Precise CheckPoint 156-215.81 Free Practice Questions Online

NEW QUESTION 1
How do logs change when the "Accounting" tracking option is enabled on a traffic rule?

• A. Involved traffic logs will be forwarded to a log server.
• B. Provides log details view email to the Administrator.
• C. Involved traffic logs are updated every 10 minutes to show how much data has passed on the connection.
• D. Provides additional information to the connected user.

Answer: C

Explanation:
Accounting - Select this to update the log at 10 minutes intervals, to show how much data has passed in the connection: Upload bytes, Download bytes, and browse time. https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_LoggingAndMonitoring_AdminGu

NEW QUESTION 2
You have successfully backed up your Check Point configurations without the OS information. What command would you use to restore this backup?

• A. restore_backup
• B. import backup
• C. cp_merge
• D. migrate import

Answer: A

NEW QUESTION 3
Which GUI tool can be used to view and apply Check Point licenses?

• A. cpconfig
• B. Management Command Line
• C. SmartConsole
• D. SmartUpdate

Answer: D

Explanation:
SmartUpdate GUI is the recommended way of managing licenses.

NEW QUESTION 4
Under which file is the proxy arp configuration stored?

• A. $FWDIR/state/proxy_arp.conf on the management server
• B. $FWDIR/conf/local.arp on the management server
• C. $FWDIR/state/_tmp/proxy.arp on the security gateway
• D. $FWDIR/conf/local.arp on the gateway

Answer: D

NEW QUESTION 5
An administrator can use section titles to more easily navigate between large rule bases. Which of these statements is FALSE?

• A. Section titles are not sent to the gateway side.
• B. These sections are simple visual divisions of the Rule Base and do not hinder the order of rule enforcement.
• C. A Sectional Title can be used to disable multiple rules by disabling only the sectional title.
• D. Sectional Titles do not need to be created in the SmartConsole.

Answer: C

Explanation:
Section titles are only for visual categorization of rules.

NEW QUESTION 6
The Online Activation method is available for Check Point manufactured appliances. How does the administrator use the Online Activation method?

• A. The SmartLicensing GUI tool must be launched from the SmartConsole for the Online Activation tool to start automatically.
• B. No action is required if the firewall has internet access and a DNS server to resolve domain names.
• C. Using the Gaia First Time Configuration Wizard, the appliance connects to the Check Point User Center and downloads all necessary licenses and contracts.
• D. The cpinfo command must be run on the firewall with the switch -online-license-activation.

Answer: C

Explanation:
"Online activation: this method of activation is available for Check Point manufactured appliances. These appliances should be configured to have internet connectivity during the completion of the First Time Configuration Wizard for software version R77 and below. Customers using R80 and higher will be able to use this feature during or after the completion of the First Time Configuration Wizard."
https://supportcenter.checkpoint.com/supportcenter/portal?eventsubmit_dogoviewsolutiondetails=&solutionid=s

NEW QUESTION 7
After trust has been established between the Check Point components, what is TRUE about name and IP-address changes?

• A. Security Gateway IP-address cannot be changed without re-establishing the trust
• B. The Security Gateway name cannot be changed in command line without re-establishing trust
• C. The Security Management Server name cannot be changed in SmartConsole without re-establishing trust
• D. The Security Management Server IP-address cannot be changed without re-establishing the trust

Answer: A

NEW QUESTION 8
You want to store the GAiA configuration in a file for later reference. What command should you use?

• A. write mem <filename>
• B. show config -f <filename>
• C. save config -o <filename>
• D. save configuration <filename>

Answer: D

NEW QUESTION 9
Gaia has two default user accounts that cannot be deleted. What are those user accounts?

• A. Admin and Default
• B. Expert and Clish
• C. Control and Monitor
• D. Admin and Monitor

Answer: D

NEW QUESTION 10
A stateful inspection firewall works by registering connection data and compiling this information. Where is the information stored?

• A. In the system SMEM memory pool.
• B. In State tables.
• C. In the Sessions table.
• D. In a CSV file on the firewall hard drive located in $FWDIR/conf/.

Answer: B

Explanation:
The information stored in the state tables provides cumulative data that can be used to evaluate future connections......
https://www.checkpoint.com/cyber-hub/network-security/what-is-firewall/what-is-a-stateful-firewall/

NEW QUESTION 11
Rugged appliances are small appliances with ruggedized hardware and like Quantum Spark appliance they use which operating system?

• A. Centos Linux
• B. Gaia embedded
• C. Gaia
• D. Red Hat Enterprise Linux version 5

Answer: B

Explanation:
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=

NEW QUESTION 12
The “Hit count” feature allows tracking the number of connections that each rule matches. Will the Hit count feature work independently from logging and Track the hits even if the Track option is set to “None”?

• A. No, it will not work independentl
• B. Hit Count will be shown only for rules with Track options set as Log or alert
• C. Yes, it will work independently as long as “analyze all rules” tick box is enabled on the Security Gateway
• D. No, it will not work independently because hit count requires all rules to be logged
• E. Yes, it will work independently because when you enable Hit Count, the SMS collects the data from supported Security Gateways

Answer: D

NEW QUESTION 13
Which deployment adds a Security Gateway to an existing environment without changing IP routing?

• A. Distributed
• B. Bridge Mode
• C. Remote
• D. Standalone

Answer: B

NEW QUESTION 14
Check Point licenses come in two forms. What are those forms?

• A. Central and Local.
• B. Access Control and Threat Prevention.
• C. On-premise and Public Cloud.
• D. Security Gateway and Security Management.

Answer: A

NEW QUESTION 15
Which of the following is NOT a valid application navigation tab in the R80 SmartConsole?

• A. Manage and Command Line
• B. Logs and Monitor
• C. Security Policies
• D. Gateway and Servers

Answer: A

Explanation:

NEW QUESTION 16
Which of the following is NOT a valid deployment option for R80?

• A. All-in-one (stand-alone)
• B. CloudGuard
• C. Distributed
• D. Bridge Mode

Answer: B

NEW QUESTION 17
......