156-215.81.20 practice questions 121–130

1. Question 121 · 172 in bank

   Which policy type is used to enforce bandwidth and traffic control rules?

   • AThreat Prevention
   • BQoS
   • CThreat Emulation
   • DAccess Control

   Show answer

   Answer: B

   Next question

2. Question 122 · 172 in bank

   Which Check Point Application Control feature enables application scanning and detection?

   • AApplication Dictionary
   • BApplication Library
   • CCPApp
   • DAppWiki

   Show answer

   Answer: D

   Next question

3. Question 123 · 172 in bank

   What type of NAT is a one-to-one relationship where each host is translated to a unique address?

   • ASource
   • BDestination
   • CHide
   • DStatic

   Show answer

   Answer: D

   Next question

4. Question 124 · 172 in bank

   For Automatic Hide NAT rules created by the administrator what is a TRUE statement?

   • ASource Port Address Translation (PAT) is enabled by default.
   • BSource Port Address Translation (PAT) is disabled by default.
   • CAutomatic NAT rules are supported for Network objects only.
   • DAutomatic NAT rules are supported for Host objects only.

   Show answer

   Answer: A

   Next question

5. Question 125 · 172 in bank

   In which scenario will an administrator need to manually define Proxy ARP?

   • AWhen they configure an "Automatic Static NAT" which translates to an IP address that does not belong to one of the firewall's interfaces.
   • BWhen they configure an "Automatic Hide NAT" which translates to an IP address that does not belong to one of the firewall's interfaces.
   • CWhen they configure a "Manual Static NAT" which translates to an IP address that does not belong to one of the firewall's interfaces.
   • DWhen they configure a "Manual Hide NAT" which translates to an IP address that belongs to one of the firewall's interfaces.

   Show answer

   Answer: C

   Next question

6. Question 126 · 172 in bank

   What is UserCheck?

   • AMessaging tool used to verify a user’s credentials.
   • BCommunication tool used to inform a user about a website or application they are trying to access.
   • CCommunication tool used to notify an administrator when a new user is created.
   • DAdministrator tool used to monitor users on their network.

   Show answer

   Answer: B

   Next question

7. Question 127 · 172 in bank

   Which Autonomous Threat Prevention profile uses sanitization technology?

   • ACloud/data Center
   • BGuest Network
   • CSandbox
   • DPerimeter

   Show answer

   Answer: D

   Next question

8. Question 128 · 172 in bank

   You want to set up a VPN tunnel to an external gateway. You had to make sure that the IKE P2 SA will only be established between two subnets and not all subnets defined in the default VPN domain of your gateway.

   • AIn the SmartConsole create a dedicated VPN Community for both Gateways. On the Management add the following line to the $FWDIR/conf/user.def.FW1 file -> subnet_for_range_and_peer = { };
   • BIn the SmartConsole create a dedicated VPN Community for both Gateways. Selecting the local gateway in the Community you can set the VPN Domain to ‘User defined’ and put in the local network.
   • CIn the SmartConsole create a dedicated VPN Community for both Gateways. On the Gateway add the following line to the $FWDIR/conf/user.def.FW1 file -> subnet_for_range_and_peer = { };
   • DIn the SmartConsole create a dedicated VPN Community for both Gateways. Go to Security Policies / Access Control and create an in-line layer rule with source and destination containing the two networks used for the IKE P2 SA. Put the name of the Community in the VPN column.

   Show answer

   Answer: B

   Next question

9. Question 129 · 172 in bank

   Can Check Point and Third-party Gateways establish a certificate-based Site-to-Site VPN tunnel?

   • ANo, Certificate based VPNs are only possible between Check Point devices
   • BNo, they cannot share certificate authorities
   • CYes, but they have to have a pre-shared secret key
   • DYes, but they need to have a mutually trusted certificate authority

   Show answer

   Answer: D

   Next question

10. Question 130 · 172 in bank

    Which tool allows you to monitor the top bandwidth on smart console?

    • ASmart Event
    • BGateways & Servers Tab
    • CSmartView Monitor
    • DLogs & Monitoring

    Show answer

    Answer: C

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

156-215.81.20 practice, question 121. 172 questions available.