156-215.80 Check-Point Exam Questions and Free Practice Test

Question 55

- (Exam Topic 2)
Your manager requires you to setup a VPN to a new business partner site. The administrator from the partner site gives you his VPN settings and you notice that he setup AES 128 for IKE phase 1 and AES 256 for IKE phase 2. Why is this a problematic setup?

A. The two algorithms do not have the same key length and so don't work togethe

B. You will get the error… No proposal chosen…

C. All is fine as the longest key length has been chosen for encrypting the data and a shorter key length for higher performance for setting up the tunnel.

D. Only 128 bit keys are used for phase 1 keys which are protecting phase 2, so the longer key length in phase 2 only costs performance and does not add security due to a shorter key in phase 1.

E. All is fine and can be used as is.

Correct Answer:C

Question 56

- (Exam Topic 3)
Identify the API that is not supported by Check Point currently.

A. R80 Management API-

B. Identity Awareness Web Services API

C. Open REST API

D. OPSEC SDK

Correct Answer:C

Question 57

- (Exam Topic 1)
Which Check Point feature enables application scanning and the detection?

A. Application Dictionary

B. AppWiki

C. Application Library

D. CPApp

Correct Answer:B
AppWiki Application Classification Library
AppWiki enables application scanning and detection of more than 5,000 distinct applications and over 300,000 Web 2.0 widgets including instant messaging, social networking, video streaming, VoIP, games and more.

Question 58

- (Exam Topic 3)
Which limitation of CoreXL is overcome by using (mitigated by) Multi-Queue?

A. There is no traffic queue to be handled

B. Several NICs can use one traffic queue by one CPU

C. Each NIC has several traffic queues that are handled by multiple CPU cores

D. Each NIC has one traffic queue that is handled by one CPU

Correct Answer:C

Question 59

- (Exam Topic 1)
What are the three authentication methods for SIC?

A. Passwords, Users, and standards-based SSL for the creation of security channels

B. Certificates, standards-based SSL for the creation of secure channels, and 3DES or AES128 for encryption

C. Packet Filtering, certificates, and 3DES or AES128 for encryption

D. Certificates, Passwords, and Tokens

Correct Answer:B
Secure Internal Communication (SIC)
Secure Internal Communication (SIC) lets Check Point platforms and products authenticate with each other. The SIC procedure creates a trusted status between gateways, management servers and other Check Point components. SIC is required to install polices on gateways and to send logs between gateways and management servers.
These security measures make sure of the safety of SIC:
Certificates for authentication
Standards-based SSL for the creation of the secure channel
3DES for encryption
References:

Question 60

- (Exam Topic 1)
In which deployment is the security management server and Security Gateway installed on the same appliance?

A. Bridge Mode

B. Remote

C. Standalone

D. Distributed

Correct Answer:C
Installing Standalone
Standalone Deployment - The Security Management Server and the Security Gateway are installed on the same computer or appliance.
156-215.80 dumps exhibit

START 156-215.80 EXAM