Free CheckPoint 156-215.81.20 Exam Questions and Answer from Training Expert VCE4Dumps

Top CheckPoint 156-215.81.20 Courses Online

NEW QUESTION # 81
What two ordered layers make up the Access Control Policy Layer?

• A. URL Filtering and Network
• B. Network and Application Control
• C. Application Control and URL Filtering
• D. Network and Threat Prevention

Answer: D

NEW QUESTION # 82
Fill in the blank: An Endpoint identity agent uses a ___________ for user authentication.

• A. Token
• B. Shared secret
• C. Certificate
• D. Username/password or Kerberos Ticket

Answer: D

NEW QUESTION # 83
Under which file is the proxy arp configuration stored?

• A. $FWDIR/conf/local.arp on the management server
• B. $FWDIR/state/_tmp/proxy.arp on the security gateway
• C. $FWDIR/conf/local.arp on the gateway
• D. $FWDIR/state/proxy_arp.conf on the management server

Answer: C

NEW QUESTION # 84
You noticed that CPU cores on the Security Gateway are usually 100% utilized and many packets were dropped. You don't have a budget to perform a hardware upgrade at this time. To optimize drops you decide to use Priority Queues and fully enable Dynamic Dispatcher.
How can you enable them?

• A. fw ctl multik dynamic_dispatching set_mode 9
• B. fw ctl multik set_mode 9
• C. fw ctl miltik pq enable
• D. fw ctl multik dynamic_dispatching on

Answer: B

NEW QUESTION # 85
When comparing Stateful Inspection and Packet Filtering, what is a benefit that Stateful Inspection offers over Packer Filtering?

• A. Only one rule is required for each connection.
• B. Stateful Inspection offers no benefits over Packet Filtering.
• C. Stateful Inspection offers unlimited connections because of virtual memory usage.
• D. Stateful Inspection does not use memory to record the protocol used by the connection.

Answer: A

NEW QUESTION # 86
Which of the following methods can be used to update the trusted log server regarding the policy and configuration changes performed on the Security Management Server?

• A. Save Policy
• B. Install Policy
• C. Save session
• D. Install Database

Answer: A

NEW QUESTION # 87
Fill in the blank: To create policy for traffic to or from a particular location, use the _____________.

• A. DLP shared policy
• B. Mobile Access software blade
• C. Geo policy shared policy
• D. HTTPS inspection

Answer: C

NEW QUESTION # 88
Which of the following is NOT a policy type available for each policy package?

• A. Threat Emulation
• B. Threat Prevention
• C. Access Control
• D. Desktop Security

Answer: A

NEW QUESTION # 89
Both major kinds of NAT support Hide and Static NAT. However, one offers more flexibility.
Which statement is true?

• A. Dynamic NAT with Port Address Translation can offer more flexibility than Network Address Translation (NAT) Overloading.
• B. Dynamic Network Address Translation (NAT) Overloading can offer more flexibility than Port Address Translation.
• C. Manual NAT can offer more flexibility than Automatic NAT.
• D. Automatic NAT can offer more flexibility than Manual NAT.

Answer: C

NEW QUESTION # 90
Session unique identifiers are passed to the web api using which http header option?

• A. Application
• B. X-chkp-sid
• C. Accept-Charset
• D. Proxy-Authorization

Answer: B

NEW QUESTION # 91
Which Threat Prevention profile uses sanitization technology?

• A. Cloud/data Center
• B. Guest Network
• C. perimeter
• D. Sandbox

Answer: C

NEW QUESTION # 92
You want to verify if there are unsaved changes in GAiA that will be lost with a reboot.
What command can be used?

• A. show save-state
• B. show unsaved
• C. show config-state
• D. show configuration diff

Answer: C

NEW QUESTION # 93
What are the advantages of a "shared policy" in R80?

• A. Allows the administrator to install a policy on one Security Gateway and it gets installed on another managed Security Gateway
• B. Allows the administrator to share a policy between all the users identified by the Security Gateway
• C. Allows the administrator to share a policy so that it is available to use in another Policy Package
• D. Allows the administrator to share a policy between all the administrators managing the Security Management Server

Answer: C

NEW QUESTION # 94
Which of the following is NOT an identity source used for Identity Awareness?

• A. RADIUS
• B. AD Query
• C. Remote Access
• D. UserCheck

Answer: D

NEW QUESTION # 95
Where can alerts be viewed?

• A. Alerts can be seen in SmartUpdate.
• B. Alerts can be seen in SmartView Monitor
• C. Alerts can be seen in the Threat Prevention policy.
• D. Alerts can be seen from the CLI of the gateway.

Answer: B

NEW QUESTION # 96
The Gateway Status view in SmartConsole shows the overall status of Security Gateways and Software Blades.
What does the Status Attention mean?

• A. Cannot make SIC between the Security Management Server and the Security Gateway
• B. The gateway and all its Software Blades are working properly.
• C. Cannot reach the Security Gateway.
• D. At least one Software Blade has a minor issue, but the gateway works.

Answer: D

NEW QUESTION # 97
Which of the following is considered to be the more secure and preferred VPN authentication method?

• A. Certificate
• B. Password
• C. Pre-shared secret
• D. MD5

Answer: A

NEW QUESTION # 98
......

New (2025) CheckPoint 156-215.81.20 Exam Dumps: https://examtorrent.vce4dumps.com/156-215.81.20-latest-dumps.html