156-915.80 | Updated Check Point 156-915.80 practice test

Question No: 5

You are MegaCorpu2021s Security Administrator. There are various network objects which must be NATed. Some of them use the Automatic Hide NAT method, while others use the Automatic Static NAT method. What is the rule order if both methods are used together? Give the BEST answer.

A. The Administrator decides the rule order by shifting the corresponding rules up and down.

B. The Static NAT rules have priority over the Hide NAT rules and the NAT on a node has priority over the NAT on a network or an address range.

C. The Hide NAT rules have priority over the Static NAT rules and the NAT on a node has priority over the NAT on a network or an address range.

D. The rule position depends on the time of their creation. The rules created first are placed at the top; rules created later are placed successively below the others.

Answer: B

Question No: 6

You want VPN traffic to match packets from internal interfaces. You also want the traffic to exit the Security Gateway bound for all site-to-site VPN Communities, including Remote Access Communities. How should you configure the VPN match rule?

A. internal_clear > All_communities

B. Internal_clear > External_Clear

C. Communities > Communities

D. internal_clear > All_GwToGw

Answer: A

Question No: 7

Which of the following is NOT defined by an Access Role object?

A. Source Network

B. Source Machine

C. Source User

D. Source Server

Answer: D

Question No: 8

What is the officially accepted diagnostic tool for IP Appliance Support?

A. ipsoinfo

B. CST

C. uag-diag

D. cpinfo

Answer: B

Question No: 9

Fill in the blank. To verify that a VPN Tunnel is properly established, use the command _____

Answer:

vpn tunnelutil

Question No: 10

Your primary Security Gateway runs on GAiA. What is the easiest way to back up your Security Gateway R80 configuration, including routing and network configuration files?

A. Copying the directories $FWDIR/conf and $FWDIR/lib to another location.

B. Using the native GAiA backup utility from command line or in the Web based user interface.

C. Using the command upgrade_export.

D. Run the pre_upgrade_verifier and save the .tgz file to the directory /temp.

Answer: B

Question No: 11

Check Point APIs allow system engineers and developers to make changes to their organizationu2021s security policy with CLI tools and Web Services for all of the following except?

A. Create new dashboards to manage 3rd party task

B. Create products that use and enhance 3rd party solutions.

C. Execute automated scripts to perform common tasks.

D. Create products that use and enhance the Check Point Solution.

Answer: A

Explanation:

Check Point APIs let system administrators and developers make changes to the security policy with CLI tools and web-services. You can use an API to:

Use an automated script to perform common tasks

Integrate Check Point products with 3rd party solutions

Create products that use and enhance the Check Point solution

Question No: 12

Because of pre-existing design constraints, you set up manual NAT rules for your HTTP server. However, your FTP server and SMTP server are both using automatic NAT rules. All traffic from your FTP and SMTP servers are passing through the Security Gateway without a problem, but traffic from the Web server is dropped on rule 0 because of anti-spoofing settings. What is causing this?

A. Manual NAT rules are not configured correctly.

B. Allow bi-directional NAT is not checked in Global Properties.

C. Routing is not configured correctly.

D. Translate destination on client side is not checked in Global Properties under Manual NAT Rules.

Answer: D

Question No: 13

SmartEvent does NOT use which of the following procedures to identify events?

A. Matching a log against each event definition

B. Create an event candidate

C. Matching a log against local exclusions

D. Matching a log against global exclusions

Answer: C

Explanation:

Events are detected by the SmartEvent Correlation Unit. The Correlation Unit task is to scan logs for criteria that match an Event Definition. SmartEvent uses these procedures to identify events:

Matching a Log Against Global Exclusions

Matching a Log Against Each Event Definition

Creating an Event Candidate

When a Candidate Becomes an Event

Question No: 14

When defining QoS global properties, which option below is not valid?

A. Weight

B. Authenticated timeout

C. Schedule

D. Rate

Answer: C