156-215.80 Check-Point Exam Questions and Free Practice Test

Question 97

- (Exam Topic 1)
Fill in the blank: The tool ____ generates a R80 Security Gateway configuration report.

A. infoCP

B. infoview

C. cpinfo

D. fw cpinfo

Correct Answer:C
CPInfo is an auto-updatable utility that collects diagnostics data on a customer's machine at the time of execution and uploads it to Check Point servers (it replaces the standalone cp_uploader utility for uploading files to Check Point servers).
The CPinfo output file allows analyzing customer setups from a remote location. Check Point support engineers can open the CPinfo file in a demo mode, while viewing actual customer Security Policies and Objects. This allows the in-depth analysis of customer's configuration and environment settings.
When contacting Check Point Support, collect the cpinfo files from the Security Management server and Security Gateways involved in your case.

Question 98

- (Exam Topic 4)
Which identity Source(s) should be selected in Identity Awareness for when there is a requirement for a higher level of security for sensitive servers?

A. ADQuery

B. Terminal Servers Endpoint Identity Agent

C. Endpoint Identity Agent and Browser-Based Authentication

D. RADIUS and Account Logon

Correct Answer:D

Question 99

- (Exam Topic 2)
Message digests use which of the following?

A. DES and RC4

B. IDEA and RC4

C. SSL and MD4

D. SHA-1 and MD5

Correct Answer:D

Question 100

- (Exam Topic 1)
When attempting to start a VPN tunnel, in the logs the error 'no proposal chosen' is seen numerous times. No other VPN-related log entries are present. Which phase of the VPN negotiations has failed?

A. IKE Phase 1

B. IPSEC Phase 2

C. IPSEC Phase 1

D. IKE Phase 2

Correct Answer:D

Question 101

- (Exam Topic 3)
Which the following type of authentication on Mobile Access can NOT be used as the first authentication method?

A. Dynamic ID

B. RADIUS

C. Username and Password

D. Certificate

Correct Answer:A

Question 102

- (Exam Topic 4)
What is the purpose of the Clean-up Rule?

A. To log all traffic that is not explicitly allowed or denied in the Rule Base.

B. To clean up policies found inconsistent with the compliance blade reports.

C. To remove all rules that could have a conflict with other rules in the database.

D. To eliminate duplicate log entries in the Security Gateway

Correct Answer:A

START 156-215.80 EXAM