Get CheckPoint 156-215.81 Dumps Questions [2023] To Gain Brilliant Result [Q64-Q80]

Rate this post

Get CheckPoint 156-215.81 Dumps Questions [2023] To Gain Brilliant Result

156-215.81 dumps – TestKingFree – 100% Passing Guarantee

What is the salary of a Check Point Certified Security Administrator R81 Professional?

The Average salary in different countries for a Check Point Certified Security Administrator R81 Professional

India – INR 7103141 per year
United States – USD 91,000 per year
UK – Pounds 74508 per year

Q64. What is the purpose of a Clean-up Rule?

Clean-up Rules do not server any purpose.

Provide a metric for determining unnecessary rules.

To drop any traffic that is not explicitly allowed.

Used to better optimize a policy.

These are basic access control rules we recommend for all Rule Bases:
There is also an implied rule that drops all traffic, but you can use the Cleanup rule to log the traffic.

Q65. Vanessa is a Firewall administrator. She wants to test a backup of her company’s production Firewall cluster Dallas_GW. She has a lab environment that is identical to her production environment. She decided to restore production backup via SmartConsole in lab environment.
Which details she need to fill in System Restore window before she can click OK button and test the backup?

Server, SCP, Username, Password, Path, Comment, Member

Server, TFTP, Username, Password, Path, Comment, All Members

Server, Protocol, Username, Password, Path, Comment, All Members

Server, Protocol, Username, Password, Path, Comment, Member

Q66. In SmartConsole, on which tab are Permissions and Administrators defined?

Manage and Settings

Logs and Monitor

Security Policies

Gateways and Servers

Q67. A security zone is a group of one or more network interfaces from different centrally managed gateways. What is considered part of the zone?

The zone is based on the network topology and determined according to where the interface leads to.

Security Zones are not supported by Check Point firewalls.

The firewall rule can be configured to include one or more subnets in a zone.

The local directly connected subnet defined by the subnet IP and subnet mask.

Q68. Secure Internal Communication (SIC) is handled by what process?

CPM

HTTPS

FWD

CPD

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk97638

Q69. You want to establish a VPN, using certificates. Your VPN will exchange certificates with an external partner.
Which of the following activities sh you do first?

Create a new logical-server object to represent your partner’s CA

Exchange exported CA keys and use them to create a new server object to represent your partner’s Certificate Authority (CA)

Manually import your partner’s Certificate Revocation List.

Manually import your partner’s Access Control List.

Q70. Fill in the blank: When LDAP is integrated with Check Point Security Management, it is then referred to as _______.

User Center

User Administration

User Directory

UserCheck

Q71. To provide updated malicious data signatures to all Threat Prevention blades, the Threat Prevention gateway does what with the data?

Cache the data to speed up its own function.

Share the data to the ThreatCloud for use by other Threat Prevention blades.

Log the traffic for Administrator viewing.

Delete the data to ensure an analysis of the data is done each time.

Data from malicious attacks are shared between the Threat Prevention Software Blades and help to keep your network safe. For example, the signatures from threats that Threat Emulation identifies are added to the ThreatCloud for use by the other Threat Prevention blades. src https://infosec.co.il/wp-content/uploads/2020/06/12-GAiA-R80.40-Threat-Prevention.pdf page 28.

Q72. You have created a rule at the top of your Rule Base to permit Guest Wireless access to the Internet. However, when guest users attempt to reach the Internet, they are not seeing the splash page to accept your Terms of Service, and cannot access the Internet.
How can you fix this?

Right click Accept in the rule, select “More”, and then check “Enable Identity Captive Portal”

On the firewall object, Legacy Authentication screen, check “Enable Identity Captive Portal”

In the Captive Portal screen of Global Properties, check “Enable Identity Captive Portal”

On the Security Management Server object, check the box “Identity Logging”

Q73. Mesh and Star are two types of VPN topologies.
Which statement below is TRUE about these types of communities?

A star community requires Check Point gateways, as it is a Check Point proprietary technology.

In a star community, satellite gateways cannot communicate with each other.

In a mesh community, member gateways cannot communicate directly with each other.

In a mesh community, all members can create a tunnel with any other member.

Q74. How can the changes made by an administrator before publishing the session be seen by a superuser administrator?

By impersonating the administrator with the ‘Login as…’ option

They cannot be seen

From the SmartView Tracker audit log

From Manage and Settings > Sessions, right click on the session and click ‘View Changes…’

Q75. Which of the following is NOT a valid deployment option for R80?

All-in-one (stand-alone)

CloudGuard

Distributed

Bridge Mode

Q76. Which of the following is TRUE about the Check Point Host object?

Check Point Host has no routing ability even if it has more than one interface installed.

When you upgrade to R81 from R77.30 or earlier versions, Check Point Host objects are converted to gateway objects.

Check Point Host is capable of having an IP forwarding mechanism.

Check Point Host can act as a firewall.

Q77. One of major features in R80.x SmartConsole is concurrent administration. Which of the following is NOT possible considering that AdminA, AdminB, and AdminC are editing the same Security Policy?

AdminC sees a lock icon which indicates that the rule is locked for editing by another administrator.

AdminA and AdminB are editing the same rule at the same time.

AdminB sees a pencil icon next the rule that AdminB is currently editing.

AdminA, AdminB and AdminC are editing three different rules at the same time.

In SmartConsole, administrators work with sessions. A session is created each time an administrator logs into SmartConsole. Changes made in the session are saved automatically. These changes are private and available only to the administrator. To avoid configuration conflicts, other administrators see a lock icon on objects and rules that are being edited in other sessions.
Reference:
http://downloads.checkpoint.com/dc/download.htm?ID=65846

Q78. R81.10 management server can manage gateways with which versions installed?

Versions R77 and higher

Versions R76 and higher

Versions R75.20 and higher

Version R75 and higher

Q79. Where can administrator edit a list of trusted SmartConsole clients in R80?

cpconfig on a Security Management Server, in the WebUI logged into a Security Management Server.

Only using SmartConsole: Manage and Settings > Permissions and Administrators > Advanced > Trusted Clients.

In cpconfig on a Security Management Server, in the WebUI logged into a Security Management Server, in SmartConsole: Manage and Settings>Permissions and Administrators>Advanced>Trusted Clients.

WebUI client logged to Security Management Server, SmartDashboard: Manage and Settings>Permissions and Administrators>Advanced>Trusted Clients, via cpconfig on a Security Gateway.

Q80. Fill in the blank: Licenses can be added to the License and Contract repository ________ .

From the User Center, from a file, or manually

From a file, manually, or from SmartView Monitor

Manually, from SmartView Monitor, or from the User Center

From SmartView Monitor, from the User Center, or from a file

Loading …