Check Point Certified Security Administrator R80 (156-215.80) Free Practice Test

Question 1

Which of the following are available SmartConsole clients which can be installed from the R77 Windows CD?
Read all answers and select the most complete and valid list.

A. SmartView Tracker, SmartDashboard, SmartLSM, SmartView Monitor

B. SmartView Tracker, SmartDashboard, CPINFO, SmartUpdate, SmartView Status

C. SmartView Tracker, CPINFO, SmartUpdate

D. Security Policy Editor, Log Viewer, Real Time Monitor GUI

Correct Answer: C

Question 2

When should you generate new licenses?

A. After a device upgrade.

B. Before installing contract files.

C. Only when the license is upgraded.

D. When the existing license expires, license is upgraded or the IP-address associated with the license changes.

Correct Answer: A

Question 3

Which deployment adds a Security Gateway to an existing environment without changing IP routing?

A. Standalone

B. Remote

C. Bridge Mode

D. Distributed

Correct Answer: C

Question 4

What is the purpose of the Clean-up Rule?

A. To eliminate duplicate log entries in the Security Gateway

B. To remove all rules that could have a conflict with other rules in the database

C. To clean up policies found inconsistent with the compliance blade reports

D. To log all traffic that is not explicitly allowed or denied in the Rule Base

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

Which configuration element determines which traffic should be encrypted into a VPN tunnel vs. sent in the clear?

A. The Rule Base

B. NAT Rules

C. The firewall topologies

D. The VPN Domains

Correct Answer: A

Question 6

DLP and Geo Policy are examples of what type of Policy?

A. Shared Policies

B. Standard Policies

C. Inspection Policies

D. Unified Policies

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 7

What are the steps to configure the HTTPS Inspection Policy?

A. Go to Application&url filtering blade > Advanced > Https Inspection > Policy

B. Go to Manage&Settings > Blades > HTTPS Inspection > Configure in SmartDashboard

C. Go to Application&url filtering blade > Https Inspection > Policy

D. Go to Manage&Settings > Blades > HTTPS Inspection > Policy

Correct Answer: D

Question 8

When doing a Stand-Alone Installation, you would install the Security Management Server with which other Check Point architecture component?

A. SecureClient

B. None, Security Management Server would be installed by itself.

C. SmartConsole

D. SmartEvent

Correct Answer: D

Question 9

Which of the following is NOT an option for internal network definition of Anti-spoofing?

A. Not-defined

B. Network defined by the interface IP and Net Mask

C. Route-based - derived from gateway routing table

D. Specific - derived from a selected object

Correct Answer: C

Question 10

In the Check Point three-tiered architecture, which of the following is NOT a function of the Security Management Server (Security Management Server)?

A. Display policies and logs on the administrator's workstation.

B. Store firewall logs to hard drive storage.

C. Processing and sending alerts such as SNMP traps and email notifications.

D. Verify and compile Security Policies.

Correct Answer: A

Question 11

You work as a security administrator for a large company. CSO of your company has attended a security conference where he has learnt how hackers constantly modify their strategies and techniques to evade detection and reach corporate resources. He wants to make sure that his company has the right protections in place. Check Point has been selected for the security vendor. Which Check Point products protects BEST against malware and zero-day attacks while ensuring quick delivery of safe content to your users?

A. IPS, anti-virus and anti-bot

B. IPS and Application Control

C. IPS, anti-virus and e-mail security

D. SandBlast

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 12

Fill in the blank: Permanent VPN tunnels can be set on all tunnels in the community, on all tunnels for specific gateways, or__________.

A. On specific tunnels in the community

B. On all satellite gateway to satellite gateway tunnels

C. On specific tunnels for specific gateways

D. On specific satellite gateway to central gateway tunnels

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Welcome to TestSimulate

CheckPoint Check Point Certified Security Administrator R80 (156-215.80) Free Practice Test