[Q202-Q224] 100% Passing Guarantee - Brilliant 156-315.81.20 Exam Questions PDF [Dec-2024]

100% Passing Guarantee - Brilliant 156-315.81.20 Exam Questions PDF [Dec-2024]

156-315.81.20 Dumps 2024 - NewCheckPoint 156-315.81.20 Exam Questions

NEW QUESTION # 202
Fill in the blanks: A _______ license requires an administrator to designate a gateway for attachment whereas a ________ license is automatically attached to a Security Gateway.

A. Local; formal
B. Local; central
C. Central; local
D. Formal; corporate

Answer: C

NEW QUESTION # 203
Which of the following is NOT a valid type of SecureXL template?

A. Deny template
B. NAT Template
C. Drop Template
D. Accept Template

Answer: A

NEW QUESTION # 204
There are two R77.30 Security Gateways in the Firewall Cluster. They are named FW_A and FW_B.
The cluster is configured to work as HA (High availability) with default cluster configuration. FW_A is configured to have higher priority than FW_B. FW_A was active and processing the traffic in the morning. FW_B was standby. Around 1100 am, its interfaces went down and this caused a failover. FW_B became active. After an hour, FW_A's interface issues were resolved and it became operational.
When it re-joins the cluster, will it become active automatically?

A. Yes, since 'Switch to higher priority cluster member' option is enabled by default on the Global Properties.
B. No, since 'maintain' current active cluster member' option is enabled by default on the Global Properties.
C. No, since 'maintain' current active cluster member' option on the cluster object properties is enabled by default.
D. Yes, since 'Switch to higher priority cluster member' option on the cluster object properties is enabled by default.

Answer: C

NEW QUESTION # 205
SmartConsole R81 x requires the following ports to be open for SmartEvent.

A. 18190 & 443
B. 19009, 19004 & 18190
C. 19009, 18190 & 443
D. 19009, 19090 & 443

Answer: C

NEW QUESTION # 206
What needs to be configured if the NAT property 'Translate destination or client side' is not enabled in Global Properties?

A. Nothing, the Gateway takes care of all details necessary.
B. Use the file local.arp to add the ARP entries for NAT to work.
C. Enabling 'Allow bi-directional NAT' for NAT to work correctly.
D. A host route to route to the destination IP.

Answer: A

NEW QUESTION # 207
What is the command to check the status of Check Point processes?

A. cptop
B. top
C. cphaprob list
D. cpwd_admin list

Answer: D

NEW QUESTION # 208
What is mandatory for ClusterXL to work properly?

A. The Magic MAC number must be unique per cluster node
B. The Sync interface must not have an IP address configured
C. The number of cores must be the same on every participating cluster node
D. If you have "Non-monitored Private" interfaces, the number of those interfaces must be the same on all cluster members

Answer: A

NEW QUESTION # 209
You are working with multiple Security Gateways enforcing an extensive number of rules.
To simplify security administration, which action would you choose?

A. Eliminate all possible contradictory rules such as the Stealth or Cleanup rules.
B. Create a separate Security Policy package for each remote Security Gateway.
C. Create network objects that restricts all applicable rules to only certain networks.
D. Run separate SmartConsole instances to login and configure each Security Gateway directly.

Answer: B

NEW QUESTION # 210
Using Threat Emulation technologies, what is the best way to block .exe and .bat file types?

A. create FW rule for particular protocol
B. enable DLP and select.exe and .bat file type
C. enable .exe & .bat protection in IPS Policy
D. tecli advanced attributes set prohibited_file_types exe.bat

Answer: B

NEW QUESTION # 211
John is using Management HA.
Which Smartcenter should be connected to for making changes?

A. primary Smartcenter
B. connect virtual IP of Smartcenter HA
C. secondary Smartcenter
D. active Smartenter

Answer: D

NEW QUESTION # 212
Identity Awareness lets an administrator easily configure network access and auditing based on three items. Choose the correct statement.

A. Geographical location, the identity of a user and the identity of a machine.
B. Network location, the telephone number of a user and the UID of a machine.
C. Network location, the identity of a user and the active directory membership.
D. Network location, the identity of a user and the identity of a machine.

Answer: D

NEW QUESTION # 213
You have used the "set inactivity-timeout 120" command to prevent the session to be disconnected after 10 minutes of inactivity. However, the Web session is being disconnected after 10 minutes.
Why?

A. The idle timeout for the web session is specified with the "set web session-timeout" command.
B. The number specified is the amount of the idle timeout in seconds rather than in minutes. So you have to use the command "set inactivity-timeout 600" instead.
C. The number of minutes is correct. Probably, you have forgotten to save this setting with the "save config" command.
D. Probably, you have forgotten to make sure that nobody is accessing the management server via the SmartConsole which locks the management database.

Answer: A

NEW QUESTION # 214
Ken wants to obtain a configuration lock from other administrator on R81 Security Management Server. He can do this via WebUI or via CLI.
Which command should he use in CLI? (Choose the correct answer.)

A. override database lock
B. The database feature has two commands lock database override and unlock database. Both will work.
C. The database feature has one command lock database override.
D. remove database lock

Answer: B

NEW QUESTION # 215
In terms of Order Rule Enforcement, when a packet arrives at the gateway, the gateway checks it against the rules in the top Policy Layer, sequentially from top to bottom.
Which of the following statements is correct?

A. If the rule does not match in the Network policy it will continue to other enabled polices
B. If the Action of the matching rule is Drop the gateway stops matching against later rules in the Policy Rule Base and drops the packet
C. If the Action of the matching rule is Accept the gateway will drop the packet
D. If the Action of the matching rule is Drop, the gateway continues to check rules in the next Policy Layer down

Answer: B

NEW QUESTION # 216
You have existing dbedit scripts from R77. Can you use them with R81.20?

A. dbedit is not supported in R81.20
B. dbedit scripts are being replaced by mgmt_cli in R81.20
C. You can use dbedit to modify threat prevention or access policies, but not create or modify layers
D. dbedit is fully supported in R81.20

Answer: B

NEW QUESTION # 217
How many layers make up the TCP/IP model?

A. 0
B. 1
C. 2
D. 3

Answer: A

NEW QUESTION # 218
Which process is used mainly for backward compatibility of gateways in R81.X? It provides communication with GUI-client, database manipulation, policy compilation and Management HA synchronization.

A. fwd
B. cpd
C. cpm
D. fwm

Answer: D

NEW QUESTION # 219
What does the Log "Views" tab show when SmartEvent is Correlating events?

A. Top events with charts and graphs
B. Details of a selected logs
C. A list of common reports
D. Reports for customization

Answer: B

NEW QUESTION # 220
What should the admin do in case the Primary Management Server is temporary down?

A. The Secondary will take over automatically Change the IP in SmartConsole to logon to the private IP of the Secondary Management Server.
B. Logon with SmartConsole to the Secondary Management Server and choose "Make Active' under Actions in the HA Management Menu
C. Run the 'promote_util' to activate the Secondary Management server
D. Use the VIP in SmartConsole you always reach the active Management Server.

Answer: D

NEW QUESTION # 221
Fill in the blank: An identity server uses a __________ for user authentication.