156-215.81 Exam Dumps Pass with Updated May-2023 Tests Dumps
156-215.81 exam questions for practice in 2023 Updated 372 Questions
NEW QUESTION # 115
Joey is using the computer with IP address 192.168.20.13. He wants to access web page "www.CheckPoint.com", which is hosted on Web server with IP address 203.0.113.111.
How many rules on Check Point Firewall are required for this connection?
- A. Two rules - one for outgoing request and second one for incoming replay.
- B. Only one rule, because Check Point firewall is a Packet Filtering firewall
- C. Only one rule, because Check Point firewall is using Stateful Inspection technology.
- D. Two rules - first one for the HTTP traffic and second one for DNS traffic.
Answer: C
NEW QUESTION # 116
John Adams is an HR partner in the ACME organization. ACME IT wants to limit access to HR servers to designated IP addresses to minimize malware infection and unauthorized access risks. Thus, the gateway policy permits access only from John's desktop which is assigned a static IP address 10.0.0.19.
John received a laptop and wants to access the HR Web Server from anywhere in the organization. The IT department gave the laptop a static IP address, but that limits him to operating it only from his desk. The current Rule Base contains a rule that lets John Adams access the HR Web Server from his desktop with a static IP (10.0.0.19). He wants to move around the organization and continue to have access to the HR Web Server.
To make this scenario work, the IT administrator:
1) Enables Identity Awareness on a gateway, selects AD Query as one of the Identity Sources installs the policy.
2) Adds an access role object to the Firewall Rule Base that lets John Adams PC access the HR Web Server from any machine and from any location.
3) Changes from static IP address to DHCP for the client PC.
What should John request when he cannot access the web server from his laptop?
- A. John should lock and unlock his computer
- B. The access should be changed to authenticate the user instead of the PC
- C. Investigate this as a network connectivity issue
- D. John should install the Identity Awareness Agent
Answer: B
NEW QUESTION # 117
True or False: The destination server for Security Gateway logs depends on a Security Management Server configuration.
- A. False, log servers are enabled on the Security Gateway General Properties
- B. False, log servers are configured on the Log Server General Properties
- C. True, all Security Gateways will only forward logs with a SmartCenter Server configuration
- D. True, all Security Gateways forward logs automatically to the Security Management Server
Answer: C
NEW QUESTION # 118
Which of the following is the most secure means of authentication?
- A. Pre-shared secret
- B. Token
- C. Password
- D. Certificate
Answer: D
NEW QUESTION # 119
True or False: More than one administrator can log into the Security Management Server with SmartConsole with write permission at the same time.
- A. False, this feature has to be enabled in the Global Properties.
- B. False, only one administrator can login with write permission
- C. True, every administrator works in a session that is independent of the other administrators
- D. True, every administrator works on a different database that Is independent of the other administrators
Answer: C
Explanation:
Multiple R/W admins can log into SmartConsole and edit rules but they can't edit a rule that is being worked on by another admin.
NEW QUESTION # 120
Which one of the following is a way that the objects can be manipulated using the new API integration in R81 Management?
- A. Microsoft Word
- B. RC4 Encryption
- C. JSON
- D. Microsoft Publisher
Answer: C
NEW QUESTION # 121
Which of the following is considered to be the more secure and preferred VPN authentication method?
- A. MD5
- B. Pre-shared secret
- C. Password
- D. Certificate
Answer: D
NEW QUESTION # 122
Of all the Check Point components in your network, which one changes most often and should be backed up most frequently?
- A. SmartConsole
- B. Security Management Server
- C. Security Gateway
- D. SmartManager
Answer: B
NEW QUESTION # 123
You can see the following graphic:
What is presented on it?
- A. VPN certificate properties of the John's gateway.
- B. Properties of personal .p12 certificate file issued for user John.
- C. Shared secret properties of John's password.
- D. Expired .p12 certificate properties for user John.
Answer: B
NEW QUESTION # 124
Name the file that is an electronically signed file used by Check Point to translate the features in the license into a code?
- A. Contract file (.xml)
- B. license File (.lie)
- C. cp.macro
- D. Both License (.lic) and Contract (.xml) files
Answer: A
NEW QUESTION # 125
Which of the following licenses are considered temporary?
- A. Evaluation and Subscription
- B. Subscription and Perpetual
- C. Perpetual and Trial
- D. Plug-and-play and Evaluation
Answer: D
Explanation:
Should be Trial or Evaluation, even Plug-and-play (all are synonyms ). Answer B is the best choice.
NEW QUESTION # 126
Access roles allow the firewall administrator to configure network access according to:
- A. a combination of computer or computer groups and networks.
- B. remote access clients.
- C. All of the above.
- D. users and user groups.
Answer: C
Explanation:
To create an access role:
The Access Role window opens.
Your selection is shown in the Networks node in the Role Preview pane.
A window opens. You can search for Active Directory entries or select them from the list.
You can search for AD entries or select them from the list.
The access role is added to the Users and Administrators tree.
https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_SecurityManagement_AdminGuide/Topics-SECMG/Access-Roles.htm
NEW QUESTION # 127
You manage a global network extending from your base in Chicago to Tokyo, Calcutta and Dallas. Management wants a report detailing the current software level of each Enterprise class Security Gateway. You plan to take the opportunity to create a proposal outline, listing the most cost-effective way to upgrade your Gateways. Which two SmartConsole applications will you use to create this report and outline?
- A. SmartLSM and SmartUpdate
- B. SmartDashboard and SmartView Tracker
- C. SmartView Tracker and SmartView Monitor
- D. SmartView Monitor and SmartUpdate
Answer: D
NEW QUESTION # 128
What is the best sync method in the ClusterXL deployment?
- A. Use 1 dedicated sync interface
- B. Use 3 clusters + 1st sync + 2nd sync + 3rd sync
- C. Use 2 clusters + 1st sync + 2nd sync
- D. Use 1 cluster + 1st sync
Answer: A
NEW QUESTION # 129
Review the rules. Assume domain UDP is enabled in the implied rules.
What happens when a user from the internal network tries to browse to the internet using HTTP? The user:
- A. can connect to the Internet successfully after being authenticated.
- B. is prompted three times before connecting to the Internet successfully.
- C. can go to the Internet, without being prompted for authentication.
- D. can go to the Internet after Telnetting to the client authentication daemon port 259.
Answer: C
NEW QUESTION # 130
Fill in the blank: The IPS policy for pre-R80 gateways is installed during the _______ .
- A. Firewall policy install
- B. Access Control policy install
- C. Anti-bot policy install
- D. Threat Prevention policy install
Answer: D
Explanation:
https://sc1.checkpoint.com/documents/R80/CP_R80BC_ThreatPrevention/html_frameset.htm?topic=documents/R80/CP_R80BC_ThreatPrevention/136486
NEW QUESTION # 131
......
Authentic 156-215.81 Dumps With 100% Passing Rate Practice Tests Dumps: https://www.fast2test.com/156-215.81-premium-file.html
Updated Premium 156-215.81 Exam Engine pdf: https://drive.google.com/open?id=1m16TC-HwVkjimuMNGd3VziutiXqHaFYt