Check Point Certified Security Expert - R81.20 (156-315.81.20) Free Practice Test

Question 1

What two ordered layers make up the Access Control Policy Layer?

A. Application Control and URL Filtering

B. Network and Threat Prevention

C. URL Filtering and Network

D. Network and Application Control

Correct Answer: D

Question 2

What are valid authentication methods for mutual authenticating the VPN gateways?

A. Pre-Shared Secrets and Kerberos Ticket

B. Pre-shared Secret and PKI Certificates

C. PKI Certificates and DynamicID OTP

D. PKI Certificates and Kerberos Tickets

Correct Answer: B

Question 3

Check Point security components are divided into the following components:

A. Security Management, Security Gateway, Consolidate Security Logs

B. GUI Client, Security Management, Security Gateway

C. GUI Client, Security Gateway, WebUI Interface

D. Security Gateway, WebUI Interface, Consolidated Security Logs

Correct Answer: B

Question 4

Vanessa is firewall administrator in her company. Her company is using Check Point firewall on a central and several remote locations which are managed centrally by R77.30 Security Management Server. On central location is installed R77.30 Gateway on Open server. Remote locations are using Check Point UTM-1570 series appliances with R75.30 and some of them are using a UTM-1-Edge-X or Edge-W with latest available firmware. She is in process of migrating to R81.
What can cause Vanessa unnecessary problems, if she didn't check all requirements for migration to R81?

A. Unsupported version on UTM-1 570 series appliance

B. Unsupported appliances on remote locations

C. Missing an installed R77.20 Add-on on Security Management Server

D. Unsupported firmware on UTM-1 Edge-W appliance

Correct Answer: C

Question 5

Please choose correct command to add an "emailserver1" host with IP address 10.50.23.90 using GAiA management CLI?

A. add host name emailserver1 ip-address 10.50.23.90

B. host name myHost12 ip-address 10.50.23.90

C. mgmt: add host name emailserver1 ip-address 10.50.23.90

D. mgmt: add host name ip-address 10.50.23.90

Correct Answer: C

Question 6

What is the command switch to specify the Gaia API context?

A. mgmt_cli --context gaia_api <Command>

B. No need to specify a context, since it defaults to the Gaia API context.

C. You have to specify it in the YAML file api.yml which is located underneath the /etc. directory of the security management server

D. You have to change to the zsh-Shell which defaults to the Gaia API context.

Correct Answer: A

Question 7

What is required for a certificate-based VPN tunnel between two gateways with separate management systems?

A. Shared User Certificates

B. Shared Secret Passwords

C. Unique Passwords

D. Mutually Trusted Certificate Authorities

Correct Answer: D

Question 8

Identify the API that is not supported by Check Point currently.

A. OPSEC SDK

B. Open REST API

C. Identity Awareness Web Services API

D. R81 Management API-

Correct Answer: B

Question 9

In which deployment is the security management server and Security Gateway installed on the same appliance?

A. Standalone

B. Remote

C. Bridge Mode

D. Distributed

Correct Answer: A

Question 10

Which directory below contains log files?

A. /opt/CPSmartlog-R81/log

B. /opt/CPsuite-R81/fw1/log

C. /opt/CPshrd-R81/log

D. /opt/CPsuite-R81/log

Correct Answer: B

Question 11

Can multiple administrators connect to a Security Management Server at the same time?

A. No, only one can be connected

B. Yes, but only one has the right to write.

C. Yes, every administrator has their own username, and works in a session that is independent of other administrators.

D. Yes, all administrators can modify a network object at the same time

Correct Answer: C

Question 12

Alice & Bob are going to deploy Management Data Plane Separation (MDPS) for all their Check Point Security Gateway(s)/Cluster(s).
Which of the following statement is true?

A. Management Plane - To access, provision and monitor the Security Gateway

B. Data Plane - To access, provision and monitor the Security Gateway

C. Management Plane - for all other network traffic and processing

D. Each network environment is dependent and includes interfaces, routes, sockets, and processes

Correct Answer: A

Welcome to TestSimulate

CheckPoint Check Point Certified Security Expert - R81.20 (156-315.81.20) Free Practice Test