CheckPoint 156-215.81 Exam Practice Test Instant Access

Question 1

What are the software components used by Autonomous Threat Prevention Profiles in R8I.20 and higher?

ASandbox, ThreatCloud, Zero Phishing, Sanitization, C&C Protection, JPS, File and URL Reputation

BIPS, Threat Emulation and Threat Extraction

CSandbox, ThreatCloud, Sanitization, C&C Protection, IPS

DIPS, Anti-Bot, Anti-Virus, SandBlast and Macro Extraction

Answer : D

This answer is correct because these are the software components that are used by the pre-defined Autonomous Threat Prevention Profiles in R81.20 and higher1.These profiles provide zero-maintenance protection from zero-day threats and continuously and autonomously ensure that your protection is up-to-date with the latest cyber threats and prevention technologies2.

The other answers are not correct because they either include software components that are not part of the Autonomous Threat Prevention Profiles, such as Sandbox, ThreatCloud, Zero Phishing, Sanitization, C&C Protection, JPS, File and URL Reputation, or they omit some of the software components that are part of the Autonomous Threat Prevention Profiles, such as Anti-Bot, Anti-Virus, and Macro Extraction.

Autonomous Threat Prevention Management - Check Point Software

Check Point Quantum R81.20 (Titan) Release

Threat Prevention R81.20 Best Practices - Check Point Software

Check Point R81

Question 2

AdminA and AdminB are both logged in on SmartConsole What does it mean if AdmmB sees a lock icon on a rule? Choose the BEST answer.

ARule is locked by AdminA and will be made available if the session is published

BRule is locked by AdminA because the rule is currently being edited

CRule is locked by AdminA and if the session is saved, the rule will be made available

DRule is locked by AdminA because the save button has not been pressed

Answer : A

If AdminB sees a lock icon on a rule, it means that the rule is locked by AdminA and will be made available if the session is published. A session is a set of changes made by an administrator in SmartConsole.A session can be published to save and share the changes with other administrators, or discarded to cancel the changes and unlock the objects1.

Question 3

At what point is the Internal Certificate Authority (ICA) created?

ADuring the primary Security Management Server installation process.

BUpon creation of a certificate

CWhen an administrator decides to create one

DWhen an administrator initially logs into SmartConsole.

Answer : A

The Internal Certificate Authority (ICA) is created during the primary Security Management Server installation process. The ICA is a component that issues and manages certificates for Check Point products. The ICA is automatically installed and initialized when installing the Security Management Server.

Question 4

If there are two administrators logged in at the same time to the SmartConsole, and there are objects locked for editing, what must be done to make them available to other administrators? Choose the BEST answer

ASave and install the Policy

BDelete older versions of database

CRevert the session.

DPublish or discard the session

Answer : D

If there are two administrators logged in at the same time to the SmartConsole, and there are objects locked for editing, the administrator who locked the objects must publish or discard the session to make them available to other administrators.Publishing or discarding the session will save or discard the changes made by the administrator and unlock the objects for editing by others3.

Question 5

While enabling the Identity Awareness blade the Identity Awareness wizard does not automatically detect the windows domain Why does it not detect the windows domain?

ASmartConsole machine is not part of the domain

BSecurity Gateway is not part of the Domain

CIdentity Awareness is not enabled on Global properties

DSecurity Management Server is not part of the domain

Answer : A

While enabling the Identity Awareness blade, the Identity Awareness wizard does not automatically detect the Windows domain because the SmartConsole machine is not part of the domain.The SmartConsole machine needs to be a member of the Windows domain or have access to a domain controller in order to detect the domain automatically2.

Question 6

What is the order of NAT priorities?

AIP pool NAT static NAT. hide NAT

BStatic NAT hide NAT, IP pool NAT

CStatic NAT, IP pool NAT hide NAT

DStatic NAT automatic NAT hide NAT

Answer : C

The order of NAT priorities is Static NAT, IP pool NAT, and hide NAT. Static NAT has the highest priority because it is a one-to-one mapping of a private IP address to a public IP address. IP pool NAT has the second highest priority because it is a one-to-many mapping of a private IP address to a pool of public IP addresses.Hide NAT has the lowest priority because it is a many-to-one mapping of multiple private IP addresses to a single public IP address1.

Question 7

Fill in the blanks: A Security Policy is created in_____, stored in the_____ and Distributed to the various

ARule base. Security Management Server Security Gateways

BThe Check Point database. SmartConsole, Security Gateways

CSmartConsole, Security Gateway, Security Management Servers

DSmartConsole, Security Management Server, Security Gateways

Answer : D

A Security Policy is created in SmartConsole, stored in the Security Management Server, and distributed to the various Security Gateways. SmartConsole is a graphical user interface that allows administrators to create and edit security policies. The Security Management Server is a central server that stores and manages the security policies. The Security Gateways are devices that enforce the security policies on the network traffic.

CheckPoint 156-215.81 Check Point Certified Security Administrator R81.20 Exam Practice Test