Practice CCSA R80 156-215.80 exam. Online Exam Practice Tests with detailed explanations! Pass 156-215.80 with confidence!
156-215.80 - Check Point Certified Security Administrator R80 Practice Tests 2022 | GuideTorrent
NEW QUESTION 180
The __________ is used to obtain identification and security information about network users.
- A. User index
- B. User server
- C. User Directory
- D. UserCheck
Answer: C
Explanation:
Explanation/Reference:
https://www.checkpoint.com/downloads/product-related/datasheets/DS_UserDirectorySWB.pdf
NEW QUESTION 181
ALPHA Corp has a new administrator who logs into the Gaia Portal to make some changes. He realizes that even though he has logged in as an administrator, he is unable to make any changes because all configuration options are greyed out as shown in the screenshot image below. What is the likely cause for this?
- A. The IP address of his computer is not in the allowed hosts.
- B. The Gaia/bin/confdis locked by another administrator from aSmartConsole session.
- C. The database is locked by another administrator SSH session.
- D. The Network address of his computer is in the blocked hosts.
Answer: C
Explanation:
There is a lock ontop left side of the screen. B is the logical answer.
NEW QUESTION 182
Administrator Kofi has just made some changes on his Management Server and then clicks on the Publish button in SmartConsole but then gets the error message shown in the screenshot below.
Where can the administrator check for more information on these errors?
- A. The Objects section in SmartConsole
- B. The Log and Monitor section in SmartConsole
- C. The Policies section in SmartConsole
- D. The Validations section in SmartConsole
Answer: D
Explanation:
Validation Errors
The validations pane in SmartConsole shows configuration error messages. Examples of errors are object names that are not unique, and the use of objects that are not valid in the Rule Base.
To publish, you must fix the errors.
Reference:
https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm?topic=documents/ R80/CP_R80_SecMGMT/126197
NEW QUESTION 183
The WebUI offers three methods for downloading Hotfixes via CPUSE. One of them is Automatic method. How many times per day will CPUSE agent check for hotfixes and automatically download them?
- A. Seven times per day
- B. Every two hours
- C. Six times per day
- D. Every three hours
Answer: D
Explanation:
Reference:
https://sc1.checkpoint.com/documents/R77/CP_R77_Gaia_AdminWebAdminGuide/ html_frameset.htm?topic=documents/R77/CP_R77_Gaia_AdminWebAdminGuide/112109
NEW QUESTION 184
ALPHA Corp has a new administrator who logs into the Gaia Portal to make some changes. He realizes that even though he has logged in as an administrator, he is unable to make any changes because all configuration options are greyed out as shown in the screenshot image below. What is the likely cause for this?
- A. The IP address of his computer is not in the allowed hosts.
- B. The database is locked by another administrator SSH session.
- C. The Network address of his computer is in the blocked hosts.
- D. The Gaia /bin/confd is locked by another administrator from a SmartConsole session.
Answer: B
Explanation:
Explanation
There is a lock on top left side of the screen. B is the logical answer.
NEW QUESTION 185
The CDT utility supports which of the following?
- A. Only Jumbo HFA's and hotfixes
- B. Major version upgrades to R77.30
- C. All upgrades
- D. Only major version upgrades to R80.10
Answer: C
Explanation:
Explanation
Explanation/Reference: https://supportcenter.checkpoint.com/supportcenter/portal?
eventSubmit_doGoviewsolutiondetails=&solutionid=sk97443
NEW QUESTION 186
In which VPN community is a satellite VPN gateway not allowed to create a VPN tunnel with another satellite
VPN gateway?
- A. Pentagon
- B. Star
- C. Meshed
- D. Combined
Answer: B
Explanation:
Explanation
VPN communities are based on Star and Mesh topologies. In a Mesh community, there are VPN connections
between each Security Gateway. In a Star community, satellites have a VPN connection with the center
Security Gateway, but not to each other.
NEW QUESTION 187
Sticky Decision Function (SDF) is required to prevent which of the following? Assume you set up an Active-Active cluster.
- A. Failovers
- B. Asymmetric routing
- C. Anti-Spoofing
- D. Symmetric routing
Answer: A
NEW QUESTION 188
Which Threat Prevention Software Blade provides protection from malicious software that can infect your network computers?
- A. Anti-Malware
- B. IPS
- C. Anti-bot
- D. Anti-Spam
Answer: C
Explanation:
Explanation
Anti-Bot
The Need for Anti-Bot
There are two emerging trends in today's threat landscape:
Both of these trends are driven by bot attacks.
A bot is malicious software that can invade your computer. There are many infection methods. These include opening attachments that exploit a vulnerability and accessing a web site that results in a malicious download.
NEW QUESTION 189
When logging in for the first time to a Security management Server through SmartConsole, a fingerprint is saved to the:
- A. Security Management Server's /home/.fgptfile and is available for future SmartConsole authentications.
- B. Windows registry is available for future Security Management Server authentications.
- C. SmartConsole cache is available for future Security Management Server authentications.
- D. there is no memory used for saving a fingerprint anyway.
Answer: C
Explanation:
Explanation/Reference:
Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_SecMan_WebAdmin/html_frameset.htm?
topic=documents/R76/CP_R76_SecMan_WebAdmin/118037
NEW QUESTION 190
Which of the following is NOT a VPN routing option available in a star community?
- A. To center only
- B. To satellites through center only
- C. To center, or through the center to other satellites, to Internet and other VPN targets
- D. To center and to other satellites throughcenter
Answer: A,B
Explanation:
SmartConsoleFor simple hubs and spokes (or if there is only one Hub), the easiest way is to configure a VPN star community in R80 SmartConsole:
The two Dynamic Objects (DAIP Security Gateways) can securely route communication through the Security Gateway with the static IP address.
NEW QUESTION 191
When logging in for the first time to a Security management Server through SmartConsole, a fingerprint is
saved to the:
- A. There is no memory used for saving a fingerprint anyway.
- B. Security Management Server's /home/.fgpt file and is available for future SmartConsole authentications.
- C. Windows registry is available for future Security Management Server authentications.
- D. SmartConsole cache is available for future Security Management Server authentications.
Answer: D
NEW QUESTION 192
What are the three authentication methods for SIC?
- A. Certificates, Passwords, and Tokens
- B. Certificates, standards-based SSL for the creation of secure channels, and 3DES or AES128 for encryption
- C. Packet Filtering, certificates, and 3DES or AES128 for encryption
- D. Passwords, Users, and standards-based SSL for the creation of security channels
Answer: B
Explanation:
Explanation
Secure Internal Communication (SIC)
Secure Internal Communication (SIC) lets Check Point platforms and products authenticate with each other.
The SIC procedure creates a trusted status between gateways, management servers and other Check Point components. SIC is required to install polices on gateways and to send logs between gateways and management servers.
These security measures make sure of the safety of SIC:
NEW QUESTION 193
Administrator wishes to update IPS from SmartConsole by clicking on the option "update now" under the IPS tab. Which device requires internet access for the update to work?
- A. Device where SmartConsole is installed
- B. Security Gateway
- C. SMS
- D. SmartEvent
Answer: A
Explanation:
Updating IPS Manually
You can immediately update IPS with real-time information on attacks and all the latest protections from the IPS website. You can only manually update IPS if a proxy is defined in Internet Explorer settings.
To obtain updates of all the latest protections from the IPS website:
The LAN Settings window opens.
The settings for the Internet Explorer proxy server are configured.
If you chose to automatically mark new protections for Follow Up, you have the option to open the Follow Up page directly to see the new protections.
NEW QUESTION 194
You are conducting a security audit. While reviewing configuration files and logs, you notice logs accepting POP3 traffic, but you do not see a rule allowing POP3 traffic in the Rule Base. Which of the following is the most likely cause?
- A. POP3 is accepted in Global Properties.
- B. The POP3 rule is disabled.
- C. The POP3 rule is hidden.
- D. POP3 is one of 3 services (POP3, IMAP, and SMTP) accepted by the default mail object in R77.
Answer: C
Explanation:
Explanation/Reference:
NEW QUESTION 195
Fill in the blanks: A ____ license requires an administrator to designate a gateway for attachment whereas a
_____ license is automatically attached to a Security Gateway.
- A. Local; central
- B. Local; formal
- C. Central; local
- D. Formal; corporate
Answer: C
Explanation:
Explanation/Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Installation_and_Upgrade_Guide- webAdmin/13128.htm
NEW QUESTION 196
Which R80 SmartConsole tool would you use to verify the installed Security Policy name on a Security Gateway?
- A. SmartView Status
- B. SmartView Monitor
- C. SmartUpdate
- D. None, SmartConsole applications only communicate with the Security Management Server.
Answer: B
NEW QUESTION 197
......
The best 156-215.80 exam study material and preparation tool is here: https://pass4sure.guidetorrent.com/156-215.80-dumps-questions.html