156-215.80 Exam Training Practice Tests (CheckPoint Check Point Certified Security Administrator R80)]

Question 1

At what point is the Internal Certificate Authority (ICA) created?

A. When an administrator decides to create one. B. Upon creation of a certificate C. When an administrator initially logs into SmartConsole. D. During the primary Security Management Server installation process.

Correct Answer: D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 2

When launching SmartDashboard, what information is required to log into R77?

A. Password, Management Server IP, LDAP Server IP B. Password, Management Server IP C. User Name, Management Server IP, certificate fingerprint file D. User Name, Password, Management Server IP

Correct Answer: D

Question 3

Where do you verify that UserDirectory is enabled?

A. Verify that Global Properties > UserDirectory (LDAP) > Use UserDirectory (LDAP) for Security Gateways is checked. B. Verify that Global Properties > Authentication > Use UserDirectory (LDAP) for Security Gateways is checked. C. Verify that Security Gateway > General Properties > UserDirectory (LDAP) > Use UserDirectory (LDAP) for Security Gateways is checked. D. Verify that Security Gateway > General Properties > Authentication > Use UserDirectory (LDAP) for Security Gateways is checked

Correct Answer: A

Question 4

What are the three types of UserCheck messages?

A. ask, block, and notify B. block, action, and warn C. inform, ask, and block D. action, inform, and ask

Correct Answer: C

Question 5

Kofi, the administrator of the ALPHA Corp network wishes to change the default Gaia WebUI Portal port number currently set on the default HTTPS port. Which CLISH commands are required to be able to change this TCP port?

A. set web https-port <new port number> B. set web ssl-port <new port number> C. set Gaia-portal https-port <new port number> D. set Gaia-portal <new port number>

Correct Answer: B

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 6

Which one of these features is NOT associated with the Check Point URL Filtering and Application Control Blade?

A. Configure rules to limit the available network bandwidth for specified users or groups. B. Detects and blocks malware by correlating multiple detection engines before users are affected. C. Make rules to allow or block applications and Internet sites for individual applications, categories, and risk levels. D. Use UserCheck to help users understand that certain websites are against the company's security policy.

Correct Answer: B

Question 7

Choose what BEST describes a Session.

A. Sessions ends when policy is pushed to the Security Gateway. B. Starts when an Administrator publishes all the changes made on SmartConsole. C. Starts when an Administrator logs in to the Security Management Server through SmartConsole and ends when it is published. D. Sessions locks the policy package for editing.

Correct Answer: C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 8

The IT Management team is interested in the new features of the Check Point R80 Management and wants to upgrade but they are concerned that the existing R77.30 Gaia Gateways cannot be managed by R80 because it is so different. As the administrator responsible for the Firewalls, how can you answer or confirm these concerns?

A. R80 Management was designed as a completely different Management system and so can only monitor Check Point Gateways prior to R80. B. R80 Management requires the separate installation of compatibility hotfix packages for managing the earlier versions of Check Point Gateways prior to R80. Consult the R80 Release Notes for more information. C. R80 Management contains compatibility packages for managing earlier versions of Check Point Gateways prior to R80. Consult the R80 Release Notes for more information. D. R80 Management cannot manage earlier versions of Check Point Gateways prior to R80. Only R80 and above Gateways can be managed. Consult the R80 Release Notes for more information.

Correct Answer: C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 9

Joey is using the computer with IP address 192.168.20.13. He wants to access web page
"www.CheckPoint.com", which is hosted on Web server with IP address 203.0.113.111. How many rules on Check Point Firewall are required for this connection?

A. Two rules - first one for the HTTP traffic and second one for DNS traffic. B. Only one rule, because Check Point firewall is a Packet Filtering firewall C. Two rules - one for outgoing request and second one for incoming replay. D. Only one rule, because Check Point firewall is using Stateful Inspection technology.

Correct Answer: D

Question 10

What is the mechanism behind Threat Extraction?

A. This is a new mechanism to identify the IP address of the sender of malicious codes and to put it into the SAM database (Suspicious Activity Monitoring). B. This is a new mechanism which extracts malicious files from a document to use it as a counter-attack against its sender C. This is a new mechanism which is able to collect malicious files out of any kind of file types to destroy it prior to sending it to the intended recipient D. Any active contents of a document, such as JavaScripts, macros and links will be removed from the document and forwarded to the intended recipient, which makes this solution very fast

Correct Answer: D

Question 11

You are about to integrate RSA SecurID users into the Check Point infrastructure. What kind of users are to be defined via SmartDashboard?

A. Internal user Group B. A group with generic user C. All users D. LDAP Account Unit Group

Correct Answer: B

Question 12

To optimize Rule Base efficiency, the most hit rules should be where?

A. Towards the bottom of the Rule Base. B. Towards the middle of the Rule Base. C. Towards the top of the Rule Base. D. Removed from the Rule Base.

Correct Answer: C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 13

Which utility allows you to configure the DHCP service on GAIA from the command line?

A. sysconfig B. ifconfig C. cpconfig D. dhcp_cfg

Correct Answer: A

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 14

You want to establish a VPN, using certificates. Your VPN will exchange certificates with an external partner.
Which of the following activities sh you do first?

A. Create a new logical-server object to represent your partner's CA B. Manually import your partner's Certificate Revocation List. C. Exchange exported CA keys and use them to create a new server object to represent your partner's Certificate Authority (CA) D. Manually import your partner's Access Control List.

Correct Answer: C

Question 15

One of major features in R80.x SmartConsole is concurrent administration. Which of the following is NOT possible considering that AdminA, AdminB, and AdminC are editing the same Security Policy?

A. AdminC sees a lock icon which indicates that the rule is locked for editing by another administrator. B. AdminB sees a pencil icon next the rule that AdminB is currently editing. C. AdminA and AdminB are editing the same rule at the same time. D. AdminA, AdminB and AdminC are editing three different rules at the same time.

Correct Answer: A

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

CheckPoint Check Point Certified Security Administrator R80 - 156-215.80 Exam Practice Test