Assume CheckPoint 156-215.81.20 Dumps PDF Are going to be The Best Score [Q169-Q193]

Q169. What is the SOLR database for?

Used for full text search and enables powerful matching capabilities

Writes data to the database and full text search

Serves GUI responsible to transfer request to the DLE server

Enables powerful matching capabilities and writes data to the database

Q170. Which of the following is used to extract state related information from packets and store that information in state tables?

STATE Engine

TRACK Engine

RECORD Engine

INSPECT Engine

Q171. What is the difference between SSL VPN and IPSec VPN?

IPSec VPN does not require installation of a resident VPN client

SSL VPN requires installation of a resident VPN client

SSL VPN and IPSec VPN are the same

IPSec VPN requires installation of a resident VPN client and SSL VPN requires only an installed Browser

Q172. How is communication between different Check Point components secured in R80? As with all questions, select the best answer.

By using IPSEC

By using SIC

By using ICA

By using 3DES

Q173. When URL Filtering is set, what identifying data gets sent to the Check Point Online Web Service?

The URL and server certificate are sent to the Check Point Online Web Service

The full URL, including page data, is sent to the Check Point Online Web Service

The host part of the URL is sent to the Check Point Online Web Service

The URL and IP address are sent to the Check Point Online Web Service

Q174. The “Hit count” feature allows tracking the number of connections that each rule matches.
Will the Hit count feature work independently from logging and Track the hits even if the Track option is set to “None”?

No, it will not work independently. Hit Count will be shown only for rules with Track options set as Log or alert

Yes, it will work independently as long as “analyze all rules” tick box is enabled on the Security Gateway

No, it will not work independently because hit count requires all rules to be logged

Yes, it will work independently because when you enable Hit Count, the SMS collects the data from supported Security Gateways

Q175. Identity Awareness allows the Security Administrator to configure network access based on which of the following?

Name of the application, identity of the user, and identity of the machine

Identity of the machine, username, and certificate

Network location, identity of a user, and identity of a machine

Browser-Based Authentication, identity of a user, and network location

Q176. What are the steps to configure the HTTPS Inspection Policy?

Go to Manage&Settings > Blades > HTTPS Inspection > Configure in SmartDashboard

Go to Application&url filtering blade > Advanced > Https Inspection > Policy

Go to Manage&Settings > Blades > HTTPS Inspection > Policy

Go to Application&url filtering blade > Https Inspection > Policy

Q177. How many users can have read/write access in Gaia Operating System at one time?

One

Three

Two

Infinite

Q178. You noticed that CPU cores on the Security Gateway are usually 100% utilized and many packets were dropped. You don’t have a budget to perform a hardware upgrade at this time. To optimize drops you decide to use Priority Queues and fully enable Dynamic Dispatcher.
How can you enable them?

fw ctl multik dynamic_dispatching on

fw ctl multik dynamic_dispatching set_mode 9

fw ctl multik set_mode 9

fw ctl miltik pq enable

Q179. What SmartEvent component creates events?

Consolidation Policy

Correlation Unit

SmartEvent Policy

SmartEvent GUI

Q180. Fill in the blank: Back up and restores can be accomplished through_________.

SmartConsole, WebUI, or CLI

WebUI, CLI, or SmartUpdate

CLI, SmartUpdate, or SmartBackup

SmartUpdate, SmartBackup, or SmartConsole

Q181. Which message indicates IKE Phase 2 has completed successfully?

Quick Mode Complete

Aggressive Mode Complete

Main Mode Complete

IKE Mode Complete

Q182. When an encrypted packet is decrypted, where does this happen?

Security policy

Inbound chain

Outbound chain

Decryption is not supported

Q183. Fill in the blank: An identity server uses a ___________ for user authentication.

Shared secret

Certificate

One-time password

Token

Q184. What are the types of Software Containers?

Smart Console, Security Management, and Security Gateway

Security Management, Security Gateway, and Endpoint Security

Security Management, Log & Monitoring, and Security Policy

Security Management, Standalone, and Security Gateway

Q185. What is the main difference between Threat Extraction and Threat Emulation?

Threat Emulation never delivers a file and takes more than 3 minutes to complete

Threat Extraction always delivers a file and takes less than a second to complete

Threat Emulation never delivers a file that takes less than a second to complete

Threat Extraction never delivers a file and takes more than 3 minutes to complete

Q186. Which software blade enables Access Control policies to accept, drop, or limit web site access based on user, group, and/or machine?

Application Control

Data Awareness

Identity Awareness

Threat Emulation

Q187. Fill in the blank Once a license is activated, a___________should be installed.

Security Gateway Contract file

Service Contract file

License Management file

License Contract file

Q188. Which Threat Prevention Software Blade provides protection from malicious software that can infect your network computers? (Choose the best answer.)

IPS

Anti-Virus

Anti-Malware

Content Awareness

Q189. Choose what BEST describes users on Gaia Platform.

There are two default users and neither can be deleted.

There are two default users and one cannot be deleted.

There is one default user that can be deleted.

There is one default user that cannot be deleted.

Q190. How many layers make up the TCP/IP model?

2

7

6

4

Q191. What are the three deployment considerations for a secure network?

Distributed, Bridge Mode, and Remote

Bridge Mode, Remote, and Standalone

Remote, Standalone, and Distributed

Standalone, Distributed, and Bridge Mode

Q192. When should you generate new licenses?

Before installing contract files.

After a device upgrade.

When the existing license expires, license is upgraded or the IP-address associated with the license changes.

Only when the license is upgraded.

Q193. Which of the following is NOT an authentication scheme used for accounts created through SmartConsole?

RADIUS

Check Point password

Security questions

SecurID

Assume CheckPoint 156-215.81.20 Dumps PDF Are going to be The Best Score [Q169-Q193]

Be the first to reply

Leave a Reply Cancel reply