[May-2024] 156-215.81 PDF Dumps Are Helpful To produce Your Dreams Correct QA's
New 156-215.81 exam Free Sample Questions to Practice
NEW QUESTION # 221
In which scenario is it a valid option to transfer a license from one hardware device to another?
- A. From an IBM Open Server to a 2200 Appliance
- B. From a 4400 Appliance to an HP Open Server
- C. From an IBM Open Server to an HP Open Server
- D. From a 4400 Appliance to a 2200 Appliance
Answer: D
Explanation:
Explanation
The scenario where it is a valid option to transfer a license from one hardware device to another is from a 4400 Appliance to a 2200 Appliance. This is because both appliances are Check Point products and have the same license type (Central License). You can transfer a license from one hardware device to another if they have the same license type and vendor3. Therefore, the correct answer is A. From a 4400 Appliance to a 2200 Appliance.
NEW QUESTION # 222
You want to define a selected administrator's permission to edit a layer. However, when you click the + sign in the "Select additional profile that will be able edit this layer" you do not see anything. What is the most likely cause of this problem? Select the BEST answer.
- A. There are no permission profiles available and you need to create one first.
- B. "Edit layers by selected profiles in a layer editor" is unselected in the Permission profile.
- C. All permission profiles are in use.
- D. "Edit layers by Software Blades" is unselected in the Permission Profile
Answer: A
NEW QUESTION # 223
John is using Management HA. Which Smartcenter should be connected to for making changes?
- A. secondary Smartcenter
- B. active Smartcenter
- C. primary Smartcenter
- D. connect virtual IP of Smartcenter HA
Answer: B
Explanation:
Explanation
The SmartCenter that should be connected to for making changes is the active SmartCenter. The active SmartCenter is the one that is currently synchronizing its configuration with the secondary SmartCenter and handling the communication with the gateways . The primary SmartCenter is the one that was initially configured as the main server, but it may become inactive if a failover occurs. The virtual IP of SmartCenter HA is used to access the SmartConsole, not to make changes. References: [Security Management Server High Availability (HA) R81 Administration Guide], [Check Point CCSA - R81: Practice Test & Explanation], [How to configure ClusterXL High Availability on Security Management Server]
NEW QUESTION # 224
You can see the following graphic:
What is presented on it?
- A. VPN certificate properties of the John's gateway.
- B. Expired .p12 certificate properties for user John.
- C. Shared secret properties of John's password.
- D. Properties of personal .p12 certificate file issued for user John.
Answer: D
NEW QUESTION # 225
Consider the Global Properties following settings:
The selected option "Accept Domain Name over UDP (Queries)" means:
- A. All UDP Queries will be accepted by the traffic allowed through all interfaces and this will be done before first explicit rule written by Administrator in a Security Policy.
- B. No UDP Queries will be accepted by the traffic allowed through all interfaces and this will be done before first explicit rule written by Administrator in a Security Policy.
- C. UDP Queries will be accepted by the traffic allowed only through interfaces with external anti-spoofing topology and this will be done before first explicit rule written by Administrator in a Security Policy.
- D. All UDP Queries will be accepted by the traffic allowed by first explicit rule written by Administrator in a Security Policy.
Answer: C
NEW QUESTION # 226
Which Check Point software blade provides Application Security and identity control?
- A. Identity Awareness
- B. Application Control
- C. Data Loss Prevention
- D. URL Filtering
Answer: B
Explanation:
Check Point Application Control provides the industry's strongest application security and identity control to organizations of all sizes.
NEW QUESTION # 227
Which backup utility captures the most information and tends to create the largest archives?
- A. migrate export
- B. backup
- C. snapshot
- D. Database Revision
Answer: C
NEW QUESTION # 228
Which Threat Prevention Profile is not included by default in R81 Management?
- A. Basic - Provides reliable protection on a range of non-HTTP protocols for servers, with minimal impact on network performance
- B. Recommended - Provides all protection for all common network products and servers, with impact on network performance
- C. Optimized - Provides excellent protection for common network products and protocols against recent or popular attacks
- D. Strict - Provides a wide coverage for all products and protocols, with impact on network performance
Answer: B
NEW QUESTION # 229
At what point is the Internal Certificate Authority (ICA) created?
- A. When an administrator decides to create one.
- B. When an administrator initially logs into SmartConsole.
- C. Upon creation of a certificate
- D. During the primary Security Management Server installation process.
Answer: D
Explanation:
Introduction to the ICA
The ICA is a Certificate Authority which is an integral part of the Check Point product suite. It is fully compliant with X.509 standards for both certificates and CRLs. See the relevant X.509 and PKI documentation, as well as RFC 2459 standards for more information. You can read more about Check Point and PKI in the R76 VPN Administration Guide.
The ICA is located on the Security Management server. It is created during the installation process, when the Security Management server is configured.
NEW QUESTION # 230
Which option, when applied to a rule, allows all encrypted and non-VPN traffic that matches the rule?
- A. All Connections (Clear or Encrypted)
- B. Specific VPN Communities
- C. Accept all encrypted traffic
- D. All Site-to-Site VPN Communities
Answer: C
NEW QUESTION # 231
One of major features in R81.x SmartConsole is concurrent administration.
Which of the following is NOT possible considering that AdminA, AdminB, and AdminC are editing the same Security Policy?
- A. AdminA, AdminB and AdminC are editing three different rules at the same time.
- B. AdminA and AdminB are editing the same rule at the same time.
- C. AdminC sees a lock icon which indicates that the rule is locked for editing by another administrator.
- D. AdminB sees a pencil icon next the rule that AdminB is currently editing.
Answer: C
NEW QUESTION # 232
Application Control/URL filtering database library is known as:
- A. Application Library
- B. Application database
- C. Application-Forensic Database
- D. AppWiki
Answer: D
Explanation:
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk113795
NEW QUESTION # 233
After a new Log Server is added to the environment and the SIC trust has been established with the SMS what will the gateways do?
- A. Gateways will send new firewall logs to the new Log Server as soon as the SIC trust is set up between the SMS and the new Log Server.
- B. The firewalls will detect the new Log Server after the next policy install and redirect the new logs to the new Log Server.
- C. The gateways can only send logs to an SMS and cannot send logs to a Log Server. Log Servers are proprietary log archive servers.
- D. Logs are not automatically forwarded to a new Log Server. SmartConsole must be used to manually configure each gateway to send its logs to the server.
Answer: D
Explanation:
https://sc1.checkpoint.com/documents/SMB_R80.20/AdminGuides/Locally_Managed/EN/Content/Topics/Configuring-External-Log-Servers.htm?TocPath=Appliance%20Configuration%7CLogs%20and%20Monitoring%7C_____3
https://sc1.checkpoint.com/documents/SMB_R80.20/AdminGuides/Locally_Managed/EN/Content/Topics/Configuring-External-Log-Servers.htm?TocPath=Appliance%20Configuration%7CLogs%20and%20Monitoring%7C_____3
NEW QUESTION # 234
Which of the following is NOT a set of Regulatory Requirements related to Information Security?
- A. HIPPA
- B. ISO 37001
- C. PCI
- D. Sarbanes Oxley (SOX)
Answer: B
NEW QUESTION # 235
Is it possible to have more than one administrator connected to a Security Management Server at once?
- A. Yes, but only if all connected administrators connect with read-only permissions.
- B. Yes, but objects edited by one administrator will be locked for editing by others until the session is published.
- C. No, only one administrator at a time can connect to a Security Management Server
- D. Yes, but only one of those administrators will have write-permissions. All others will have read-only permission.
Answer: C
NEW QUESTION # 236
What does it mean if Deyra sees the gateway status:
Choose the BEST answer.
- A. SmartCenter Server cannot reach this Security Gateway
- B. There is a blade reporting a problem
- C. Security Gateway's MGNT NIC card is disconnected.
- D. VPN software blade is reporting a malfunction
Answer: B
Explanation:
NEW QUESTION # 237
What is the Transport layer of the TCP/IP model responsible for?
- A. It manages the flow of data between two hosts to ensure that the packets are correctly assembled and delivered to the target application.
- B. It defines the protocols that are used to exchange data between networks and how host programs interact with the Application layer.
- C. It transports packets as datagrams along different routes to reach their destination.
- D. It deals with all aspects of the physical components of network connectivity and connects with different network types.
Answer: A
Explanation:
Explanation
The Transport layer of the TCP/IP model is responsible for managing the flow of data between two hosts to ensure that the packets are correctly assembled and delivered to the target application. It also provides error detection and correction, flow control, and multiplexing. The Transport layer uses protocols such as TCP and UDP.
References: Check Point Security Engineering Study Guide, p. 10-11
NEW QUESTION # 238
Which SmartConsole application shows correlated logs and aggregated data to provide an overview of potential threats and attack patterns?
- A. SmartLog
- B. SmartView Tracker
- C. SmartEvent
- D. SmartView Monitor
Answer: C
Explanation:
Explanation
SmartEvent is a unified security management solution that provides real-time visibility into security events across the network. SmartEvent shows correlated logs and aggregated data to provide an overview of potential threats and attack patterns, as well as generate reports and alerts based on predefined or customized indicators.
SmartView Tracker, SmartLog, and SmartView Monitor are other SmartConsole applications that can show logs, search queries, and network statistics respectively, but they do not provide the same level of correlation and analysis as SmartEvent. References: [Check Point R81 SmartEvent Administration Guide]
NEW QUESTION # 239
In which scenario is it a valid option to transfer a license from one hardware device to another?
- A. From an IBM Open Server to a 2200 Appliance
- B. From a 4400 Appliance to an HP Open Server
- C. From an IBM Open Server to an HP Open Server
- D. From a 4400 Appliance to a 2200 Appliance
Answer: D
Explanation:
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk56300
NEW QUESTION # 240
You manage a global network extending from your base in Chicago to Tokyo, Calcutta and Dallas. Management wants a report detailing the current software level of each Enterprise class Security Gateway. You plan to take the opportunity to create a proposal outline, listing the most cost-effective way to upgrade your Gateways. Which two SmartConsole applications will you use to create this report and outline?
- A. SmartView Tracker and SmartView Monitor
- B. SmartDashboard and SmartView Tracker
- C. SmartView Monitor and SmartUpdate
- D. SmartLSM and SmartUpdate
Answer: C
NEW QUESTION # 241
The CDT utility supports which of the following?
- A. Only Jumbo HFA's and hotfixes
- B. Only major version upgrades to R81.10
- C. All upgrades
- D. Major version upgrades to R77.30
Answer: C
NEW QUESTION # 242
......
Cover 156-215.81 Exam Questions Make Sure You 100% Pass: https://examsboost.pass4training.com/156-215.81-test-questions.html
