Far Out Check Point Certified Security Administrator 156-215.80 Test Engine

NEW QUESTION 1

When launching SmartDashboard, what information is required to log into R77?

• A. User Name, Management Server IP, certificate fingerprint file
• B. User Name, Password, Management Server IP
• C. Password, Management Server IP
• D. Password, Management Server IP, LDAP Server IP

Answer: B

NEW QUESTION 2

Which SmartConsole tab is used to monitor network and security performance?

• A. Manage Seeting
• B. Security Policies
• C. Gateway and Servers
• D. Logs and Monitor

Answer: C

NEW QUESTION 3

What are the steps to configure the HTTPS Inspection Policy?

• A. Go to Manage&Settings > Blades > HTTPS Inspection > Configure in SmartDashboard
• B. Go to Application&url filtering blade > Advanced > Https Inspection > Policy
• C. Go to Manage&Settings > Blades > HTTPS Inspection > Policy
• D. Go to Application&url filtering blade > Https Inspection > Policy

Answer: C

NEW QUESTION 4

Fill in the blank; The position of an Implied rule is manipulated in the _____ window

• A. NAT
• B. Firewall
• C. Global Properties
• D. Object Explorer

Answer: C

NEW QUESTION 5

The organization's security manager wishes to back up just the Gaia operating system parameters. Which command can be used to back up only Gaia operating system parameters like interface details, Static routes and Proxy ARP entries?

• A. show configuration
• B. backup
• C. migrate export
• D. upgrade export

Answer: B

Explanation:
3. System Backup (and System Restore)
System Backup can be used to backup current system configuration. A backup creates a compressed file that contains the Check Point configuration including the networking and operating system parameters, such as routing and interface configuration etc., but unlike a snapshot, it does not include the operating system, product binaries, and hotfixes.

NEW QUESTION 6

You have configured SNX on the Security Gateway. The client connects to the Security Gateway and the user enters the authentication credentials. What must happen after authentication that allows the client to connect to the Security Gateway's VPN domain?

• A. SNX modifies the routing table to forward VPN traffic to the Security Gateway.
• B. An office mode address must be obtained by the client.
• C. The SNX client application must be installed on the client.
• D. Active-X must be allowed on the client.

Answer: A

NEW QUESTION 7

What are the three tabs available in SmartView Tracker?

• A. Network & Endpoint, Management, and Active
• B. Network, Endpoint, and Active
• C. Predefined, All Records, Custom Queries
• D. Endpoint, Active, and Custom Queries

Answer: C

NEW QUESTION 8

You are about to integrate RSA SecurID users into the Check Point infrastructure. What kind of users are to be defined via SmartDashboard?

• A. A group with generic user
• B. All users
• C. LDAP Account Unit Group
• D. Internal user Group

Answer: A

NEW QUESTION 9

Tina is a new administrator who is currently reviewing the new Check Point R80 Management console interface. In the Gateways view, she is reviewing the Summary screen as in the screenshot below. What as an 'Open Server'?

• A. Check Point software deployed on a non-Check Point appliance.
• B. The Open Server Consortium approved Server Hardware used for the purpose of Security and Availability.
• C. A check Point Management Server deployed using the Open Systems Interconnection (OSI) Server andSecurity deployment model.
• D. A check Point Management Server software using the Open SSL.

Answer: A

Explanation:

NEW QUESTION 10

Which of the following statements accurately describes the command snapshot?

• A. snapshot creates a full OS-level backup, including network-interface data, Check Point production information, and configuration settings of a GAiA Security Gateway.
• B. snapshot creates a Security Management Server full system-level backup on any OS
• C. snapshot stores only the system-configuration settings on the Gateway
• D. A Gateway snapshot includes configuration settings and Check Point product information from the remote Security Management Server

Answer: A

NEW QUESTION 11

Fill in the blanks. In ______ NAT, the _______ is translated.

• A. Hide; source
• B. Static; source
• C. Simple; source
• D. Hide; destination

Answer: B

NEW QUESTION 12

Which of the following is NOT an option for internal network definition of Anti-spoofing?

• A. Specific – derived from a selected object
• B. Route-based – derived from gateway routing table
• C. Network defined by the interface IP and Net Mask
• D. Not-defined

Answer: B

NEW QUESTION 13

Fill in the blank: The R80 SmartConsole, SmartEvent GUI client, and _____ consolidate billions of logs and shows them as prioritized security events.

• A. SmartMonitor
• B. SmartView Web Application
• C. SmartReporter
• D. SmartTracker

Answer: B

Explanation:
Event Analysis with SmartEvent
The SmartEvent Software Blade is a unified security event management and analysis solution that delivers real-time, graphical threat management information. SmartConsole, SmartView Web Application, and the SmartEvent GUI client consolidate billions of logs and show them as prioritized security events so you can immediately respond to security incidents, and do the necessary actions to prevent more attacks. You can customize the views to monitor the events that are most important to you. You can move from a high level view to detailed forensic analysis in a few clicks. With the free-text search and suggestions, you can quickly run data analysis and identify critical security events.

NEW QUESTION 14

You want to establish a VPN, using certificates. Your VPN will exchange certificates with an external partner. Which of the following activities sh you do first?

• A. Create a new logical-server object to represent your partner's CA
• B. Exchange exported CA keys and use them to create a new server object to represent your partner's Certificate Authority (CA)
• C. Manually import your partner's Certificate Revocation List.
• D. Manually import your partner's Access Control List.

Answer: B

NEW QUESTION 15

What is true about the IPS-Blade?

• A. in R80, IPS is managed by the Threat Prevention Policy
• B. in R80, in the IPS Layer, the only three possible actions are Basic, Optimized and Strict
• C. in R80, IPS Exceptions cannot be attached to “all rules”
• D. in R80, the GeoPolicy Exceptions and the Threat Prevention Exceptions are the same

Answer: A

NEW QUESTION 16

Which of the following are types of VPN communicates?

• A. Pentagon, star, and combination
• B. Star, octagon, and combination
• C. Combined and star
• D. Meshed, star, and combination

Answer: D

NEW QUESTION 17

Which product correlates logs and detects security threats, providing a centralized display of potential attack patterns from all network devices?

• A. SmartView Monitor
• B. SmartEvent
• C. SmartUpdate
• D. SmartDashboard

Answer: B

Explanation:
SmartEvent correlates logs from all Check Point enforcement points, including end-points, to identify suspicious activity from the clutter. Rapid data analysis and custom event logs immediately alert administrators to anomalous behavior such as someone attempting to use the same credential in multiple geographies simultaneously.

NEW QUESTION 18

Jack works for a managed service provider and he has been tasked to create 17 new policies for several new customers. He does not have much time. What is the BEST way to do this with R80 security management?

• A. Create a text-file with mgmt_cli script that creates all objects and policie
• B. Open the file in SmartConsole Command Line to run it.
• C. Create a text-file with Gaia CLI -commands in order to create all objects and policie
• D. Run the file in CLISH with command load configuration.
• E. Create a text-file with DBEDIT script that creates all objects and policie
• F. Run the file in the command line of the management server using command dbedit -f.
• G. Use Object Explorer in SmartConsole to create the objects and Manage Policies from the menu to create the policies.

Answer: A

Explanation:
Did you know: mgmt_cli can accept csv files as inputs using the --batch option.
The first row should contain the argument names and the rows below it should hold the values for these parameters.
So an equivalent solution to the powershell script could look like this:
data.csv:

mgmt_cli add host --batch data.csv -u <username> -p <password> -m <management server>
This can work with any type of command not just "add host" : simply replace the column names with the ones relevant to the command you need.

NEW QUESTION 19

Which statement is NOT TRUE about Delta synchronization?

• A. Using UDP Multicast or Broadcast on port 8161
• B. Using UDP Multicast or Broadcast on port 8116
• C. Quicker than Full sync
• D. Transfers changes in the Kernel tables between cluster members

Answer: A

NEW QUESTION 20

In Logging and Monitoring, the tracking options are Log, Detailed Log and Extended Log. Which of the following options can you add to each Log, Detailed Log and Extended Log?

• A. Accounting
• B. Suppression
• C. Accounting/Suppression
• D. Accounting/Extended

Answer: C

NEW QUESTION 21

How do you configure the Security Policy to provide uses access to the Captive Portal through an external (Internet) interface?

• A. Change the gateway settings to allow Captive Portal access via an external interface.
• B. No action is necessar
• C. This access is available by default.
• D. Change the Identity Awareness settings under Global Properties to allow Captive Policy access on all interfaces.
• E. Change the Identity Awareness settings under Global Properties to allow Captive Policy access for an external interface.

Answer: A

NEW QUESTION 22
......