156-215.80 Check-Point Exam Questions and Free Practice Test

Question 61

- (Exam Topic 2)
When using LDAP as an authentication method for Identity Awareness, the query:

A. Requires client and server side software.

B. Prompts the user to enter credentials.

C. Requires administrators to specifically allow LDAP traffic to and from the LDAP Server and the Security Gateway.

D. Is transparent, requiring no client or server side software, or client intervention.

Correct Answer:D

Question 62

- (Exam Topic 4)
Which configuration element determines which traffic should be encrypted into a VPN tunnel vs. sent in the clear?

A. The firewall topologies

B. NAT Rules

C. The Rule Base

D. The VPN Domains

Correct Answer:C

Question 63

- (Exam Topic 1)
What will be the effect of running the following command on the Security Management Server?
156-215.80 dumps exhibit

A. Remove the installed Security Policy.

B. Remove the local ACL lists.

C. No effect.

D. Reset SIC on all gateways.

Correct Answer:A
This command uninstall actual security policy (already installed) References:

Question 64

- (Exam Topic 3)
You want to establish a VPN, using certificates. Your VPN will exchange certificates with an external partner. Which of the following activities sh you do first?

A. Create a new logical-server object to represent your partner's CA

B. Exchange exported CA keys and use them to create a new server object to represent your partner's Certificate Authority (CA)

C. Manually import your partner's Certificate Revocation List.

D. Manually import your partner's Access Control List.

Correct Answer:B

Question 65

- (Exam Topic 2)
Fill in the blank: Licenses can be added to the License and Contract repository _____.

A. From the User Center, from a file, or manually

B. From a file, manually, or from SmartView Monitor

C. Manually, from SmartView Monitor, or from the User Center

D. From SmartView Monitor, from the User Center, or from a file

Correct Answer:A

Question 66

- (Exam Topic 2)
On the following picture an administrator configures Identity Awareness:
156-215.80 dumps exhibit
After clicking “Next” the above configuration is supported by:

A. Kerberos SSO which will be working for Active Directory integration

B. Based on Active Directory integration which allows the Security Gateway to correlate Active Directory users and machines to IP addresses in a method that is completely transparent to the user

C. Obligatory usage of Captive Portal

D. The ports 443 or 80 what will be used by Browser-Based and configured Authentication

Correct Answer:B
To enable Identity Awareness:
Log in to R80 SmartConsole.
From the Awareness.
Gateway&s
Servers
view, double-click the Security Gateway on which to enable Identity
On the Network Security tab, select Identity Awareness.
The Identity Awareness
Configuration wizard opens.
Select one or more options. These options set the methods for acquiring identities of managed and unmanaged assets.
AD Query - Lets the Security Gateway seamlessly identify Active Directory users and computers
Browser-Based Authentication - Sends users to a Web page to acquire identities from unidentified users. If Transparent Kerberos Authentication is configured, AD users may be identified transparently.
Terminal Servers - Identify users in a Terminal Server environment (originating from one IP address).

START 156-215.80 EXAM