156-215.80 practice questions 51–60

1. Question 51 · 380 in bank

   When attempting to start a VPN tunnel, in the logs the error 'no proposal chosen' is seen numerous times. No other VPN-related log entries are present. Which phase of the VPN negotiations has failed?

   • AIKE Phase 1
   • BIPSEC Phase 2
   • CIPSEC Phase 1
   • DIKE Phase 2

   Show answer

   Answer: A

   Next question

2. Question 52 · 380 in bank

   Which command is used to add users to or from existing roles?

   • AAdd rba user <User Name> roles <List>
   • BAdd rba user <User Name>
   • CAdd user <User Name> roles <List>
   • DAdd user <User Name>

   Show answer

   Answer: A

   Next question

3. Question 53 · 380 in bank

   You are the administrator for Alpha Corp. You have logged into your R80 Management server. You are making some changes in the Rule Base and notice that rule No.6 has a pencil icon next to it.

   

   What does this mean?

   • AThe rule No.6 has been marked for deletion in your Management session.
   • BThe rule No.6 has been marked for deletion in another Management session.
   • CThe rule No.6 has been marked for editing in your Management session.
   • DThe rule No.6 has been marked for editing in another Management session.

   Show answer

   Answer: C

   Next question

4. Question 54 · 380 in bank

   What is NOT an advantage of Packet Filtering?

   • ALow Security and No Screening above Network Layer
   • BApplication Independence
   • CHigh Performance
   • DScalability

   Show answer

   Answer: A

   Next question

5. Question 55 · 380 in bank

   In the Check Point three-tiered architecture, which of the following is NOT a function of the Security Management Server?

   • ADisplay policies and logs on the administrator's workstation.
   • BVerify and compile Security Policies.
   • CProcessing and sending alerts such as SNMP traps and email notifications.
   • DStore firewall logs to hard drive storage.

   Show answer

   Answer: A

   Next question

6. Question 56 · 380 in bank

   Web Control Layer has been set up using the settings in the following dialogue:

   

   Consider the following policy and select the BEST answer.

   

   • ATraffic that does not match any rule in the subpolicy is dropped.
   • BAll employees can access only Youtube and Vimeo.
   • CAccess to Youtube and Vimeo is allowed only once a day.
   • DAnyone from internal network can access the internet, expect the traffic defined in drop rules 5.2, 5.5 and 5.6.

   Show answer

   Answer: D

   Next question

7. Question 57 · 380 in bank

   To enforce the Security Policy correctly, a Security Gateway requires:

   • Aa routing table
   • Bthat each Security Gateway enforces at least one rule
   • Ca Demilitarized Zone
   • Da Security Policy install

   Show answer

   Answer: B

   Next question

8. Question 58 · 380 in bank

   When a packet arrives at the gateway, the gateway checks it against the rules in the top Policy Layer, sequentially from top to bottom, and enforces the first rule that matches a packet. Which of the following statements about the order of rule enforcement is true?

   • AIf the Action is Accept, the gateway allows the packet to pass through the gateway.
   • BIf the Action is Drop, the gateway continues to check rules in the next Policy Layer down.
   • CIf the Action is Accept, the gateway continues to check rules in the next Policy Layer down.
   • DIf the Action is Drop, the gateway applies the Implicit Clean-up Rule for that Policy Layer.

   Show answer

   Answer: C

   Next question

9. Question 59 · 380 in bank

   The Administrator wishes to update IPS protections from SmartConsole by clicking on the option `Update Now` under the Updates tab in Threat Tools. Which device requires internet access for the update to work?

   • ASecurity Gateway only
   • BOnly the device where SmartConsole is installed
   • COnly the Security Management Server
   • DEither the Security Management Server or device where SmartConsole is installed

   Show answer

   Answer: B

   Next question

10. Question 60 · 380 in bank

    Jack works for a Managed Service Provider and he has been tasked to create 17 new policies for several new customers. He does not have much time. What is the BEST way to do this with R80 security management?

    • ACreate a text-file with mgmt_cli script that creates all objects and policies. Open the file in SmartConsole Command Line to run it.
    • BCreate a text-file with Gaia CLI -commands in order to create all objects and policies. Run the file in CLISH with command load configuration.
    • CCreate a text-file with DBEDIT script that creates all objects and policies. Run the file in the command line of the management server using command dbedit -f.
    • DUse Object Explorer in SmartConsole to create the objects and Manage Policies from the menu to create the policies.

    Show answer

    Answer: A

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

156-215.80 practice, question 51. 380 questions available.