18 August, 2021

What Refined 156-215.80 Testing Software Is

It is more faster and easier to pass the Check-Point 156-215.80 exam by using Exact Check-Point Check Point Certified Security Administrator questuins and answers. Immediate access to the Up to date 156-215.80 Exam and find the same core area 156-215.80 questions with professionally verified answers, then PASS your exam with a high score now.

Also have 156-215.80 free dumps questions for you:

Page: 1 / 40

Total 485 questions Full Exam Access

Question 1

- (Exam Topic 1)
Which of the following are types of VPN communicates?

Pentagon, star, and combination

Star, octagon, and combination

Combined and star

Meshed, star, and combination

Question 2

- (Exam Topic 2)
Which of these components does NOT require a Security Gateway R77 license?

Security Management Server

Check Point Gateway

SmartConsole

SmartUpdate upgrading/patching

Question 3

- (Exam Topic 3)
As you review this Security Policy, what changes could you make to accommodate Rule 4?
156-215.80 dumps exhibit

Remove the service HTTP from the column Service in Rule 4.

Modify the column VPN in Rule 2 to limit access to specific traffic.

Nothing at all

Modify the columns Source or Destination in Rule 4

Question 4

- (Exam Topic 4)
Session unique identifiers are passed to the web api using which http header option?

X-chkp-sid

Accept-Charset

Proxy-Authorization

Application

Question 5

- (Exam Topic 3)
Which is the correct order of a log flow processed by SmartEvent components:

Firewall > Correlation Unit > Log Server > SmartEvent Server Database > SmartEvent Client

Firewall > SmartEvent Server Database > Correlation Unit > Log Server > SmartEvent Client

Firewall > Log Server > SmartEvent Server Database > Correlation Unit > SmartEvent Client

Firewall > Log Server > Correlation Unit > SmartEvent Server Database > SmartEvent Client

Question 6

- (Exam Topic 2)
Fill in the blank: The _____ feature allows administrators to share a policy with other policy packages.

Shared policy packages

Shared policies

Concurrent policy packages

Concurrent policies

Question 7

- (Exam Topic 2)
Look at the screenshot below. What CLISH command provides this output?
156-215.80 dumps exhibit

show configuration all

show confd configuration

show confd configuration all

show configuration

Question 8

- (Exam Topic 3)
Your boss wants you to closely monitor an employee suspected of transferring company secrets to the competition. The IT department discovered the suspect installed a WinSCP client in order to use encrypted
communication. Which of the following methods is BEST to accomplish this task?

Use SmartView Tracker to follow his actions by filtering log entries that feature the WinSCP destination por

Then, export the corresponding entries to a separate log file for documentation.

Use SmartDashboard to add a rule in the firewall Rule Base that matches his IP address, and those of potential targets and suspicious protocol

Apply the alert action or customized messaging.

Watch his IP in SmartView Monitor by setting an alert action to any packet that matches your Rule Base and his IP address for inbound and outbound traffic.

Send the suspect an email with a keylogging Trojan attached, to get direct information about his wrongdoings.

Question 9

- (Exam Topic 4)
Fill in the blanks: A _____ license requires an administrator to designate a gateway for attachment whereas a _____ license is automatically attached to a Security Gateway.

Format; corporate

Local; formal

Local; central

Central; local

Question 10

- (Exam Topic 4)
Which one of the following is TRUE?

Ordered policy is a sub-policy within another policy

One policy can be either inline or ordered, but not both

Inline layer can be defined as a rule action

Pre-R80 Gateways do not support ordered layers

Question 11

- (Exam Topic 4)
If the Active Security Management Server fails or if it becomes necessary to change the Active to Standby, the following steps must be taken to prevent data loss. Providing the Active Security Management Server is responsible, which of these steps should NOT be performed:

Rename the hostname of the Standby member to match exactly the hostname of the Active member.

Change the Standby Security Management Server to Active.

Change the Active Security Management Server to Standby.

Manually synchronize the Active and Standby Security Management Servers.

Question 12

- (Exam Topic 3)
What is the purpose of Priority Delta in VRRP?

When a box is up, Effective Priority = Priority + Priority Delta

When an Interface is up, Effective Priority = Priority + Priority Delta

When an Interface fails, Effective Priority = Priority - Priority Delta

When a box fails, Effective Priority = Priority - Priority Delta

Question 13

- (Exam Topic 1)
Choose what BEST describes the Policy Layer Traffic Inspection.

If a packet does not match any of the inline layers, the matching continues to the next Layer.

If a packet matches an inline layer, it will continue matching the next layer.

If a packet does not match any of the inline layers, the packet will be matched against the Implicit Clean-up Rule.

If a packet does not match a Network Policy Layer, the matching continues to its inline layer.

Question 14

- (Exam Topic 3)
As a Security Administrator, you must refresh the Client Authentication authorized time-out every time a new user connection is authorized. How do you do this? Enable the Refreshable Timeout setting:

in the user object's Authentication screen.

in the Gateway object's Authentication screen.

in the Limit tab of the Client Authentication Action Properties screen.

in the Global Properties Authentication screen.

Question 15

- (Exam Topic 3)
Using mgmt_cli, what is the correct syntax to import a host object called Server_1 from the CLI?

mgmt_cli add-host “Server_1” ip_address “10.15.123.10” --format txt

mgmt_cli add host name “Server_1” ip_address “10.15.123.10” --format json

mgmt_cli add object-host “Server_1” ip_address “10.15.123.10” --format json

mgmt_cli add object “Server_1” ip_address “10.15.123.10” --format json

Question 16

- (Exam Topic 3)
Which command can you use to verify the number of active concurrent connections?

fw conn all

fw ctl pst pstat

show all connections

show connections

Question 17

- (Exam Topic 3)
How do you configure the Security Policy to provide uses access to the Captive Portal through an external (Internet) interface?

Change the gateway settings to allow Captive Portal access via an external interface.

No action is necessar

This access is available by default.

Change the Identity Awareness settings under Global Properties to allow Captive Policy access on all interfaces.

Change the Identity Awareness settings under Global Properties to allow Captive Policy access for an external interface.

Question 18

- (Exam Topic 2)
Which directory holds the SmartLog index files by default?

$SMARTLOGDIR/data

$SMARTLOG/dir

$FWDIR/smartlog

$FWDIR/log

Question 19

- (Exam Topic 2)
What action can be performed from SmartUpdate R77?

upgrade_export

fw stat -1

cpinfo

remote_uninstall_verifier

Question 21

- (Exam Topic 1)
Which utility shows the security gateway general system information statistics like operating system information and resource usage, and individual software blade statistics of VPN, Identity Awareness and DLP?

cpconfig

fw ctl pstat

cpview

fw ctl multik stat

Question 22

- (Exam Topic 3)
Which tool CANNOT be launched from SmartUpdate R77?

IP Appliance Voyager

snapshot

GAiA WebUI

cpinfo

Question 23

- (Exam Topic 4)
When a Security Gateways sends its logs to an IP address other than its own, which deployment option is installed?

Distributed

Standalone

Bridge

Page: 1 / 40

Total 485 questions Full Exam Access