Check Point Certified Security Administrator R81 156-215.81 Practice Exam Questions Released For Your Preparation

1. Fill in the blank: When LDAP is integrated with Check Point Security Management, it is then referred to as _______

2. Which of the following is NOT a back up method?

3. R80 Security Management Server can be installed on which of the following operating systems?

4. There are two R77.30 Security Gateways in the Firewall Cluster. They are named FW_A and FW_B. The cluster is configured to work as HA (High availability) with default cluster configuration. FW_A is configured to have higher priority than FW_B. FW_A was active and processing the traffic in the morning. FW_B was standby. Around 1100 am, its interfaces went down and this caused a failover. FW_B became active. After an hour, FW_A’s interface issues were resolved and it became operational.

When it re-joins the cluster, will it become active automatically?

5. In which VPN community is a satellite VPN gateway not allowed to create a VPN tunnel with another satellite VPN gateway?

6. Which feature in R77 permits blocking specific IP addresses for a specified time period?

7. Administrator wishes to update IPS from SmartConsole by clicking on the option “update now” under the IPS tab.

Which device requires internet access for the update to work?

8. Which authentication scheme requires a user to possess a token?

9. Which SmartConsole component can Administrators use to track changes to the Rule Base?

10. Which directory holds the SmartLog index files by default?

11. What CLI utility allows an administrator to capture traffic along the firewall inspection chain?

12. Where can administrator edit a list of trusted SmartConsole clients in R80?

13. Your bank's distributed R77 installation has Security Gateways up for renewal.

Which SmartConsole application will tell you which Security Gateways have licenses that will expire within the next 30 days?

14. What is the default shell of Gaia CLI?

15. Joey is using the computer with IP address 192.168.20.13. He wants to access web page “www.CheckPoint.com”, which is hosted on Web server with IP address 203.0.113.111.

How many rules on Check Point Firewall are required for this connection?

16. Which policy type is used to enforce bandwidth and traffic control rules?

17. Fill in the blanks: A security Policy is created in _________, stored in the _________, and Distributed to the various __________.

18. Provide very wide coverage for all products and protocols, with noticeable performance impact.





How could you tune the profile in order to lower the CPU load still maintaining security at good level? Select the BEST answer.

19. The most important part of a site-to-site VPN deployment is the ________.

20. The IT Management team is interested in the new features of the Check Point R80 Management and wants to upgrade but they are concerned that the existing R77.30 Gaia Gateways cannot be managed by R80 because it is so different.

As the administrator responsible for the Firewalls, how can you answer or confirm these concerns?

21. In the R80 SmartConsole, on which tab are Permissions and Administrators defined?

22. The Captive Portal tool:

23. What action can be performed from SmartUpdate R77?

24. In order to modify Security Policies the administrator can use which of the following tools? Select the BEST answer.

25. NAT can NOT be configured on which of the following objects?

26. What port is used for delivering logs from the gateway to the management server?

27. Jack works for a managed service provider and he has been tasked to create 17 new policies for several new customers. He does not have much time.

What is the BEST way to do this with R80 security management?

28. Which of the following statements accurately describes the command snapshot?

29. Fill in the blank: The R80 SmartConsole, SmartEvent GUI client, and _______ consolidate billions of logs and shows them as prioritized security events.

30. Fill in the blank: Once a license is activated, a ________ should be installed.

31. Which command is used to obtain the configuration lock in Gaia?

32. If there is an Accept Implied Policy set to “First”, what is the reason Jorge cannot see any logs?

33. You are the Security Administrator for MegaCorp. In order to see how efficient your firewall Rule Base is, you would like to see how many often the particular rules match. Where can you see it? Give the BEST answer.

34. Choose what BEST describes a Session.

35. The organization's security manager wishes to back up just the Gaia operating system parameters.

Which command can be used to back up only Gaia operating system parameters like interface details, Static routes and Proxy ARP entries?

36. What happens if the identity of a user is known?

37. Fill in the blank: The IPS policy for pre-R80 gateways is installed during the _______ .

38. John Adams is an HR partner in the ACME organization. ACME IT wants to limit access to HR servers to designated IP addresses to minimize malware infection and unauthorized access risks. Thus, gateway policy permits access only from Join's desktop which is assigned an IP address 10.0.0.19 via DHCP.

John received a laptop and wants to access the HR Web Server from anywhere in the organization. The IT department gave the laptop a static IP address, but the limits him to operating it only from his desk. The current Rule Base contains a rule that lets John Adams access the HR Web Server from his laptop. He wants to move around the organization and continue to have access to the HR Web Server.

To make this scenario work, the IT administrator:

1) Enables Identity Awareness on a gateway, selects AD Query as one of the Identity Sources.

2) Adds an access role object to the Firewall Rule Base that lets John Adams PC access the HR Web Server from any machine and from any location.

John plugged in his laptop to the network on a different network segment and he is not able to connect.

How does he solve this problem?

39. Fill in the blank: ________information is included in the “Full Log” tracking option, but is not included in the “Log” tracking option?