Dec-2024 Free CheckPoint 156-215.81.20 Exam Question Practice Exams [Q166-Q190] : Actual Test Materials : http://blog.actualtests4sure.com

NEW QUESTION 166
View the rule below.

What does the pen-symbol in the left column mean?

Those rules have been published in the current session.

Rules have been edited by the logged in administrator, but the policy has not been published yet.

Another user has currently locked the rules for editing.

The configuration lock is present. Click the pen symbol in order to gain the lock.

NEW QUESTION 167
True or False: In a Distributed Environment, a Central License can be installed via CLI on a Security Gateway

True, CLI is the prefer method for Licensing

False, Central License are handled via Security Management Server

False, Central License are installed via Gaia on Security Gateways

True, Central License can be installed with CPLIC command on a Security Gateway

NEW QUESTION 168
What is the main difference between Static NAT and Hide NAT?

Static NAT only allows incoming connections to protect your network.

Static NAT allow incoming and outgoing connections. Hide NAT only allows outgoing connections.

Static NAT only allows outgoing connections. Hide NAT allows incoming and outgoing connections.

Hide NAT only allows incoming connections to protect your network.

NEW QUESTION 169
Fill in the blank: The _____ feature allows administrators to share a policy with other policy packages.

Concurrent policy packages

Concurrent policies

Global Policies

Shared policies

NEW QUESTION 170
When should you generate new licenses?

Before installing contract files.

After an RMA procedure when the MAC address or serial number of the appliance changes.

When the existing license expires, license is upgraded or the IP-address where the license is tied changes.

Only when the license is upgraded.

NEW QUESTION 171
What is a role of Publishing?

The Publish operation sends the modifications made via SmartConsole in the private session and makes them public

The Security Management Server installs the updated policy and the entire database on Security Gateways

The Security Management Server installs the updated session and the entire Rule Base on Security Gateways

Modifies network objects, such as servers, users, services, or IPS profiles, but not the Rule Base

NEW QUESTION 172
R80.10 management server can manage gateways with which versions installed?

Versions R77 and higher

Versions R76 and higher

Versions R75.20 and higher

Version R75 and higher

NEW QUESTION 173
In what way is Secure Network Distributor (SND) a relevant feature of the Security Gateway?

SND is a feature to accelerate multiple SSL VPN connections

SND is an alternative to IPSec Main Mode, using only 3 packets

SND is used to distribute packets among Firewall instances

SND is a feature of fw monitor to capture accelerated packets

NEW QUESTION 174
Aggressive Mode in IKEv1 uses how many packages for negotiation?

depends on the make of the peer gateway

NEW QUESTION 175
Fill in the blank: An LDAP server holds one or more ______________.

Server Units

Administrator Units

Account Units

Account Servers

NEW QUESTION 176
Is it possible to have more than one administrator connected to a Security Management Server at once?

Yes, but only if all connected administrators connect with read-only permissions.

Yes, but objects edited by one administrator will be locked for editing by others until the session is published.

No, only one administrator at a time can connect to a Security Management Server

Yes, but only one of those administrators will have write-permissions. All others will have read-only permission.

NEW QUESTION 177
When an Admin logs into SmartConsole and sees a lock icon on a gateway object and cannot edit that object, what does that indicate?

The gateway is not powered on.

Incorrect routing to reach the gateway.

The Admin would need to login to Read-Only mode

Another Admin has made an edit to that object and has yet to publish the change.

NEW QUESTION 178
In order to modify Security Policies, the administrator can use which of the following tools? (Choose the best answer.)

SmartConsole and WebUI on the Security Management Server.

SmartConsole or mgmt_cli (API) on any computer where SmartConsole is installed.

Command line of the Security Management Server or mgmt_cli.exe on any Windows computer.

mgmt_cli (API) or WebUI on Security Gateway and SmartConsole on the Security Management Server.

NEW QUESTION 179
What are the advantages of a “shared policy” in R80?

Allows the administrator to share a policy between all the users identified by the Security Gateway

Allows the administrator to share a policy between all the administrators managing the Security Management Server

Allows the administrator to share a policy so that it is available to use in another Policy Package

Allows the administrator to install a policy on one Security Gateway and it gets installed on another managed Security Gateway

NEW QUESTION 180
Which SmartConsole tab shows logs and detects security threats, providing a centralized display of potential attack patterns from all network devices?

Gateway and Servers

Logs and Monitor

Manage Seeting

Security Policies

NEW QUESTION 181
What is the best sync method in the ClusterXL deployment?

Use 1 cluster + 1st sync

Use 1 dedicated sync interface

Use 3 clusters + 1st sync + 2nd sync + 3rd sync

Use 2 clusters + 1st sync + 2nd sync

NEW QUESTION 182
The competition between stateful inspection and proxies was based on performance, protocol support, and security. Considering stateful Inspections and Proxies, which statement is correct?

Stateful Inspection is limited to Layer 3 visibility, with no Layer 4 to Layer 7 visibility capabilities.

When it comes to performance, proxies were significantly faster than stateful inspection firewalls.

Proxies offer far more security because of being able to give visibility of the payload (the data).

When it comes to performance, stateful inspection was significantly faster than proxies.

NEW QUESTION 183
SandBlast offers flexibility in implementation based on their individual business needs.
What is an option for deployment of Check Point SandBlast Zero-Day Protection?

Smart Cloud Services

Load Sharing Mode Services

Threat Agent Solution

Public Cloud Services

NEW QUESTION 184
What is the purpose of a Clean-up Rule?

Clean-up Rules do not server any purpose.

Provide a metric for determining unnecessary rules.

To drop any traffic that is not explicitly allowed.

Used to better optimize a policy.

NEW QUESTION 185
Which information is included in the “Extended Log” tracking option, but is not included in the “Log” tracking option?

file attributes

application information

destination port

data type information

NEW QUESTION 186
If there are two administrators logged in at the same time to the SmartConsole, and there are objects locked for editing, what must be done to make them available to other administrators? Choose the BEST answer

Save and install the Policy

Delete older versions of database

Revert the session.

Publish or discard the session

NEW QUESTION 187
How do logs change when the “Accounting” tracking option is enabled on a traffic rule?

Involved traffic logs will be forwarded to a log server.

Provides log details view email to the Administrator.

Involved traffic logs are updated every 10 minutes to show how much data has passed on the connection.

Provides additional information to the connected user.

NEW QUESTION 188
Identify the ports to which the Client Authentication daemon listens on by default?

259, 900

256, 257

8080, 529

80, 256

NEW QUESTION 189
Choose what BEST describes the reason why querying logs now are very fast.

The amount of logs being stored is less than previous versions.

New Smart-1 appliances double the physical memory install.

Indexing Engine indexes logs for faster search results.

SmartConsole now queries results directly from the Security Gateway.

NEW QUESTION 190
Which of the following blades is NOT subscription-based and therefore does not have to be renewed on a regular basis?

Application Control

Threat Emulation

Anti-Virus

Advanced Networking Blade