All About High Value 156-215.80 Study Guides

NEW QUESTION 1

Fill in the blank: By default, the SIC certificates issued by R80 Management Server are based on the _____ algorithm.

• A. SHA-256
• B. SHA-200
• C. MD5
• D. SHA-128

Answer: A

NEW QUESTION 2

Which SmartConsole tab shows logs and detects security threats, providing a centralized display of potential attack patterns from all network devices?

• A. Gateway and Servers
• B. Logs and Monitor
• C. Manage Seeting
• D. Security Policies

Answer: B

NEW QUESTION 3

When using LDAP as an authentication method for Identity Awareness, the query:

• A. Requires client and server side software.
• B. Prompts the user to enter credentials.
• C. Requires administrators to specifically allow LDAP traffic to and from the LDAP Server and the Security Gateway.
• D. Is transparent, requiring no client or server side software, or client intervention.

Answer: D

NEW QUESTION 4

Fill in the blank: In Security Gateways R75 and above, SIC uses _____ for encryption.

• A. AES-128
• B. AES-256
• C. DES
• D. 3DES

Answer: A

NEW QUESTION 5

Examine the following Rule Base.

What can we infer about the recent changes made to the Rule Base?

• A. Rule 7 was created by the 'admin' administrator in the current session
• B. 8 changes have been made by administrators since the last policy installation
• C. The rules 1, 5 and 6 cannot be edited by the 'admin' administrator
• D. Rule 1 and object webserver are locked by another administrator

Answer: D

Explanation:
On top of the print screen there is a number "8" which consists for the number of changes made and not saved. Session Management Toolbar (top of SmartConsole)

NEW QUESTION 6

What is NOT an advantage of Packet Filtering?

• A. Low Security and No Screening above Network Layer
• B. Application Independence
• C. High Performance
• D. Scalability

Answer: A

Explanation:
Packet Filter Advantages and Disadvantages

NEW QUESTION 7

Fill in the blank: The R80 utility fw monitor is used to troubleshoot _______

• A. User data base corruption
• B. LDAP conflicts
• C. Traffic issues
• D. Phase two key negotiation

Answer: C

Explanation:
Check Point's FW Monitor is a powerful built-in tool for capturing network traffic at the packet level. The Monitor utility captures network packets at multiple capture points along the FireWall inspection chains. These captured packets can be inspected later using the WireShark

NEW QUESTION 8

What is the potential downside or drawback to choosing the Standalone deployment option instead of the Distributed deployment option?

• A. degrades performance as the Security Policy grows in size
• B. requires additional Check Point appliances
• C. requires additional software subscription
• D. increases cost

Answer: A

NEW QUESTION 9

Can multiple administrators connect to a Security Management Server at the same time?

• A. No, only one can be connected
• B. Yes, all administrators can modify a network object at the same time
• C. Yes, every administrator has their own username, and works in a session that is independent of other administrators
• D. Yes, but only one has the right to write

Answer: C

NEW QUESTION 10

What is the appropriate default Gaia Portal address?

• A. HTTP://[IPADDRESS]
• B. HTTPS://[IPADDRESS]:8080
• C. HTTPS://[IPADDRESS]:4434
• D. HTTPS://[IPADDRESS]

Answer: D

NEW QUESTION 11

Which of the following is an authentication method used for Identity Awareness?

• A. SSL
• B. Captive Portal
• C. PKI
• D. RSA

Answer: B

NEW QUESTION 12

What is the mechanism behind Threat Extraction?

• A. This is a new mechanism which extracts malicious files from a document to use it as a counter-attack against its sender
• B. This is a new mechanism which is able to collect malicious files out of any kind of file types to destroy it prior to sending it to the intended recipient
• C. This is a new mechanism to identify the IP address of the sender of malicious codes and to put it into the SAM database (Suspicious Activity Monitoring).
• D. Any active contents of a document, such as JavaScripts, macros and links will be removed from the document and forwarded to the intended recipient, which makes this solution very fast

Answer: D

NEW QUESTION 13

When attempting to start a VPN tunnel, in the logs the error 'no proposal chosen' is seen numerous times. No other VPN-related log entries are present. Which phase of the VPN negotiations has failed?

• A. IKE Phase 1
• B. IPSEC Phase 2
• C. IPSEC Phase 1
• D. IKE Phase 2

Answer: D

NEW QUESTION 14

Which of the following is NOT a valid deployment option for R80?

• A. All-in-one (stand-alone)
• B. Log Server
• C. SmartEvent
• D. Multi-domain management server

Answer: D

NEW QUESTION 15

You are using SmartView Tracker to troubleshoot NAT entries. Which column do you check to view the NAT'd source port if you are using Source NAT?

• A. XlateDst
• B. XlateSPort
• C. XlateDPort
• D. XlateSrc

Answer: B

NEW QUESTION 16

Which product correlates logs and detects security threats, providing a centralized display of potential attack patterns from all network devices?

• A. SmartView Monitor
• B. SmartEvent
• C. SmartUpdate
• D. SmartDashboard

Answer: B

Explanation:
SmartEvent correlates logs from all Check Point enforcement points, including end-points, to identify suspicious activity from the clutter. Rapid data analysis and custom event logs immediately alert administrators to anomalous behavior such as someone attempting to use the same credential in multiple geographies simultaneously.

NEW QUESTION 17

The Gaia operating system supports which routing protocols?

• A. BGP, OSPF, RIP
• B. BGP, OSPF, EIGRP, PIM, IGMP
• C. BGP, OSPF, RIP, PIM, IGMP
• D. BGP, OSPF, RIP, EIGRP

Answer: A

Explanation:
The Advanced Routing Suite
The Advanced Routing Suite CLI is available as part of the Advanced Networking Software Blade.
For organizations looking to implement scalable, fault-tolerant, secure networks, the Advanced Networking blade enables them to run industry-standard dynamic routing protocols including BGP, OSPF, RIPv1, and RIPv2 on security gateways. OSPF, RIPv1, and RIPv2 enable dynamic routing over a single autonomous system—like a single department, company, or service provider—to avoid network failures. BGP provides dynamic routing support across more complex networks involving multiple autonomous systems—such as when a company uses two service providers or divides a network into multiple areas with different administrators responsible for the performance of each.

NEW QUESTION 18

Which of the following is NOT an advantage to using multiple LDAP servers?

• A. You achieve a faster access time by placing LDAP servers containing the database at remote sites
• B. Information on a user is hidden, yet distributed across several servers
• C. You achieve compartmentalization by allowing a large number of users to be distributed across several servers
• D. You gain High Availability by replicating the same information on several servers

Answer: B

NEW QUESTION 19

Which of the following is NOT a tracking option?

• A. Partial log
• B. Log
• C. Network log
• D. Full log

Answer: A

NEW QUESTION 20

Which one of these features is NOT associated with the Check Point URL Filtering and Application Control Blade?

• A. Detects and blocks malware by correlating multiple detection engines before users are affected.
• B. Configure rules to limit the available network bandwidth for specified users or groups.
• C. Use UserCheck to help users understand that certain websites are against the company’s security policy.
• D. Make rules to allow or block applications and Internet sites for individual applications, categories, and risk levels.

Answer: A

NEW QUESTION 21

Which of the following is NOT a VPN routing option available in a star community?

• A. To satellites through center only
• B. To center, or through the center to other satellites, to Internet and other VPN targets
• C. To center and to other satellites through center
• D. To center only

Answer: A

Explanation:
SmartConsole
For simple hubs and spokes (or if there is only one Hub), the easiest way is to configure a VPN star community in R80 SmartConsole:
On the Star Communitywindow, in the:
Center Gateways section, select the Security Gateway that functions as the "Hub".
Satellite Gateways section, select Security Gateways as the "spokes", or satellites.
On the VPN Routing page, Enable VPN routing for satellites section, select one of these options:
To center and to other Satellites through center - This allows connectivity between the Security Gateways, for example if the spoke Security Gateways are DAIP Security Gateways, and the Hub is a Security Gateway with a static IP address.
To center, or through the center to other satellites, to internet and other VPN targets - This allows connectivity between the Security Gateways as well as the ability to inspect all communication passing through the Hub to the Internet.
Create an appropriate Access Control Policy rule.
NAT the satellite Security Gateways on the Hub if the Hub is used to route connections from Satellites to the Internet.
The two Dynamic Objects (DAIP Security Gateways) can securely route communication through the Security Gateway with the static IP address.

NEW QUESTION 22

Which of the following is NOT a back up method?

• A. Save backup
• B. System backup
• C. snapshot
• D. Migrate

Answer: A

Explanation:
The built-in Gaia backup procedures:
Snapshot Management
System Backup (and System Restore)
Save/Show Configuration (and Load Configuration)
Check Point provides three different procedures for backing up (and restoring) the operating system and networking parameters on your appliances.
Snapshot (Revert)
Backup (Restore)
upgrade_export (Migrate) References:

NEW QUESTION 23

Which limitation of CoreXL is overcome by using (mitigated by) Multi-Queue?

• A. There is no traffic queue to be handled
• B. Several NICs can use one traffic queue by one CPU
• C. Each NIC has several traffic queues that are handled by multiple CPU cores
• D. Each NIC has one traffic queue that is handled by one CPU

Answer: C

NEW QUESTION 24
......