Free CheckPoint 156-215.81 Exam Dumps and 156-215.81 Exam Questions

Question No: 1

MultipleChoice

What is the order of NAT priorities'?

Options

AIP pool NAT static NAT. hide NAT

BStatic NAT hide NAT, IP pool NAT

CStatic NAT, IP pool NAT hide NAT

DStatic NAT automatic NAT hide NAT

Question No: 2

MultipleChoice

Which command is used to add users to or from existing roles'?

Options

Aadd rba user <User Name> roles <List>

Badd user <User Name>

Cadd rba user <User Name>

Dadd user <User Name> roles <List>

Question No: 3

MultipleChoice

What are two basic rules Check Point recommends for building an effective security policy?

Options

AAccept Rule and Drop Rule

BCleanup Rule and Stealth Rule

CExplicit Rule and Implied Rule

DNAT Rule and Reject Rule

Question No: 4

MultipleChoice

In order to modify Security Policies the administrator can use which of the following tools? (Choose the best answer.)

Options

ASmartConsole and WebUI on the Security Management Server.

BSmartConsole or mgmt_cli (API) on any computer where SmartConsole is installed.

CCommand line of the Security Management Server or mgmt_cli.exe on any Windows computer.

Dmgmt_cli (API) or WebUI on Security Gateway and SmartConsole on the Security Management Server.

Question No: 5

MultipleChoice

Check Point APIs allow system engineers and developers to make changes to their organization's security policy with CLI tools and Web Services for all of the following except:

Options

ACreate new dashboards to manage 3rd party task

BCreate products that use and enhance 3rd party solutions

CExecute automated scripts to perform common tasks

DCreate products that use and enhance the Check Point Solution

Question No: 6

MultipleChoice

Which limitation of CoreXL is overcome by using (mitigated by) Multi-Queue?

Options

AThere is no traffic queue to be handled

BSeveral NICs can use one traffic queue by one CPU

CEach NIC has several traffic queues that are handled by multiple CPU cores

DEach NIC has one traffic queue that is handled by one CPU

Question No: 7

MultipleChoice

The default method for destination NAT is _____________, where NAT occurs on the Inbound interface closest to the client.

Options

ADestination side

BSource side

CServer side

DClient side

Question No: 8

MultipleChoice

An internal router is sending UDP keep-alive packets that are being encapsulated with GRE and sent through your R77 Security Gateway to a partner site. A rule for GRE traffic is configured for ACCEPT/LOG. Although the keep-alive packets are being sent every minute, a search through the SmartView Tracker logs for GRE traffic only shows one entry for the whole day (early in the morning after a Policy install).

Your partner site indicates they are successfully receiving the GRE encapsulated keep-alive packets on the 1-minute interval.

If GRE encapsulation is turned off on the router, SmartView Tracker shows a log entry for the UDP keep-alive packet every minute.

Which of the following is the BEST for this behavior?

Options

AThe setting Log does not capture this level of detail for GRE. Set the rule tracking action to Audit since certain types of traffic can only be tracked this way.

BThe log unification process is using a LUUID (Log Unification Unique Identification) that has become corrupt. Because it is encrypted, the R77 Security Gateway cannot distinguish between GRE sessions. This is a known issue with GRE. Use IPSEC instead of the non-standard GRE protocol for encapsulation.

CThe Log Server log unification process unifies all log entries from the Security Gateway on a specific connection into only one log entry in the SmartView Tracker. GRE traffic has a 10 minute session timeout, thus each keep-alive packet is considered part of the original logged connection at the beginning of the day.

DThe Log Server is failing to log GRE traffic properly because it is VPN traffic. Disable all VPN configuration to the partner site to enable proper logging.

Question No: 9

MultipleChoice

What are types of Check Point APIs available currently as part of R80.10 code?

Options

ASecurity Gateway API, Management API, Threat Prevention API and Identity Awareness Web Services API

BManagement API, Threat Prevention API, Identity Awareness Web Services API and OPSEC SDK API

COSE API, OPSEC SDK API, Threat Prevention API and Policy Editor API

DCPMI API, Management API, Threat Prevention API and Identity Awareness Web Services API

Question No: 10

MultipleChoice

Which Threat Prevention Software Blade provides protection from malicious software that can infect your network computers?

Options

AAnti-Malware

BIPS

CAnti-bot

DAnti-Spam