156-215.80 practice questions 281–290

1. Question 281 · 380 in bank

   After trust has been established between the Check Point components, what is TRUE about name and IP-address changes?

   • ASecurity Gateway IP-address cannot be changed without re-establishing the trust
   • BThe Security Gateway name cannot be changed in command line without re-establishing trust
   • CThe Security Management Server name cannot be changed in SmartConsole without re-establishing trust
   • DThe Security Management Server IP-address cannot be changed without re-establishing the trust

   Show answer

   Answer: A

   Next question

2. Question 282 · 380 in bank

   Which two Identity Awareness commands are used to support identity sharing?

   • APolicy Decision Point (PDP) and Policy Enforcement Point (PEP)
   • BPolicy Enforcement Point (PEP) and Policy Manipulation Point (PMP)
   • CPolicy Manipulation Point (PMP) and Policy Activation Point (PAP)
   • DPolicy Activation Point (PAP) and Policy Decision Point (PDP)

   Show answer

   Answer: A

   Next question

3. Question 283 · 380 in bank

   Which one of the following is TRUE?

   • AOrdered policy is a sub-policy within another policy
   • BOne policy can be either inline or ordered, but not both
   • CInline layer can be defined as a rule action
   • DPre-R80 Gateways do not support ordered layers

   Show answer

   Answer: C

   Next question

4. Question 284 · 380 in bank

   Which deployment adds a Security Gateway to an existing environment without changing IP routing?

   • ADistributed
   • BBridge Mode
   • CRemote
   • DStandalone

   Show answer

   Answer: B

   Next question

5. Question 285 · 380 in bank

   When configuring LDAP with User Directory integration, changes applied to a User Directory template are:

   • AReflected immediately for all users who are using that template.
   • BNot reflected for any users unless the local user template is changed.
   • CReflected for all users who are using that template and if the local user template is changed as well.
   • DNot reflected for any users who are using that template.

   Show answer

   Answer: A

   Next question

6. Question 286 · 380 in bank

   Choose what BEST describes the reason why querying logs now is very fast.

   • ANew Smart-1 appliances double the physical memory install
   • BIndexing Engine indexes logs for faster search results
   • CSmartConsole now queries results directly from the Security Gateway
   • DThe amount of logs being stored is less than the usual in older versions

   Show answer

   Answer: B

   Next question

7. Question 287 · 380 in bank

   Check Point ClusterXL Active/Active deployment is used when:

   • AOnly when there is Multicast solution set up
   • BThere is Load Sharing solution set up
   • COnly when there is Unicast solution set up
   • DThere is High Availability solution set up

   Show answer

   Answer: D

   Next question

8. Question 288 · 380 in bank

   Which of the following methods can be used to update the trusted log server regarding the policy and configuration changes performed on the Security Management Server?

   • ASave Policy
   • BInstall Database
   • CSave session
   • DInstall Policy

   Show answer

   Answer: D

   Next question

9. Question 289 · 380 in bank

   From the Gaia web interface, which of the following operations CANNOT be performed on a Security Management Server?

   • AVerify a Security Policy
   • BOpen a terminal shell
   • CAdd a static route
   • DView Security Management GUI Clients

   Show answer

   Answer: B

   Next question

10. Question 290 · 380 in bank

    Which of the following are types of VPN communities?

    • APentagon, star, and combination
    • BStar, octagon, and combination
    • CCombined and star
    • DMeshed, star, and combination

    Show answer

    Answer: D

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

156-215.80 practice, question 281. 380 questions available.