New ExamBoosts 156-215.80 Exam Questions Real 156-215.80 Dumps Updated on May 07, 2022 [Q145-Q162]

Rate this post

New ExamBoosts 156-215.80 Exam Questions| Real 156-215.80 Dumps Updated on May 07, 2022

156-215.80 Braindumps – 156-215.80 Questions to Get Better Grades

NEW QUESTION 145
Which utility shows the security gateway general system information statistics like operating system information and resource usage, and individual software blade statistics of VPN, Identity Awareness and DLP?

cpconfig

fw ctl pstat

cpview

fw ctl multik stat

CPView Utility is a text based built-in utility that can be run (‘cpview’ command) on Security Gateway / Security Management Server / Multi-Domain Security Management Server. CPView Utility shows statistical data that contain both general system information (CPU, Memory, Disk space) and information for different Software Blades (only on Security Gateway). The data is continuously updated in easy to access views.

NEW QUESTION 146
Fill in the blank: The __________ is used to obtain identification and security information about network users.

User Directory

User server

UserCheck

User index

Explanation
Explanation/Reference:
https://www.checkpoint.com/downloads/product-related/datasheets/DS_UserDirectorySWB.pdf

NEW QUESTION 147
ABC Corp., and have recently returned from a training course on Check Point’s new advanced R80 management platform. You are presenting an in-house R80 Management to the other administrators in ABC Corp.

How will you describe the new “Publish” button in R80 Management Console?

The Publish button takes any changes an administrator has made in their management session, publishes a copy to the Check Point of R80, and then saves it to the R80 database.

The Publish button takes any changes an administrator has made in their management session and publishes a copy to the Check Point Cloud of R80 and but does not save it to the R80

The Publish button makes any changes an administrator has made in their management session visible to all other administrator sessions and saves it to the Database.

The Publish button makes any changes an administrator has made in their management session visible to the new Unified Policy session and saves it to the Database.

Explanation
To make your changes available to other administrators, and to save the database before installing a policy, you must publish the session. When you publish a session, a new database version is created.
References:

NEW QUESTION 148
Which option, when applied to a rule, allows traffic to VPN gateways in specific VPN communities?

All Connections (Clear or Encrypted)

Accept all encrypted traffic

Specific VPN Communities

All Site-to-Site VPN Communities

Explanation
The first rule is the automatic rule for the Accept All Encrypted Traffic feature. The Firewalls for the Security
Gateways in the BranchOffices and LondonOffices VPN communities allow all VPN traffic from hosts in
clients in these communities. Traffic to the Security Gateways is dropped. This rule is installed on all Security
Gateways in these communities.
2. Site to site VPN – Connections between hosts in the VPN domains of all Site to Site VPN communities are
allowed. These are the only protocols that are allowed: FTP, HTTP, HTTPS and SMTP.
3. Remote access – Connections between hosts in the VPN domains of RemoteAccess VPN community are
allowed. These are the only protocols that are allowed: HTTP, HTTPS, and IMAP.

NEW QUESTION 149
If there are two administrators logged in at the same time to the SmartConsole, and there are objects locked for editing, what must be done to make them available to other administrators?

Publish or discard the session.

Revert the session.

Save and install the Policy.

Delete older versions of database.

To make changes available to all administrators, and to unlock the objects and rules that are being edited, the administrator must publish the session.
To make your changes available to other administrators, and to save the database before installing a policy, you must publish the session. When you publish a session, a new database version is created.
When you select Install Policy, you are prompted to publish all unpublished changes. You cannot install a policy if the included changes are not published.
Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm?
topic=documents/R80/CP_R80_SecMGMT/126197

NEW QUESTION 150
Which configuration element determines which traffic should be encrypted into a VPN tunnel vs. sent in the clear?

The firewall topologies

NAT Rules

The Rule Base

The VPN Domains

NEW QUESTION 151
Fill in the blank: The ________ feature allows administrators to share a policy with other policy packages.

Shared policy packages

Shared policies

Concurrent policy packages

Concurrent policies

NEW QUESTION 152
Which Threat Prevention Profile is not included by default in R80 Management?

Basic – Provides reliable protection on a range of non-HTTP protocols for servers, with minimal impact on network performance

Optimized – Provides excellent protection for common network products and protocols against recent or popular attacks

Strict – Provides a wide coverage for all products and protocols, with impact on network performance

Recommended – Provides all protection for all common network products and servers, with impact on network performance

Explanation/Reference: https://sc1.checkpoint.com/documents/R80/CP_R80BC_ThreatPrevention/html_frameset.htm?
topic=documents/R80/CP_R80BC_ThreatPrevention/136486

NEW QUESTION 153
Web Control Layer has been set up using the settings in the following dialogue:

Consider the following policy and select the BEST answer.

Traffic that does not match any rule in the subpolicy is dropped.

All employees can access only Youtube and Vimeo.

Access to Youtube and Vimeo is allowed only once a day.

Anyone from internal network can access the internet, expect the traffic defined in drop rules 5.2, 5.5 and 5.6.

Explanation/Reference:
Explanation:
Policy Layers and Sub-Policies
R80 introduces the concept of layers and sub-policies, allowing you to segment your policy according to your network segments or business units/functions. In addition, you can also assign granular privileges by layer or sub-policy to distribute workload and tasks to the most qualified administrators With layers, the rule base is organized into a set of security rules. These set of rules or layers, are

inspected in the order in which they are defined, allowing control over the rule base flow and the security functionalities that take precedence. If an “accept” action is performed across a layer, the inspection will continue to the next layer. For example, a compliance layer can be created to overlay across a cross-section of rules.
Sub-policies are sets of rules that are created for a specific network segment, branch office or business

unit, so if a rule is matched, inspection will continue through this subset of rules before it moves on to the next rule.
Sub-policies and layers can be managed by specific administrators, according to their permissions

profiles. This facilitates task delegation and workload distribution.
Reference: https://community.checkpoint.com/docs/DOC-1065

NEW QUESTION 154
There are two R77.30 Security Gateways in the Firewall Cluster. They are named FW_A and FW_B. The cluster is configured to work as HA (High availability) with default cluster configuration. FW_A is configured to have higher priority than FW_B. FW_A was active and processing the traffic in the morning. FW_B was standby. Around 1100 am, its interfaces went down and this caused a failover. FW_B became active. After an hour, FW_A’s interface issues were resolved and it became operational. When it re-joins the cluster, will it become active automatically?

No, since “maintain current active cluster member” option on the cluster object properties is enabled by default

No, since “maintain current active cluster member” option is enabled by default on the Global Properties

Yes, since “Switch to higher priority cluster member” option on the cluster object properties is enabled by default

Yes, since “Switch to higher priority cluster member” option is enabled by default on the Global Properties

What Happens When a Security Gateway Recovers?
In a Load Sharing configuration, when the failed Security Gateway in a cluster recovers, all connections are redistributed among all active members. High Availability and Load Sharing in ClusterXL ClusterXL Administration Guide R77 Versions | 31 In a High Availability configuration, when the failed Security Gateway in a cluster recovers, the recovery method depends on the configured cluster setting. The options are:
* Maintain Current Active Security Gateway means that if one member passes on control to a lower priority member, control will be returned to the higher priority member only if the lower priority member fails. This mode is recommended if all members are equally capable of processing traffic, in order to minimize the number of failover events.
* Switch to Higher Priority Security Gateway means that if the lower priority member has control and the higher priority member is restored, then control will be returned to the higher priority member. This mode is recommended if one member is better equipped for handling connections, so it will be the default Security Gateway.
Reference: http://dl3.checkpoint.com/paid/7e/7ef174cf00762ceaf228384ea20ea64a/ CP_R77_ClusterXL_AdminGuide.pdf?HashKey=1479822138_31410b1f8360074be87fd8f1ab682464&xtn=.pdf

NEW QUESTION 155
Which type of Check Point license is tied to the IP address of a specific Security Gateway and cannot be transferred to a gateway that has a different IP address?

Central

Corporate

Formal

Local

NEW QUESTION 156
Consider the Global Properties following settings:

The selected option “Accept Domain Name over UDP (Queries)” means:

UDP Queries will be accepted by the traffic allowed only through interfaces with external anti-spoofing topology and this will be done before first explicit rule written by Administrator in a Security Policy.

All UDP Queries will be accepted by the traffic allowed through all interfaces and this will be done before first explicit rule written by Administrator in a Security Policy.

No UDP Queries will be accepted by the traffic allowed through all interfaces and this will be done before first explicit rule written by Administrator in a Security Policy.

All UDP Queries will be accepted by the traffic allowed by first explicit rule written by Administrator in a Security Policy.

NEW QUESTION 157
Which of the following is NOT defined by an Access Role object?

Source Network

Source Machine

Source User

Source Server

NEW QUESTION 158
By default, the SIC certificates issued by R80 Management Server are based on the ____________ algorithm.

SHA-256

SHA-200

MD5

SHA-128

NEW QUESTION 159
Which of these attributes would be critical for a site-to-site VPN?

Scalability to accommodate user groups

Centralized management

Strong authentication

Strong data encryption

Explanation

NEW QUESTION 160
Which Check Point software blade prevents malicious files from entering a network using virus signatures and anomaly-based protections from ThreatCloud?

Firewall

Application Control

Anti-spam and Email Security

Antivirus

The enhanced Check Point Antivirus Software Blade uses real-time virus signatures and anomaly-based protections from ThreatCloud, the first collaborative network to fight cybercrime, to detect and block malware at the gateway before users are affected.Reference: https://www.checkpoint.com/products/antivirus-software-blade/

NEW QUESTION 161
What is the purpose of the Clean-up Rule?

To log all traffic that is not explicitly allowed or denied in the Rule Base

To clean up policies found inconsistent with the compliance blade reports

To remove all rules that could have a conflict with other rules in the database

To eliminate duplicate log entries in the Security Gateway

Explanation
Explanation:
These are basic access control rules we recommend for all Rule Bases:
* Stealth rule that prevents direct access to the Security Gateway.
* Cleanup rule that drops all traffic that is not allowed by the earlier rules.
There is also an implied rule that drops all traffic, but you can use the Cleanup rule to log the traffic.
Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Firewall_WebAdmin/92703.htm

NEW QUESTION 162
Which of the following is NOT a component of a Distinguished Name?

Organization Unit

Country

Common name

User container

Explanation/Reference:
Explanation: Distinguished Name Components
CN=common name, OU=organizational unit, O=organization, L=locality, ST=state or province, C=country name Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_SecMan_WebAdmin/html_frameset.htm?
topic=documents/R76/CP_R76_SecMan_WebAdmin/71950

Loading …