156-215.81 practice questions 41–50

1. Question 41 · 226 in bank

   The competition between stateful inspection and proxies was based on performance, protocol support, and security. Considering stateful Inspections and Proxies, which statement is correct?

   • AStateful Inspection is limited to Layer 3 visibility, with no Layer 4 to Layer 7 visibility capabilities.
   • BWhen it comes to performance, proxies were significantly faster than stateful inspection firewalls.
   • CProxies offer far more security because of being able to give visibility of the payload (the data).
   • DWhen it comes to performance, stateful inspection was significantly faster than proxies.

   Show answer

   Answer: D

   Next question

2. Question 42 · 226 in bank

   What are the Threat Prevention software components available on the Check Point Security Gateway?

   • AIPS, Threat Emulation and Threat Extraction
   • BIPS, Anti-Bot, Anti-Virus, SandBlast and Macro Extraction
   • CIPS, Anti-Bot, Anti-Virus, Threat Emulation and Threat Extraction
   • DIDS, Forensics, Anti-Virus, Sandboxing

   Show answer

   Answer: C

   Next question

3. Question 43 · 226 in bank

   Check Point licenses come in two forms. What are those forms?

   • ACentral and Local.
   • BAccess Control and Threat Prevention.
   • COn-premise and Public Cloud.
   • DSecurity Gateway and Security Management.

   Show answer

   Answer: A

   Next question

4. Question 44 · 226 in bank

   Both major kinds of NAT support Hide and Static NAT. However, one offers more flexibility. Which statement is true?

   • AManual NAT can offer more flexibility than Automatic NAT.
   • BDynamic Network Address Translation (NAT) Overloading can offer more flexibility than Port Address Translation.
   • CDynamic NAT with Port Address Translation can offer more flexibility than Network Address Translation (NAT) Overloading.
   • DAutomatic NAT can offer more flexibility than Manual NAT.

   Show answer

   Answer: A

   Next question

5. Question 45 · 226 in bank

   What is the default tracking option of a rule?

   • ATracking
   • BLog
   • CNone
   • DAlert

   Show answer

   Answer: C

   Next question

6. Question 46 · 226 in bank

   A network administrator has informed you that they have identified a malicious host on the network, and instructed you to block it. Corporate policy dictates that firewall policy changes cannot be made at this time. What tool can you use to block this traffic?

   • AAnti-Bot protection
   • BAnti-Malware protection
   • CPolicy-based routing
   • DSuspicious Activity Monitoring (SAM) rules

   Show answer

   Answer: D

   Next question

7. Question 47 · 226 in bank

   The default shell of the Gaia CLI is cli.sh. How do you change from the cli.sh shell to the advanced shell to run Linux commands?

   • AExecute the command 'enable' in the cli.sh shell
   • BExecute the 'conf t' command in the cli.sh shell
   • CExecute the command 'expert' in the cli.sh shell
   • DExecute the 'exit' command in the cli.sh shell

   Show answer

   Answer: C

   Next question

8. Question 48 · 226 in bank

   Where can administrator edit a list of trusted SmartConsole clients?

   • Acpconfig on a Security Management Server, in the WebUI logged into a Security Management Server.
   • BIn cpconfig on a Security Management Server, in the WebUI logged into a Security Management Server, in SmartConsole: Manage and Settings > Permissions and Administrators > Advanced > Trusted Clients.
   • CWebUI client logged to Security Management Server, SmartDashboard: Manage and Settings > Permissions and Administrators > Advanced > Trusted Clients, via cpconfig on a Security Gateway.
   • DOnly using SmartConsole: Manage and Settings > Permissions and Administrators > Advanced > Trusted Clients.

   Show answer

   Answer: B

   Next question

9. Question 49 · 226 in bank

   In which deployment is the security management server and Security Gateway installed on the same appliance?

   • AStandalone
   • BRemote
   • CDistributed
   • DBridge Mode

   Show answer

   Answer: A

   Next question

10. Question 50 · 226 in bank

    When dealing with rule base layers, what two layer types can be utilized?

    • AOrdered Layers and Inline Layers
    • BInbound Layers and Outbound Layers
    • CR81.10 does not support Layers
    • DStructured Layers and Overlap Layers

    Show answer

    Answer: A

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

156-215.81 practice, question 41. 226 questions available.