Pass Your 156-215.80 Exam Easily – Real 156-215.80 Practice Dump Updated Jun 08, 2022 [Q113-Q133]

Pass Your 156-215.80 Exam Easily – Real 156-215.80 Practice Dump Updated Jun 08, 2022

2022 Realistic Verified Free CheckPoint 156-215.80 Exam Questions

Career Path

There are 3 comprehensive certification paths on the Check Point official website including the Check Point Certified Security Administrator, the Check Point Certified Security Expert, and the Check Point Certified Security Master. The mentioned CCSA certification is the first step in this series, recognizing the foundational skills that administrators need to manage everyday operations of the Check Point Products and security solutions. So, after completing this training, you will likely go after the top-level exams such as the already mentioned CCSE and CCSM certifications.

Describing Test Objectives

Read on to find a detailed description of the test objectives necessary for 156-80:

• Introduction to Check Point Architecture

For this topic, your work will have been made easier if you already understand the core elements of the Check Point 3-tiered architecture. What’s more, this topic will recognize your ability to interpret firewall concepts and techniques used during network traffic control. Finally, it addresses the knowledge of deploying Check Point options, deals with SmartConsole characteristics, functions as well as means and equips you with the relevant knowledge of how to install the GUI.

• Administrator Task Implementation & Working with ClusterXL

This topic focuses on your ability to successfully perform periodic administrator tasks that the Administrator job entails. Thus, you will learn how to revise for rule-based performance with policy control and will acquire the basic knowledge of the administrative domain.

• Working with ClusterXL

This area will address your ability to describe what the ClusterXL technology entails and its benefits. In some instances, you may be asked to configure or install ClusterXL using a High Availability configuration and Load Sharing in ClusterXL.

• Managing User Access

To confirm if a learner can successfully manage user access, s/he will be expected to define user groups and user groups for their environments. Also, they should be well versed in managing user access for internal guests and users. The performance-based items that are derived from this topic will focus on user access and awareness connection of the test identity.

• Basic Concepts of VPN

This topic will confirm if you are familiar with the Check Point communities and VPN deployments. It also verifies your ability to interpret and analyze the VPN tunnel traffic. By successfully passing the Check Point 156-215.80 exam, you should also be able to configure a site to site VPN and Check Points Communities.

• Security Policy Management & Check Point Security Solutions

NO.113 Office mode means that:

 SecureID client assigns a routable MAC address. After the user authenticates for a tunnel, the VPN gateway assigns a routable IP address to the remote client.

 Users authenticate with an Internet browser and use secure HTTPS connection.

 Local ISP (Internet service Provider) assigns a non-routable IP address to the remote user.

 Allows a security gateway to assign a remote client an IP address. After the user authenticates for a tunnel, the VPN gateway assigns a routable IP address to the remote client.

Explanation
Office Mode enables a Security Gateway to assign internal IP addresses to SecureClient users. This IP address will not be exposed to the public network, but is encapsulated inside the VPN tunnel between the client and the Gateway. The IP to be used externally should be assigned to the client in the usual way by the Internet Service provider used for the Internet connection. This mode allows a Security Administrator to control which addresses are used by remote clients inside the local network and makes them part of the local network. The mechanism is based on an IKE protocol extension through which the Security Gateway can send an internal IP address to the client.
References:

NO.114 Assuming you have a Distributed Deployment, what will be the effect of running the following command on the Security Management Server?

 Remove the installed Security Policy.

 Remove the local ACL lists.

 No effect.

 Reset SIC on all gateways.

This command uninstall actual security policy (already installed)
Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_SecurityGatewayTech_WebAdmin/6751.htm

NO.115 Which of the following is NOT a role of the SmartCenter:

 Status monitoring

 Policy configuration

 Certificate authority

 Address translation

Explanation/Reference:
Reference:
www.checkfirewalls.com/datasheets/smartcenter_datasheet.pdf

NO.116 View the rule below. What does the lock-symbol in the left column mean? Select the BEST answer.

 The current administrator has read-only permissions to Threat Prevention Policy.

 Another user has locked the rule for editing.

 Configuration lock is present. Click the lock symbol to gain read-write access.

 The current administrator is logged in as read-only because someone else is editing the policy.

Administrator Collaboration
More than one administrator can connect to the Security Management Server at the same time. Every administrator has their own username, and works in a session that is independent of the other administrators.
When an administrator logs in to the Security Management Server through SmartConsole, a new editing session starts. The changes that the administrator makes during the session are only available to that administrator. Other administrators see a lock icon on object and rules that are being edited.
To make changes available to all administrators, and to unlock the objects and rules that are being edited, the administrator must publish the session.

NO.117 Match the following commands to their correct function. Each command has one function only listed.

 C1>F6; C2>F4; C3>F2; C4>F5

 C1>F2; C2>F1; C3>F6; C4>F4

 C1>F2; C2>F4; C3>F1; C4>F5

 C1>F4; C2>F6; C3>F3; C4>F5

NO.118 Check Point APIs allow system engineers and developers to make changes to their organization’s security policy with CLI tools and Web Services for all of the following except:

 Create new dashboards to manage 3rd party task

 Create products that use and enhance 3rd party solutions

 Execute automated scripts to perform common tasks

 Create products that use and enhance the Check Point Solution

Reference:
http://dl3.checkpoint.com/paid/29/29532b9eec50d0a947719ae631f640d0/
CP_R80_CheckPoint_API_ReferenceGuide.pdf?
HashKey=1517081623_70199443034f806cf2dd0a7ba15f201c&xtn=.pdf

NO.119 What is the purpose of the Clean-up Rule?

 To log all traffic that is not explicitly allowed or denied in the Rule Base

 To clean up policies found inconsistent with the compliance blade reports

 To remove all rules that could have a conflict with other rules in the database

 To eliminate duplicate log entries in the Security Gateway

These are basic access control rules we recommend for all Rule Bases:
* Stealth rule that prevents direct access to the Security Gateway.
* Cleanup rule that drops all traffic that is not allowed by the earlier rules.
There is also an implied rule that drops all traffic, but you can use the Cleanup rule to log the traffic.
Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Firewall_WebAdmin/92703.htm

NO.120 Which type of Endpoint Identity Agent includes packet tagging and computer authentication?

 Full

 Light

 Custom

 Complete

Explanation/Reference:
Endpoint Identity Agents – dedicated client agents installed on users’ computers that acquire and report identities to the Security Gateway.

NO.121 Which Identity Source(s) should be selected in Identity Awareness for when there is a requirement for a higher level of security for sensitive servers?

 AD Query

 Terminal Servers Endpoint Identity Agent

 Endpoint Identity Agent and Browser-Based Authentication

 RADIUS and Account Logon

Endpoint Identity Agents and Browser-Based Authentication – When a high level of security is necessary. The Captive Portal is used for distributing the Endpoint Identity Agent. IP Spoofing protection can be set to prevent packets from being IP spoofed.

NO.122 You want to establish a VPN, using certificates. Your VPN will exchange certificates with an external partner.
Which of the following activities sh you do first?

 Create a new logical-server object to represent your partner’s CA

 Exchange exported CA keys and use them to create a new server object to represent your partner’s Certificate Authority (CA)

 Manually import your partner’s Certificate Revocation List.

 Manually import your partner’s Access Control List.

NO.123 What does it mean if Bob gets this result on an object search? Refer to the image below. Choose the BEST answer.

 Search detailed is missing the subnet mask.

 There is no object on the database with that name or that IP address.

 There is no object on the database with that IP address.

 Object does not have a NAT IP address.

NO.124 ABC Corp., and have recently returned from a training course on Check Point’s new advanced R80 management platform. You are presenting an in-house R80 Management to the other administrators in ABC Corp.

How will you describe the new “Publish” button in R80 Management Console?

 The Publish button takes any changes an administrator has made in their management session, publishes a copy to the Check Point of R80, and then saves it to the R80 database.

 The Publish button takes any changes an administrator has made in their management session and publishes a copy to the Check Point Cloud of R80 and but does not save it to the R80

 The Publish button makes any changes an administrator has made in their management session visible to all other administrator sessions and saves it to the Database.

 The Publish button makes any changes an administrator has made in their management session visible to the new Unified Policy session and saves it to the Database.

Explanation/Reference:
Explanation:
To make your changes available to other administrators, and to save the database before installing a policy, you must publish the session. When you publish a session, a new database version is created.
Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm?topic=documents/R80/CP_R80_SecMGMT/126197

NO.125 You are about to integrate RSA SecurID users into the Check Point infrastructure. What kind of users are to be defined via SmartDashboard?

 A group with generic user

 All users

 LDAP Account Unit Group

 Internal user Group

Explanation/Reference:

NO.126 Fill in the blank: A(n) _____ rule is created by an administrator and is located before the first and before last
rules in the Rule Base.

 Firewall drop

 Explicit

 Implicit accept

 Implicit drop

 Implied

Explanation
This is the order that rules are enforced:

NO.127 Which of the following is an identity acquisition method that allows a Security Gateway to identify Active Directory users and computers?

 UserCheck

 Active Directory Query

 Account Unit Query

 User Directory Query

Explanation/Reference:
Explanation :
AD Query extracts user and computer identity information from the Active Directory Security Event Logs.
The system generates a Security Event log entry when a user or computer accesses a network resource.
For example, this occurs when a user logs in, unlocks a screen, or accesses a network drive.
Reference : https://sc1.checkpoint.com/documents/R76/CP_R76_IdentityAwareness_AdminGuide/62402.htm

NO.128 Which Threat Prevention Software Blade provides comprehensive against malicious and unwanted network traffic, focusing on application and server vulnerabilities?

 Anti-Virus

 IPS

 Anti-Spam

 Anti-bot

Explanation/Reference:
Explanation: The IPS Software Blade provides a complete Intrusion Prevention System security solution, providing comprehensive network protection against malicious and unwanted network traffic, including:
Malware attacks

Dos and DDoS attacks

Application and server vulnerabilities

Insider threats

Unwanted application traffic, including IM and P2P

Reference: https://www.checkpoint.com/products/ips-software-blade/

NO.129 Which type of the Check Point license ties the package license to the IP address of the Security Management Server?

 Local

 Central

 Corporate

 Formal

NO.130 Which VPN routing option uses VPN routing for every connection a satellite gateway handles?

 To satellites through center only

 To center only

 To center and to other satellites through center

 To center, or through the center to other satellites, to internet and other VPN targets

Explanation
On the VPN Routing page, enable the VPN routing for satellites section, by selecting one of these options:

NO.131 The most important part of a site-to-site VPN deployment is the ________ .

 Internet

 Remote users

 Encrypted VPN tunnel

 VPN gateways

Site to Site VPN
The basis of Site to Site VPN is the encrypted VPN tunnel. Two Security Gateways negotiate a link and create a VPN tunnel and each tunnel can contain more than one VPN connection. One Security Gateway can maintain more than one VPN tunnel at the same time.
Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Firewall_WebAdmin/92709.htm

NO.132 Ken wants to obtain a configuration lock from other administrator on R80 Security Management Server. He can do this via WebUI or a via CLI. Which command should be use in CLI? Choose the correct answer.

 remove database lock

 The database feature has one command lock database override.

 override database lock

 The database feature has two commands: lock database override and unlock database. Both will work.

Explanation/Reference:
Explanation: Use the database feature to obtain the configuration lock. The database feature has two commands:
lock database [override].

unlock database

The commands do the same thing: obtain the configuration lock from another administrator.

Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Gaia_WebAdmin/75697.htm#o73091

NO.133 Which of the following Windows Security Events will NOT map a username to an IP address in Identity
Awareness?

 Kerberos Ticket Renewed

 Kerberos Ticket Requested

 Account Logon

 Kerberos Ticket Timed Out

 Loading …

Ideal Audience

The Check Point Certified Security Administrator (CCSA) certificate targets administrators tasked with managing and maintaining the day to day operations of the Check Point systems and products. Thus, it is the most suitable option for the following groups:

• Firewall Analysts;
• Security Managers;
• All individuals eyeing the CCSA certification.
• System Administrators;
• Network Engineers;

156-215.80 Real Exam Questions and Answers FREE: https://www.trainingdump.com/CheckPoint/156-215.80-practice-exam-dumps.html