A

Explanation: Route Based VPN
VPN traffic is routed according to the routing settings (static or dynamic) of the Security Gateway operating system. The Security Gateway uses a VTI (VPN Tunnel Interface) to send the VPN traffic as if it were a physical interface. The VTIs of Security Gateways in a VPN community connect and can support dynamic routing protocols.

NEW QUESTION 11
Which of the following is NOT an authentication scheme used for accounts created through SmartConsole?

• A. Security questions
• B. Check Point password
• C. SecurID
• D. RADIUS

Answer: A

Explanation: Authentication Schemes :- Check Point Password
- Operating System Password
- RADIUS
- SecurID
- TACAS
- Undefined If a user with an undefined authentication scheme is matched to a Security Rule with some form of authentication, access is always denied.

NEW QUESTION 12
What component of R80 Management is used for indexing?

• A. DBSync
• B. API Server
• C. fwm
• D. SOLR

Answer: D

NEW QUESTION 13
Look at the screenshot below. What CLISH command provides this output?

• A. show configuration all
• B. show confd configuration
• C. show confd configuration all
• D. show configuration

Answer: D

NEW QUESTION 14
Jack works for a managed service provider and he has been tasked to create 17 new policies for several new customers. He does not have much time. What is the BEST way to do this with R80 security management?

• A. Create a text-file with mgmt_cli script that creates all objects and policie
• B. Open the file in SmartConsole Command Line to run it.
• C. Create a text-file with Gaia CLI -commands in order to create all objects and policie
• D. Run the file in CLISH with command load configuration.
• E. Create a text-file with DBEDIT script that creates all objects and policie
• F. Run the file in the command line of the management server using command dbedit -f.
• G. Use Object Explorer in SmartConsole to create the objects and Manage Policies from the menu to create the policies.

Answer: A

Explanation: Did you know: mgmt_cli can accept csv files as inputs using the --batch option.
The first row should contain the argument names and the rows below it should hold the values for these parameters.
So an equivalent solution to the powershell script could look like this:
data.csv:

mgmt_cli add host --batch data.csv -u <username> -p <password> -m <management server>
This can work with any type of command not just "add host" : simply replace the column names with the ones relevant to the command you need.

NEW QUESTION 15
Fill in the blank: RADIUS Accounting gets _____ data from requests generated by the accounting client

• A. Destination
• B. Identity
• C. Payload
• D. Location

Answer: B

Explanation: How RADIUS Accounting Works with Identity Awareness
RADIUS Accounting gets identity data from RADIUS Accounting Requests generated by the RADIUS accounting client.

NEW QUESTION 16
Match the following commands to their correct function. Each command has one function only listed.

• A. C1>F6; C2>F4; C3>F2; C4>F5
• B. C1>F2; C2>F1; C3>F6; C4>F4
• C. C1>F2; C2>F4; C3>F1; C4>F5
• D. C1>F4; C2>F6; C3>F3; C4>F5

Answer: A

NEW QUESTION 17
With which command can you view the running configuration of Gaia-based system.

• A. show conf-active
• B. show configuration active
• C. show configuration
• D. show running-configuration

Answer: C