156-215.81.20 practice questions 21–30

1. Question 21 · 172 in bank

   Which of the following is NOT a valid application navigation tab in SmartConsole?

   • AWEBUI & COMMAND LINE
   • BSECURITY POLICIES
   • CGATEWAYS & SERVERS
   • DLOGS & MONITOR

   Show answer

   Answer: A

   Next question

2. Question 22 · 172 in bank

   What are two basic rules Check Point recommends for building an effective security policy?

   • AAccept Rule and Drop Rule
   • BExplicit Rule and Implied Rule
   • CCleanup Rule and Stealth Rule
   • DNAT Rule and Reject Rule

   Show answer

   Answer: C

   Next question

3. Question 23 · 172 in bank

   When dealing with policy layers, what two layer types can be utilized?

   • AInbound Layers and Outbound Layers
   • BOrdered Layers and Inline Layers
   • CStructured Layers and Overlap Layers
   • DR81.X does not support Layers

   Show answer

   Answer: B

   Next question

4. Question 24 · 172 in bank

   What are the three main components of Check Point security management architecture?

   • ASmart Console, Standalone, Security Management Server
   • BPolicy-Client, Security Management Server, Security Gateway
   • CSmartConsole, Security Policy Server, Logs & Monitoring
   • DSmartConsole, Security Management Server, Security Gateway

   Show answer

   Answer: D

   Next question

5. Question 25 · 172 in bank

   Which Check Point software blade provides protection from zero-day and undiscovered threats?

   • AThreat Extraction
   • BThreat Emulation
   • CFirewall
   • DApplication Control

   Show answer

   Answer: B

   Next question

6. Question 26 · 172 in bank

   What are the three types of UserCheck messages?

   • Aask, block, and notify
   • Bblock, action, and warn
   • Caction, inform, and ask
   • Dinform, ask, and drop

   Show answer

   Answer: D

   Next question

7. Question 27 · 172 in bank

   By default, which port is used to connect to the GAiA Portal?

   • A4434
   • B80
   • C8080
   • D443

   Show answer

   Answer: D

   Next question

8. Question 28 · 172 in bank

   Choose what BEST describes a Session.

   • ASessions ends when policy is pushed to the Security Gateway.
   • BSessions locks the policy package for editing.
   • CStarts when an Administrator logs in through SmartConsole and ends when the Administrator logs out.
   • DStarts when an Administrator publishes all the changes made on SmartConsole.

   Show answer

   Answer: C

   Next question

9. Question 29 · 172 in bank

   Which command shows detailed information about VPN tunnels?

   • Acat $FWDIR/conf/vpn.conf
   • Bvpn tu tlist
   • Cvpn tu
   • Dcpview

   Show answer

   Answer: B

   Next question

10. Question 30 · 172 in bank

    After a new Log Server is added to the environment and the SIC trust has been established with the SMS what will the gateways do?

    • AGateways will send new firewall logs to the new Log Server as soon as the SIC trust is set up between the SMS and the new Log Server.
    • BLogs are not automatically forwarded to a new Log Server. SmartConsole must be used to manually configure each gateway to send its logs to the server.
    • CThe firewalls will detect the new Log Server after the next policy install and redirect the new logs to the new Log Server.
    • DThe gateways can only send logs to an SMS and cannot send logs to a Log Server. Log Servers are proprietary log archive servers.

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

156-215.81.20 practice, question 21. 172 questions available.