156-215.81 CheckPoint Exam Questions and Free Practice Test

Question 25

Which of the following cannot be configured in an Access Role Object?

A. Networks

B. Users

C. Time

D. Machines

Correct Answer:C
Access Role objects includes one or more of these objects: Networks.
Users and user groups. Computers and computer groups. Remote Access Clients.
https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_IdentityAwareness_AdminGuide/T

Question 26

Which of these is NOT a feature or benefit of Application Control?

A. Eliminate unknown and unwanted applications in your network to reduce IT complexity and application risk.

B. Identify and control which applications are in your IT environment and which to add to the IT environment.

C. Scans the content of files being downloaded by users in order to make policy decisions.

D. Automatically identify trusted software that has authorization to run

Correct Answer:C
File scanning is a job for ThreatCloud and it sandboxes/scrubs files.

Question 27

Which of the following is NOT a valid deployment option for R80?

A. All-in-one (stand-alone)

B. Log server

C. SmartEvent

D. Multi-domain management server

Correct Answer:D

Question 28

When an encrypted packet is decrypted, where does this happen?

A. Security policy

B. Inbound chain

C. Outbound chain

D. Decryption is not supported

Correct Answer:A

Question 29

Your internal networks 10.1.1.0/24, 10.2.2.0/24 and 192.168.0.0/16 are behind the Internet Security Gateway. Considering that Layer 2 and Layer 3 setup is correct, what are the steps you will need to do in SmartConsole in order to get the connection working?

A. 1. Define an accept rule in Security Policy.2. Define Security Gateway to hide all internal networks behind the gateway’s external IP.3. Publish and install the policy.

B. 1. Define an accept rule in Security Policy.2. Define automatic NAT for each network to NAT the networks behind a public IP.3. Publish the policy.

C. 1. Define an accept rule in Security Policy.2. Define automatic NAT for each network to NAT the networks behind a public IP.3. Publish and install the policy.

D. 1. Define an accept rule in Security Policy.2. Define Security Gateway to hide all internal networks behind the gateway’s external IP.3. Publish the policy.

Correct Answer:C

Question 30

URL Filtering cannot be used to:

A. Control Bandwidth issues

B. Control Data Security

C. Improve organizational security

D. Decrease legal liability

Correct Answer:D
https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_SecurityManagement_AdminGuide

START 156-215.81 EXAM