156-215.80 Exam Dumps | To enforce the Security Policy correctly, a Security Gateway requires:

<< Prev Question Next Question >>

Question 17/257

To enforce the Security Policy correctly, a Security Gateway requires:

A. a routing table

B. awareness of the network topology

C. a Demilitarized Zone

D. a Security Policy install

Question List (257q): Question 1: You are the Security Administrator for MegaCorp. In order to...; Question 2: A Cleanup rule:; Question 3: Consider the Global Properties following settings: (Exhibit)...; Question 4: Fill in the blank: Authentication rules are defined for ____...; Question 5: Which deployment adds a Security Gateway to an existing envi...; Question 6: Which command shows the installed licenses?...; Question 7: The Network Operations Center administrator needs access to ...; Question 8: Which of the following statements accurately describes the c...; Question 9: Can a Check Point gateway translate both source IP address a...; Question 10: What does the "unknown" SIC status shown on SmartConsole mea...; Question 11: Which of the following is NOT a back up method?...; Question 12: Which of the following is NOT supported by Bridge Mode Check...; Question 13: Your bank's distributed R77 installation has Security Gatewa...; Question 14: You believe Phase 2 negotiations are failing while you are a...; Question 15: The security Gateway is installed on GAiA R80 The default po...; Question 16: Sally has a Hot Fix Accumulator (HFA) she wants to install o...; Question 17: To enforce the Security Policy correctly, a Security Gateway...; Question 18: Which of the following is used to initially create trust bet...; Question 19: You are about to test some rule and object changes suggested...; Question 20: At what point is the Internal Certificate Authority (ICA) cr...; Question 21: What are the three essential components of the Check Point S...; Question 22: Which option, when applied to a rule, allows traffic to VPN ...; Question 23: Which of the following is NOT an option for internal network...; Question 24: What will be the effect of running the following command on ...; Question 25: What Identity Agent allows packet tagging and computer authe...; Question 26: Which of the following is a hash algorithm?...; Question 27: What is the most complete definition of the difference betwe...; Question 28: Look at the following screenshot and select the BEST answer....; Question 29: When connected to the Check Point R80 Management Server usin...; Question 30: What are the three types of UserCheck messages?...; Question 31: How are the backups stored in Check Point appliances?...; Question 32: CPU-level of your Security gateway is peaking to 100% causin...; Question 33: AdminA and AdminB are both logged in on SmartConsole. What d...; Question 34: Message digests use which of the following?...; Question 35: Which Check Point software blade monitors Check Point device...; Question 36: You find that Users are not prompted for authentication when...; Question 37: Which of the following is NOT a VPN routing option available...; Question 38: Fill in the blank: Gaia can be configured using the _______ ...; Question 39: During the Check Point Stateful Inspection Process, for pack...; Question 40: What port is used for delivering logs from the gateway to th...; Question 41: The ______ software blade package uses CPU-level and OS-leve...; Question 42: In which scenario is it a valid option to transfer a license...; Question 43: Which two Identity Awareness commands are used to support id...; Question 44: You want to establish a VPN, using certificates. Your VPN wi...; Question 45: DLP and Geo Policy are examples of what type of Policy?...; Question 46: Identify the API that is not supported by Check Point curren...; Question 47: What component of R80 Management is used for indexing?...; Question 48: Which Check Point feature enables application scanning and t...; Question 49: On the following graphic, you will find layers of policies. ...; Question 50: John is using Management HA. Which Smartcenter should be con...; Question 51: Which one of the following is the preferred licensing model?...; Question 52: Tom has been tasked to install Check Point R80 in a distribu...; Question 53: What happens when you run the command: fw sam -J src [Source...; Question 54: You have successfully backed up your Check Point configurati...; Question 55: Which feature is NOT provided by all Check Point Mobile Acce...; Question 56: What is the purpose of Captive Portal?...; Question 57: What are the three deployment considerations for a secure ne...; Question 58: When doing a Stand-Alone Installation, you would install the...; Question 59: Which options are given on features, when editing a Role on ...; Question 60: Access roles allow the firewall administrator to configure n...; Question 61: Which tool provides a list of trusted files to the administr...; Question 62: View the rule below. What does the lock-symbol in the left c...; Question 63: ABC Corp., and have recently returned from a training course...; Question 64: You are the administrator for Alpha Corp. You have logged in...; Question 65: Fill in the blank: Licenses can be added to the License and ...; Question 66: Fill in the blank: A _________ VPN deployment is used to pro...; Question 67: Which rule is responsible for the user authentication failur...; Question 68: By default, which port does the WebUI listen on?...; Question 69: Where can administrator edit a list of trusted SmartConsole ...; Question 70: Fill in the blank: When LDAP is integrated with Check Point ...; Question 71: Fill in the blanks: VPN gateways authenticate using ________...; Question 72: Which is NOT an encryption algorithm that can be used in an ...; Question 73: In R80 spoofing is defined as a method of:...; Question 74: How many packets does the IKE exchange use for Phase 1 Main ...; Question 75: What Check Point tool is used to automatically update Check ...; Question 76: Using mgmt_cli, what is the correct syntax to import a host ...; Question 77: NAT can NOT be configured on which of the following objects?...; Question 78: If there are two administrators logged in at the same time t...; Question 79: Fill in the blank: A new license should be generated and ins...; Question 80: Which of the following is NOT an identity source used for Id...; Question 81: Fill in the blanks: The Application Layer Firewalls inspect ...; Question 82: The WebUI offers three methods for downloading Hotfixes via ...; Question 83: Administrator Dave logs into R80 Management Server to review...; Question 84: When configuring LDAP User Directory integration, Changes ap...; Question 85: Which of the following is the most secure means of authentic...; Question 86: What is Identity Sharing?; Question 87: To fully enable Dynamic Dispatcher on a Security Gateway:...; Question 88: What needs to be configured if the NAT property 'Translate d...; Question 89: Which the following type of authentication on Mobile Access ...; Question 90: What does ExternalZone represent in the presented rule? (Exh...; Question 91: You have discovered suspicious activity in your network. Wha...; Question 92: What type of NAT is a one-to-one relationship where each hos...; Question 93: VPN gateways must authenticate to each other prior to exchan...; Question 94: Check Point ClusterXL Active/Active deployment is used when:...; Question 95: Which statement is NOT TRUE about Delta synchronization?...; Question 96: Fill in the blank: The ________ feature allows administrator...; Question 97: In the Check Point Security Management Architecture, which c...; Question 98: What is the difference between an event and a log?...; Question 99: Vanessa is attempting to log into the Gaia Web Portal. She i...; Question 100: The IT Management team is interested in the new features of ...; Question 101: Which of the following ClusterXL modes uses a non-unicast MA...; Question 102: Which statement is TRUE of anti-spoofing?...; Question 103: What two ordered layers make up the Access Control Policy La...; Question 104: Fill in the blank: To create policy for traffic to or from a...; Question 105: What is the best sync method in the ClusterXL deployment?...; Question 106: The CPD daemon is a Firewall Kernel Process that does NOT do...; Question 107: Which of the following is NOT a role of the SmartCenter:...; Question 108: If the first packet of an UDP session is rejected by a secur...; Question 109: Which command can you use to verify the number of active con...; Question 110: In the Check Point three-tiered architecture, which of the f...; Question 111: Which two of these Check Point Protocols are used by _____ ?...; Question 112: Which Threat Prevention Profile is not included by default i...; Question 113: When using LDAP as an authentication method for Identity Awa...; Question 114: Which of the following is TRUE regarding Gaia command line?...; Question 115: Which directory holds the SmartLog index files by default?...; Question 116: Which Check Point software blade prevents malicious files fr...; Question 117: Which of the following is an identity acquisition method tha...; Question 118: Which of the following commands is used to monitor cluster m...; Question 119: Fill in the blank: The R80 utility fw monitoris used to trou...; Question 120: Fill in the blank: The IPS policy for pre-R80 gateways is in...; Question 121: Traffic from source 192.168.1.1 is going to www.google.com. ...; Question 122: Which of the following is NOT an element of VPN Simplified M...; Question 123: You want to reset SIC between smberlin and sgosaka. (Exhibit...; Question 124: Choose what BEST describes the reason why querying logs now ...; Question 125: Which component functions as the Internal Certificate Author...; Question 126: Choose the correct statement regarding Implicit Rules....; Question 127: The technical-support department has a requirement to access...; Question 128: What is the main difference between Threat Extraction and Th...; Question 129: If there is an Accept Implied Policy set to "First", what is...; Question 130: You have enabled "Full Log" as a tracking option to a securi...; Question 131: Which one of the following is a way that the objects can be ...; Question 132: How do you configure an alert in SmartView Monitor?...; Question 133: How would you deploy TE250X Check Point appliance just for e...; Question 134: What is the default shell for the command line interface?...; Question 135: What is the mechanism behind Threat Extraction?...; Question 136: To ensure that VMAC mode is enabled, which CLI command you s...; Question 137: Choose what BEST describes a Session....; Question 138: After trust has been established between the Check Point com...; Question 139: You have just installed your Gateway and want to analyze the...; Question 140: Katie has been asked to do a backup on the Blue Security Gat...; Question 141: What does it mean if Bob gets this result on an object searc...; Question 142: What are types of Check Point APIs available currently as pa...; Question 143: You are conducting a security audit. While reviewing configu...; Question 144: What SmartEvent component creates events?...; Question 145: What is Consolidation Policy?; Question 146: When defining QoS global properties, which option below is n...; Question 147: Which of the completed statements is NOT true? The WebUI can...; Question 148: Which VPN routing option uses VPN routing for every connecti...; Question 149: Which of the following is NOT an alert option?...; Question 150: The SIC Status "Unknown" means; Question 151: Fill in the blank: The command __________ provides the most ...; Question 152: Bob and Joe both have Administrator Roles on their Gaia Plat...; Question 153: Administrator wishes to update IPS from SmartConsole by clic...; Question 154: Why would an administrator see the message below? (Exhibit)...; Question 155: Fill in the blank: By default, the SIC certificates issued b...; Question 156: Fill in the blanks: A security Policy is created in ________...; Question 157: What is the benefit of Manual NAT over Automatic NAT?...; Question 158: You have two rules, ten users, and two user groups in a Secu...; Question 159: You are going to upgrade from R77 to R80. Before the upgrade...; Question 160: In SmartView Tracker, which rule shows when a packet is drop...; Question 161: Packet acceleration (SecureXL) identifies connections by sev...; Question 162: When you upload a package or license to the appropriate repo...; Question 163: What is the potential downside or drawback to choosing the S...; Question 164: R80.10 management server can manage gateways with which vers...; Question 165: Your boss wants you to closely monitor an employee suspected...; Question 166: Fill in the blank: Each cluster has __________ interfaces....; Question 167: What is NOT an advantage of Stateful Inspection?...; Question 168: Which Check Point software blade provides protection from ze...; Question 169: Study the Rule base and Client Authentication Action propert...; Question 170: In the R80 SmartConsole, on which tab are Permissions and Ad...; Question 171: Which one of the following is TRUE?...; Question 172: What is a reason for manual creation of a NAT rule?...; Question 173: Which of the following are available SmartConsole clients wh...; Question 174: Which of the following actions do NOT take place in IKE Phas...; Question 175: Which icon indicates that read/write access is enabled?...; Question 176: You have configured SNX on the Security Gateway. The client ...; Question 177: You work as a security administrator for a large company. CS...; Question 178: Where do we need to reset the SIC on a gateway object?...; Question 179: What licensing feature is used to verify licenses and activa...; Question 180: What is the order of NAT priorities?...; Question 181: Fill in the blank: The R80 feature ________ permits blocking...; Question 182: The Captive Portal tool:; Question 183: Jack works for a managed service provider and he has been ta...; Question 184: What must a Security Administrator do to comply with a manag...; Question 185: What are the three components for Check Point Capsule?...; Question 186: Fill in the blank: Back up and restores can be accomplished ...; Question 187: In which VPN community is a satellite VPN gateway not allowe...; Question 188: John is the administrator of a R80 Security Management serve...; Question 189: Fill in the blank: The tool _______ generates a R80 Security...; Question 190: What is the most recommended installation method for Check P...; Question 191: The CDT utility supports which of the following?...; Question 192: Jennifer McHanry is CEO of ACME. She recently bought her own...; Question 193: Provide very wide coverage for all products and protocols, w...; Question 194: In SmartEvent, what are the different types of automatic rea...; Question 195: Fill in the blank: To build an effective Security Policy, us...; Question 196: The Firewall kernel is replicated multiple times, therefore:...; Question 197: Review the following screenshot and select the BEST answer. ...; Question 198: Which of the following is NOT a set of Regulatory Requiremen...; Question 199: True or False: In a Distributed Environment, a Central Licen...; Question 200: When configuring Spoof Tracking, which tracking actions can ...; Question 201: You are using SmartView Tracker to troubleshoot NAT entries....; Question 202: R80 Security Management Server can be installed on which of ...; Question 203: Which type of the Check Point license ties the package licen...; Question 204: Fill in the blank: A _______ is used by a VPN gateway to sen...; Question 205: The SmartEvent R80 Web application for real-time event monit...; Question 206: What command would show the API server status?...; Question 207: Which configuration element determines which traffic should ...; Question 208: There are two R77.30 Security Gateways in the Firewall Clust...; Question 209: What are the three tabs available in SmartView Tracker?...; Question 210: Which of the following is NOT a component of a Distinguished...; Question 211: Fill in the blank: When a policy package is installed, _____...; Question 212: In Logging and Monitoring, the tracking options are Log, Det...; Question 213: Match the following commands to their correct function. Each...; Question 214: To install a brand new Check Point Cluster, the MegaCorp IT ...; Question 215: Which limitation of CoreXL is overcome by using (mitigated b...; Question 216: You are working with multiple Security Gateways enforcing an...; Question 217: Which of the following Windows Security Events will NOT map ...; Question 218: Tom has connected to the R80 Management Server remotely usin...; Question 219: Which policy type is used to enforce bandwidth and traffic c...; Question 220: SandBlast offers flexibility in implementation based on thei...; Question 221: What port is used for communication to the User Center with ...; Question 222: Fill in the blanks: Default port numbers for an LDAP server ...; Question 223: MyCorp has the following NAT rules. You need to disable the ...; Question 224: Fill in the blanks: There are ________ types of software con...; Question 225: Which is a suitable command to check whether Drop Templates ...; Question 226: As you review this Security Policy, what changes could you m...; Question 227: Two administrators Dave and Jon both manage R80 Management a...; Question 228: Fill in the blank: RADIUS Accounting gets ______ data from r...; Question 229: Which of the following is NOT a method used by Identity Awar...; Question 230: After the initial installation the First Time Configuration ...; Question 231: Which type of attack can a firewall NOT prevent?...; Question 232: Which of the following licenses are considered temporary?...; Question 233: What is the command to see cluster status in cli expert mode...; Question 234: Which of the following Automatically Generated Rules NAT rul...; Question 235: Which of the following blades is NOT subscription-based and ...; Question 236: John Adams is an HR partner in the ACME organization. ACME I...; Question 237: Identify the ports to which the Client Authentication daemon...; Question 238: Which utility allows you to configure the DHCP service on GA...; Question 239: How Capsule Connect and Capsule Workspace differ?...; Question 240: Which of the following is NOT defined by an Access Role obje...; Question 241: Full synchronization between cluster members is handled by F...; Question 242: Web Control Layer has been set up using the settings in the ...; Question 243: How is communication between different Check Point component...; Question 244: Which of the following commands is used to verify license in...; Question 245: Can multiple administrators connect to a Security Management...; Question 246: Which of the following is NOT a component of Check Point Cap...; Question 247: Which of the following is a new R80.10 Gateway feature that ...; Question 248: Which set of objects have an Authentication tab?...; Question 249: Where does the security administrator activate Identity Awar...; Question 250: Which firewall daemon is responsible for the FW CLI commands...; Question 251: Choose the SmartLog property that is TRUE....; Question 252: Which of the following is NOT an option to calculate the tra...; Question 253: Which of these statements describes the Check Point ThreatCl...; Question 254: Which of the following technologies extracts detailed inform...; Question 255: To view statistics on detected threats, which Threat Tool wo...; Question 256: You can see the following graphic: (Exhibit) What is present...; Question 257: Customer's R80 management server needs to be upgraded to R80...

Question 17/257

LEAVE A REPLY

Download PDF File