This page was exported from Actual Test Materials [ http://blog.actualtests4sure.com ] Export date:Wed Dec 25 19:30:45 2024 / +0000 GMT ___________________________________________________ Title: Dec-2024 Free CheckPoint 156-215.81.20 Exam Question Practice Exams [Q166-Q190] --------------------------------------------------- Dec-2024 Free CheckPoint 156-215.81.20 Exam Question Practice Exams Ace 156-215.81.20 Certification with 400 Actual Questions NEW QUESTION 166View the rule below.What does the pen-symbol in the left column mean?  Those rules have been published in the current session.  Rules have been edited by the logged in administrator, but the policy has not been published yet.  Another user has currently locked the rules for editing.  The configuration lock is present. Click the pen symbol in order to gain the lock. NEW QUESTION 167True or False: In a Distributed Environment, a Central License can be installed via CLI on a Security Gateway  True, CLI is the prefer method for Licensing  False, Central License are handled via Security Management Server  False, Central License are installed via Gaia on Security Gateways  True, Central License can be installed with CPLIC command on a Security Gateway NEW QUESTION 168What is the main difference between Static NAT and Hide NAT?  Static NAT only allows incoming connections to protect your network.  Static NAT allow incoming and outgoing connections. Hide NAT only allows outgoing connections.  Static NAT only allows outgoing connections. Hide NAT allows incoming and outgoing connections.  Hide NAT only allows incoming connections to protect your network. NEW QUESTION 169Fill in the blank: The _____ feature allows administrators to share a policy with other policy packages.  Concurrent policy packages  Concurrent policies  Global Policies  Shared policies NEW QUESTION 170When should you generate new licenses?  Before installing contract files.  After an RMA procedure when the MAC address or serial number of the appliance changes.  When the existing license expires, license is upgraded or the IP-address where the license is tied changes.  Only when the license is upgraded. NEW QUESTION 171What is a role of Publishing?  The Publish operation sends the modifications made via SmartConsole in the private session and makes them public  The Security Management Server installs the updated policy and the entire database on Security Gateways  The Security Management Server installs the updated session and the entire Rule Base on Security Gateways  Modifies network objects, such as servers, users, services, or IPS profiles, but not the Rule Base NEW QUESTION 172R80.10 management server can manage gateways with which versions installed?  Versions R77 and higher  Versions R76 and higher  Versions R75.20 and higher  Version R75 and higher NEW QUESTION 173In what way is Secure Network Distributor (SND) a relevant feature of the Security Gateway?  SND is a feature to accelerate multiple SSL VPN connections  SND is an alternative to IPSec Main Mode, using only 3 packets  SND is used to distribute packets among Firewall instances  SND is a feature of fw monitor to capture accelerated packets NEW QUESTION 174Aggressive Mode in IKEv1 uses how many packages for negotiation?  6  3  depends on the make of the peer gateway  5 NEW QUESTION 175Fill in the blank: An LDAP server holds one or more ______________.  Server Units  Administrator Units  Account Units  Account Servers NEW QUESTION 176Is it possible to have more than one administrator connected to a Security Management Server at once?  Yes, but only if all connected administrators connect with read-only permissions.  Yes, but objects edited by one administrator will be locked for editing by others until the session is published.  No, only one administrator at a time can connect to a Security Management Server  Yes, but only one of those administrators will have write-permissions. All others will have read-only permission. NEW QUESTION 177When an Admin logs into SmartConsole and sees a lock icon on a gateway object and cannot edit that object, what does that indicate?  The gateway is not powered on.  Incorrect routing to reach the gateway.  The Admin would need to login to Read-Only mode  Another Admin has made an edit to that object and has yet to publish the change. NEW QUESTION 178In order to modify Security Policies, the administrator can use which of the following tools? (Choose the best answer.)  SmartConsole and WebUI on the Security Management Server.  SmartConsole or mgmt_cli (API) on any computer where SmartConsole is installed.  Command line of the Security Management Server or mgmt_cli.exe on any Windows computer.  mgmt_cli (API) or WebUI on Security Gateway and SmartConsole on the Security Management Server. NEW QUESTION 179What are the advantages of a “shared policy” in R80?  Allows the administrator to share a policy between all the users identified by the Security Gateway  Allows the administrator to share a policy between all the administrators managing the Security Management Server  Allows the administrator to share a policy so that it is available to use in another Policy Package  Allows the administrator to install a policy on one Security Gateway and it gets installed on another managed Security Gateway NEW QUESTION 180Which SmartConsole tab shows logs and detects security threats, providing a centralized display of potential attack patterns from all network devices?  Gateway and Servers  Logs and Monitor  Manage Seeting  Security Policies NEW QUESTION 181What is the best sync method in the ClusterXL deployment?  Use 1 cluster + 1st sync  Use 1 dedicated sync interface  Use 3 clusters + 1st sync + 2nd sync + 3rd sync  Use 2 clusters + 1st sync + 2nd sync NEW QUESTION 182The competition between stateful inspection and proxies was based on performance, protocol support, and security. Considering stateful Inspections and Proxies, which statement is correct?  Stateful Inspection is limited to Layer 3 visibility, with no Layer 4 to Layer 7 visibility capabilities.  When it comes to performance, proxies were significantly faster than stateful inspection firewalls.  Proxies offer far more security because of being able to give visibility of the payload (the data).  When it comes to performance, stateful inspection was significantly faster than proxies. NEW QUESTION 183SandBlast offers flexibility in implementation based on their individual business needs.What is an option for deployment of Check Point SandBlast Zero-Day Protection?  Smart Cloud Services  Load Sharing Mode Services  Threat Agent Solution  Public Cloud Services NEW QUESTION 184What is the purpose of a Clean-up Rule?  Clean-up Rules do not server any purpose.  Provide a metric for determining unnecessary rules.  To drop any traffic that is not explicitly allowed.  Used to better optimize a policy. NEW QUESTION 185Which information is included in the “Extended Log” tracking option, but is not included in the “Log” tracking option?  file attributes  application information  destination port  data type information NEW QUESTION 186If there are two administrators logged in at the same time to the SmartConsole, and there are objects locked for editing, what must be done to make them available to other administrators? Choose the BEST answer  Save and install the Policy  Delete older versions of database  Revert the session.  Publish or discard the session NEW QUESTION 187How do logs change when the “Accounting” tracking option is enabled on a traffic rule?  Involved traffic logs will be forwarded to a log server.  Provides log details view email to the Administrator.  Involved traffic logs are updated every 10 minutes to show how much data has passed on the connection.  Provides additional information to the connected user. NEW QUESTION 188Identify the ports to which the Client Authentication daemon listens on by default?  259, 900  256, 257  8080, 529  80, 256 NEW QUESTION 189Choose what BEST describes the reason why querying logs now are very fast.  The amount of logs being stored is less than previous versions.  New Smart-1 appliances double the physical memory install.  Indexing Engine indexes logs for faster search results.  SmartConsole now queries results directly from the Security Gateway. NEW QUESTION 190Which of the following blades is NOT subscription-based and therefore does not have to be renewed on a regular basis?  Application Control  Threat Emulation  Anti-Virus  Advanced Networking Blade  Loading … 156-215.81.20 Questions PDF [2024] Use Valid New dump to Clear Exam: https://www.actualtests4sure.com/156-215.81.20-test-questions.html --------------------------------------------------- Images: https://blog.actualtests4sure.com/wp-content/plugins/watu/loading.gif https://blog.actualtests4sure.com/wp-content/plugins/watu/loading.gif --------------------------------------------------- --------------------------------------------------- Post date: 2024-12-06 12:17:50 Post date GMT: 2024-12-06 12:17:50 Post modified date: 2024-12-06 12:17:50 Post modified date GMT: 2024-12-06 12:17:50