156-215.81 Exam - Check Point Certified Security Administrator R81

NEW QUESTION 1
What object type would you use to grant network access to an LDAP user group?

• A. Access Role
• B. User Group
• C. SmartDirectory Group
• D. Group Template

Answer: B

NEW QUESTION 2
Which of the following are types of VPN communities?

• A. Pentagon, star, and combination
• B. Star, octagon, and combination
• C. Combined and star
• D. Meshed, star, and combination

Answer: D

NEW QUESTION 3
True or False: More than one administrator can log into the Security Management Server with SmartConsole with write permission at the same time.

• A. True, every administrator works on a different database that Is independent of the other administrators
• B. False, this feature has to be enabled in the Global Properties.
• C. True, every administrator works in a session that is independent of the other administrators
• D. False, only one administrator can login with write permission

Answer: C

Explanation:
Multiple R/W admins can log into SmartConsole and edit rules but they can't edit a rule that is being worked on by another admin.

NEW QUESTION 4
What are the advantages of a “shared policy” in R80?

• A. Allows the administrator to share a policy between all the users identified by the Security Gateway
• B. Allows the administrator to share a policy between all the administrators managing the Security Management Server
• C. Allows the administrator to share a policy so that it is available to use in another Policy Package
• D. Allows the administrator to install a policy on one Security Gateway and it gets installed on another managed Security Gateway

Answer: C

Explanation:
Ref: https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_SecurityManagement_AdminGuide

NEW QUESTION 5
What are the three deployment options available for a security gateway?

• A. Standalone, Distributed, and Bridge Mode
• B. Bridge Mode, Remote, and Standalone
• C. Remote, Standalone, and Distributed
• D. Distributed, Bridge Mode, and Remote

Answer: A

Explanation:
https://sc1.checkpoint.com/documents/R76/CP_R76_Installation_and_Upgrade_Guide-webAdmin/86429.htm

NEW QUESTION 6
Which software blade enables Access Control policies to accept, drop, or limit web site access based on user, group, and/or machine?

• A. Application Control
• B. Data Awareness
• C. Identity Awareness
• D. Threat Emulation

Answer: A

NEW QUESTION 7
Which of the following is NOT a tracking option? (Select three)

• A. Partial log
• B. Log
• C. Network log
• D. Full log

Answer: ACD

NEW QUESTION 8
The Online Activation method is available for Check Point manufactured appliances. How does the administrator use the Online Activation method?

• A. The SmartLicensing GUI tool must be launched from the SmartConsole for the Online Activation tool to start automatically.
• B. No action is required if the firewall has internet access and a DNS server to resolve domain names.
• C. Using the Gaia First Time Configuration Wizard, the appliance connects to the Check Point User Center and downloads all necessary licenses and contracts.
• D. The cpinfo command must be run on the firewall with the switch -online-license-activation.

Answer: C

Explanation:
"Online activation: this method of activation is available for Check Point manufactured appliances. These appliances should be configured to have internet connectivity during the completion of the First Time Configuration Wizard for software version R77 and below. Customers using R80 and higher will be able to use this feature during or after the completion of the First Time Configuration Wizard."
https://supportcenter.checkpoint.com/supportcenter/portal?eventsubmit_dogoviewsolutiondetails=&solutionid=s

NEW QUESTION 9
What is the default tracking option of a rule?

• A. Tracking
• B. Log
• C. None
• D. Alert

Answer: B

Explanation:
https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_LoggingAndMonitoring_AdminGu

NEW QUESTION 10
In the Check Point Security Management Architecture, which component(s) can store logs?

• A. SmartConsole
• B. Security Management Server and Security Gateway
• C. Security Management Server
• D. SmartConsole and Security Management Server

Answer: B

NEW QUESTION 11
Fill in the blank: The position of an implied rule is manipulated in the ________ window.

• A. NAT
• B. Firewall
• C. Global Properties
• D. Object Explorer

Answer: C

Explanation:
"Note - In addition, users can access the Implied Rules configurations through Global Properties and use the implied policy view below Configuration." https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=

NEW QUESTION 12
When configuring LDAP with User Directory integration, changes applied to a User Directory template are:

• A. Not reflected for any users unless the local user template is changed.
• B. Not reflected for any users who are using that template.
• C. Reflected for ail users who are using that template and if the local user template is changed as well.
• D. Reflected immediately for all users who are using that template.

Answer: D

Explanation:
You can change the User Directory templates. Users associated with this template get the changes immediately. If you change user definitions manually in SmartConsole, the changes are immediate on the server.
https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_SecurityManagement_AdminGuide

NEW QUESTION 13
What is the Transport layer of the TCP/IP model responsible for?

• A. It transports packets as datagrams along different routes to reach their destination.
• B. It manages the flow of data between two hosts to ensure that the packets are correctly assembled and delivered to the target application.
• C. It defines the protocols that are used to exchange data between networks and how host programs interact with the Application layer.
• D. It deals with all aspects of the physical components of network connectivity and connects with different network types.

Answer: B

NEW QUESTION 14
Under which file is the proxy arp configuration stored?

• A. $FWDIR/state/proxy_arp.conf on the management server
• B. $FWDIR/conf/local.arp on the management server
• C. $FWDIR/state/_tmp/proxy.arp on the security gateway
• D. $FWDIR/conf/local.arp on the gateway

Answer: D

NEW QUESTION 15
John is using Management HA. Which Smartcenter should be connected to for making changes?

• A. secondary Smartcenter
• B. active Smartcenter
• C. connect virtual IP of Smartcenter HA
• D. primary Smartcenter

Answer: B

NEW QUESTION 16
......