Check Point Certified Security Administrator R81.20 (156-215.81.20) Free Practice Test

Question 1

What is the order of NAT priorities?

A. IP pool NAT static NAT. hide NAT

B. Static NAT, IP pool NAT hide NAT

C. Static NAT automatic NAT hide NAT

D. Static NAT hide NAT, IP pool NAT

Correct Answer: B

Question 2

If there are two administrators logged in at the same time to the SmartConsole, and there are objects locked for editing, what must be done to make them available to other administrators? Choose the BEST answer

A. Save and install the Policy

B. Delete older versions of database

C. Publish or discard the session

D. Revert the session.

Correct Answer: C

Question 3

The "Hit count" feature allows tracking the number of connections that each rule matches.
Will the Hit count feature work independently from logging and Track the hits even if the Track option is set to "None"?

A. No, it will not work independently because hit count requires all rules to be logged

B. No, it will not work independently. Hit Count will be shown only for rules with Track options set as Log or alert

C. Yes, it will work independently as long as "analyze all rules" tick box is enabled on the Security Gateway

D. Yes, it will work independently because when you enable Hit Count, the SMS collects the data from supported Security Gateways

Correct Answer: D

Question 4

What Check Point technologies deny or permit network traffic?

A. Application Control, DLP

B. ACL, SandBlast, MPT

C. Packet Filtering, Stateful Inspection, Application Layer Firewall.

D. IPS, Mobile Threat Protection

Correct Answer: C

Question 5

What is the user ID of a user that have all the privileges of a root user?

A. User ID 2

B. User ID 99

C. User ID 0

D. User ID 1

Correct Answer: C

Question 6

Phase 1 of the two-phase negotiation process conducted by IKE operates in ______ mode.

A. Main

B. Authentication

C. High Alert

D. Quick

Correct Answer: A

Question 7

Secure Internal Communication (SIC) is handled by what process?

A. HTTPS

B. CPD

C. CPM

D. FWD

Correct Answer: B

Question 8

When an Admin logs into SmartConsole and sees a lock icon on a gateway object and cannot edit that object, what does that indicate?

A. The gateway is not powered on.

B. Incorrect routing to reach the gateway.

C. The Admin would need to login to Read-Only mode

D. Another Admin has made an edit to that object and has yet to publish the change.

Correct Answer: D

Question 9

Which Threat Prevention Software Blade provides protection from malicious software that can infect your network computers? (Choose the best answer.)

A. Anti-Malware

B. Anti-Virus

C. IPS

D. Content Awareness

Correct Answer: B

Question 10

The SIC Status "Unknown" means

A. There is connection between the gateway and Security Management Server but it is not trusted.

B. The secure communication is established.

C. The Security Management Server can contact the gateway, but cannot establish SIC.

D. There is no connection between the gateway and Security Management Server.

Correct Answer: D

Question 11

Fill in the blank: Back up and restores can be accomplished through_________.

A. SmartConsole, WebUI, or CLI

B. WebUI, CLI, or SmartUpdate

C. SmartUpdate, SmartBackup, or SmartConsole

D. CLI, SmartUpdate, or SmartBackup

Correct Answer: A

Question 12

Which of the following statements about Site-to-Site VPN Domain-based is NOT true?

A. Domain-based- VPN domains are pre-defined for all VPN Gateways. A VPN domain is a host or network that can send or receive VPN traffic through a VPN Gateway.

B. Domain-based- VPN domains are pre-defined for all VPN Gateways. When the Security Gateway encounters traffic originating from one VPN Domain with the destination to a VPN Domain of another VPN Gateway, that traffic is identified as VPN traffic and is sent through the VPN Tunnel between the two Gateways.

C. Route-based- The Security Gateways will have a Virtual Tunnel Interface (VTI) for each VPN Tunnel with a peer VPN Gateway. The Routing Table can have routes to forward traffic to these VTls. Any traffic routed through a VTI is automatically identified as VPN Traffic and is passed through the VPN Tunnel associated with the VTI.

D. Domain-based- VPN domains are pre-defined for all VPN Gateways. A VPN domain is a service or user that can send or receive VPN traffic through a VPN Gateway.

Correct Answer: D

Question 13

When using Automatic Hide NAT, what is enabled by default?

A. Static Route

B. HTTPS Inspection

C. Static NAT

D. Source Port Address Translation (PAT)

Correct Answer: D

Question 14

Which message indicates IKE Phase 2 has completed successfully?

A. Main Mode Complete

B. IKE Mode Complete

C. Aggressive Mode Complete

D. Quick Mode Complete

Correct Answer: D

Welcome to TestSimulate

CheckPoint Check Point Certified Security Administrator R81.20 (156-215.81.20) Free Practice Test