Top Tips Of Far Out 156-215.81 Practice

NEW QUESTION 1
What two ordered layers make up the Access Control Policy Layer?

• A. URL Filtering and Network
• B. Network and Threat Prevention
• C. Application Control and URL Filtering
• D. Network and Application Control

Answer: D

NEW QUESTION 2
Which of the following technologies extracts detailed information from packets and stores that information in state tables?

• A. INSPECT Engine
• B. Next-Generation Firewall
• C. Packet Filtering
• D. Application Layer Firewall

Answer: A

Explanation:
Check Point FireWall-1’s Stateful Inspection overcomes the limitations of the previous two approaches by providing full application-layer awareness without breaking the client/server model. With Stateful Inspection, the packet is intercepted at the network layer, but then the INSPECT Engine takes over. It extracts state-related information required for the security decision from all application layers and maintains this information in dynamic state tables for evaluating subsequent connection attempts. This provides a solution which is highly secure and offers maximum performance, scalability, and extensibility.

NEW QUESTION 3
What are the three deployment options available for a security gateway?

• A. Standalone, Distributed, and Bridge Mode
• B. Bridge Mode, Remote, and Standalone
• C. Remote, Standalone, and Distributed
• D. Distributed, Bridge Mode, and Remote

Answer: A

Explanation:
https://sc1.checkpoint.com/documents/R76/CP_R76_Installation_and_Upgrade_Guide-webAdmin/86429.htm

NEW QUESTION 4
When comparing Stateful Inspection and Packet Filtering, what is a benefit that Stateful Inspection offers over Packer Filtering?

• A. Stateful Inspection offers unlimited connections because of virtual memory usage.
• B. Stateful Inspection offers no benefits over Packet Filtering.
• C. Stateful Inspection does not use memory to record the protocol used by the connection.
• D. Only one rule is required for each connection.

Answer: D

NEW QUESTION 5
What is the default tracking option of a rule?

• A. Tracking
• B. Log
• C. None
• D. Alert

Answer: B

Explanation:
https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_LoggingAndMonitoring_AdminGu

NEW QUESTION 6
Phase 1 of the two-phase negotiation process conducted by IKE operates in ______ mode.

• A. Main
• B. Authentication
• C. Quick
• D. High Alert

Answer: A

Explanation:
Phase I modes
Between Security Gateways, there are two modes for IKE phase I. These modes only apply to IKEv1:

NEW QUESTION 7
What default layers are included when creating a new policy layer?

• A. Application Control, URL Filtering and Threat Prevention
• B. Access Control, Threat Prevention and HTTPS Inspection
• C. Firewall, Application Control and IPSec VPN
• D. Firewall, Application Control and IPS

Answer: B

NEW QUESTION 8
Which option in a firewall rule would only match and allow traffic to VPN gateways for one Community in common?

• A. All Connections (Clear or Encrypted)
• B. Accept all encrypted traffic
• C. Specific VPN Communities
• D. All Site-to-Site VPN Communities

Answer: C

NEW QUESTION 9
Which of the following is NOT an authentication scheme used for accounts created through SmartConsole?

• A. RADIUS
• B. Check Point password
• C. Security questions
• D. SecurID

Answer: C

NEW QUESTION 10
Is it possible to have more than one administrator connected to a Security Management Server at once?

• A. Yes, but only if all connected administrators connect with read-only permissions.
• B. Yes, but objects edited by one administrator will be locked for editing by others until the session is published.
• C. No, only one administrator at a time can connect to a Security Management Server
• D. Yes, but only one of those administrators will have write-permission
• E. All others will have read-only permission.

Answer: B

NEW QUESTION 11
What data MUST be supplied to the SmartConsole System Restore window to restore a backup?

• A. Server, Username, Password, Path, Version
• B. Username, Password, Path, Version
• C. Server, Protocol, Username, Password, Destination Path
• D. Server, Protocol, Username, Password, Path

Answer: D

Explanation:
References:

NEW QUESTION 12
Fill in the blanks: A _____ license requires an administrator to designate a gateway for attachment whereas a _______ license is automatically attached to a Security Gateway.

• A. Formal; corporate
• B. Local; formal
• C. Local; central
• D. Central; local

Answer: D

NEW QUESTION 13
When defining group-based access in an LDAP environment with Identity Awareness, what is the BEST object type to represent an LDAP group in a Security Policy?

• A. Access Role
• B. User Group
• C. SmartDirectory Group
• D. Group Template

Answer: A

NEW QUESTION 14
What is the SOLR database for?

• A. Used for full text search and enables powerful matching capabilities
• B. Writes data to the database and full text search
• C. Serves GUI responsible to transfer request to the DLE server
• D. Enables powerful matching capabilities and writes data to the database

Answer: A

NEW QUESTION 15
Which tool is used to enable ClusterXL?

• A. SmartUpdate
• B. cpconfig
• C. SmartConsole
• D. sysconfig

Answer: B

NEW QUESTION 16
Which one of the following is a way that the objects can be manipulated using the new API integration in R80 Management?

• A. Microsoft Publisher
• B. JSON
• C. Microsoft Word
• D. RC4 Encryption

Answer: B

NEW QUESTION 17
......