Pre-Winter Sale Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: 65pass65

Free Check Point Certified Security Administrator R81.20 CCSA (156-215.81.20) Practice Questions

Question # 31

How would you determine the software version from the CLI?

Options:

A.  

fw ver

B.  

fw stat

C.  

fw monitor

D.  

cpinfo

Discussion 0
Question # 32

Which of the following is used to initially create trust between a Gateway and Security Management Server?

Options:

A.  

Internal Certificate Authority

B.  

Token

C.  

One-time Password

D.  

Certificate

Discussion 0
Question # 33

In order to modify Security Policies, the administrator can use which of the following tools? (Choose the best answer.)

Options:

A.  

SmartConsole and WebUI on the Security Management Server.

B.  

SmartConsole or mgmt_cli (API) on any computer where SmartConsole is installed.

C.  

Command line of the Security Management Server or mgmt_cli.exe on any Windows computer.

D.  

mgmt_cli (API) or WebUI on Security Gateway and SmartConsole on the Security Management Server.

Discussion 0
Question # 34

John is using Management H

A.  

Which Smartcenter should be connected to for making changes?

Options:

A.  

secondary Smartcenter

B.  

active Smartcenter

C.  

connect virtual IP of Smartcenter HA

D.  

primary Smartcenter

Discussion 0
Question # 35

Which of the following is NOT a component of Check Point Capsule?

Options:

A.  

Capsule Docs

B.  

Capsule Cloud

C.  

Capsule Enterprise

D.  

Capsule Workspace

Discussion 0
Question # 36

What is the most complete definition of the difference between the Install Policy button on the SmartConsole’s tab, and the Install Policy within a specific policy?

Options:

A.  

The Global one also saves and published the session before installation.

B.  

The Global one can install multiple selected policies at the same time.

C.  

The local one does not install the Anti-Malware policy along with the Network policy.

D.  

The second one pre-select the installation for only the current policy and for the applicable gateways.

Discussion 0
Question # 37

Which of the following is NOT a component of a Distinguished Name?

Options:

A.  

Common Name

B.  

Country

C.  

User container

D.  

Organizational Unit

Discussion 0
Question # 38

Which of the following statements about Site-to-Site VPN Domain-based is NOT true?

    Route-based— The Security Gateways will have a Virtual Tunnel Interface (VTI) for each VPN Tunnel with a peer VPN Gateway. The Routing Table can have routes to forward traffic to these VTls. Any traffic routed through a VTI is automatically identified as VPN Traffic and is passed through the VPN Tunnel associated with the VTI.

Options:

A.  

Domain-based— VPN domains are pre-defined for all VPN Gateways. A VPN domain is a service or user that can send or receive VPN traffic through a VPN Gateway.

B.  

Domain-based— VPN domains are pre-defined for all VPN Gateways. A VPN domain is a host or network that can send or receive VPN traffic through a VPN Gateway.

C.  

Domain-based— VPN domains are pre-defined for all VPN Gateways. When the Security Gateway encounters traffic originating from one VPN Domain with the destination to a VPN Domain of another VPN Gateway, that traffic is identified as VPN traffic and is sent through the VPN Tunnel between the two Gateways.

Discussion 0
Question # 39

Which of the following is NOT a type of Endpoint Identity Agent?

Options:

A.  

Custom

B.  

Terminal

C.  

Full

D.  

Light

Discussion 0
Question # 40

Full synchronization between cluster members is handled by Firewall Kernel. Which port is used for this?

Options:

A.  

UDP port 265

B.  

TCP port 265

C.  

UDP port 256

D.  

TCP port 256

Discussion 0

156-215.81 PDF

156-215.81 PDF (Printable)
$54.25
$154.99

156-215.81 Testing Engine

156-215.81 PDF (Printable)
$59.5
$169.99

156-215.81 PDF + Testing Engine

156-215.81 PDF (Printable)
$74.55
$212.99

Free Exams Sample Questions