156-215.81.20 Self-Study Guide for Becoming an Check Point Certified Security Administrator R81.20 Expert
156-215.81.20 Study Guide Realistic Verified 156-215.81.20 Dumps
NEW QUESTION # 74
Due to high CPU workload on the Security Gateway, the security administrator decided to purchase a new multicore CPU to replace the existing single core CPU.
After installation, is the administrator required to perform any additional tasks?
- A. Go to clash-Run cpstop | Run cpstart
- B. Go to clash-Run cpconfig | Configure CoreXL to make use of the additional Cores | Exit cpconfig | Reboot Security Gateway | Install Security Policy
- C. Administrator does not need to perform any task. Check Point will make use of the newly installed CPU and Cores
- D. Go to clash-Run cpconfig | Configure CoreXL to make use of the additional Cores | Exit cpconfig | Reboot Security Gateway
Answer: D
NEW QUESTION # 75
SmartEvent does NOT use which of the following procedures to identity events:
- A. Create an event candidate
- B. Matching a log against local exclusions
- C. Matching a log against global exclusions
- D. Matching a log against each event definition
Answer: B
NEW QUESTION # 76
You noticed that CPU cores on the Security Gateway are usually 100% utilized and many packets were dropped. You don't have a budget to perform a hardware upgrade at this time. To optimize drops you decide to use Priority Queues and fully enable Dynamic Dispatcher.
How can you enable them?
- A. fw ctl multik dynamic_dispatching on
- B. fw ctl multik dynamic_dispatching set_mode 9
- C. fw ctl miltik pq enable
- D. fw ctl multik set_mode 9
Answer: D
NEW QUESTION # 77
Which option, when applied to a rule, allows traffic to VPN gateways in specific VPN communities?
- A. Accept all encrypted traffic
- B. All Site-to-Site VPN Communities
- C. All Connections (Clear or Encrypted)
- D. Specific VPN Communities
Answer: D
NEW QUESTION # 78
Which Check Point software blade monitors Check Point devices and provides a picture of network and security performance?
- A. Application Control
- B. Monitoring
- C. Logging and Status
- D. Threat Emulation
Answer: B
NEW QUESTION # 79
Core Protections are installed as part of what Policy?
- A. Mobile Access Policy.
- B. Desktop Firewall Policy
- C. Threat Prevention Policy.
- D. Access Control Policy.
Answer: C
NEW QUESTION # 80
What data MUST be supplied to the SmartConsole System Restore window to restore a backup?
- A. Server, Protocol, Username, Password, Path
- B. Server, Protocol, Username, Password, Destination Path
- C. Username, Password, Path, Version
- D. Server, Username, Password, Path, Version
Answer: A
NEW QUESTION # 81
Which option would allow you to make a backup copy of the OS and Check Point configuration, without stopping Check Point processes?
- A. snapshot
- B. migrate export
- C. backup
- D. All options stop Check Point processes
Answer: A
NEW QUESTION # 82
John is using Management HA.
Which Smartcenter should be connected to for making changes?
- A. primary Smartcenter
- B. secondary Smartcenter
- C. connect virtual IP of Smartcenter HA
- D. active Smartcenter
Answer: D
NEW QUESTION # 83
Check Point licenses come in two forms.
What are those forms?
- A. Security Gateway and Security Management.
- B. Central and Local.
- C. Access Control and Threat Prevention.
- D. On-premise and Public Cloud
Answer: B
NEW QUESTION # 84
Identify the ports to which the Client Authentication daemon listens on by default?
- A. 259, 900
- B. 256, 257
- C. 80, 256
- D. 8080, 529
Answer: A
NEW QUESTION # 85
Which default Gaia user has full read/write access?
- A. superuser
- B. altuser
- C. monitor
- D. admin
Answer: D
NEW QUESTION # 86
Which Check Point supported authentication scheme typically requires a user to possess a token?
- A. RADIUS
- B. Check Point password
- C. TACACS
- D. SecurlD
Answer: D
NEW QUESTION # 87
Which of the following licenses are considered temporary?
- A. Perpetual and Trial
- B. Plug-and-play (Trial) and Evaluation
- C. Subscription and Perpetual
- D. Evaluation and Subscription
Answer: B
NEW QUESTION # 88
Can you use the same layer in multiple policies or rulebases?
- A. No - layers cannot be shared or reused, but an identical one can be created.
- B. Yes - but it must be copied and pasted with a different name.
- C. Yes - a layer can be shared with multiple policies and rules.
- D. No - each layer must be unique.
Answer: C
NEW QUESTION # 89
Fill in the blank: With the User Directory Software Blade, you can create user definitions on a(n)
___________ Server.
- A. SMTP
- B. LDAP
- C. NT domain
- D. SecurID
Answer: B
NEW QUESTION # 90
You have successfully backed up your Check Point configurations without the OS information.
What command would you use to restore this backup?
- A. restore_backup
- B. migrate import
- C. cp_merge
- D. import backup
Answer: A
NEW QUESTION # 91
After a new Log Server is added to the environment and the SIC trust has been established with the SMS what will the gateways do?
- A. Logs are not automatically forwarded to a new Log Server. SmartConsole must be used to manually configure each gateway to send its logs to the server.
- B. The firewalls will detect the new Log Server after the next policy install and redirect the new logs to the new Log Server.
- C. The gateways can only send logs to an SMS and cannot send logs to a Log Server. Log Servers are proprietary log archive servers.
- D. Gateways will send new firewall logs to the new Log Server as soon as the SIC trust is set up between the SMS and the new Log Server.
Answer: A
NEW QUESTION # 92
In ____________ NAT, the ____________ is translated.
- A. Hide; destination
- B. Simple; source
- C. Static; source
- D. Hide; source
Answer: D
NEW QUESTION # 93
Which is NOT an encryption algorithm that can be used in an IPSEC Security Association (Phase 2)?
- A. AES-GCM-128
- B. AES-CBC-256
- C. AES-GCM-256
Answer: B
NEW QUESTION # 94
......
Valid 156-215.81.20 Exam Dumps Ensure you a HIGH SCORE: https://www.actual4exams.com/156-215.81.20-valid-dump.html
156-215.81.20 Questions & Practice Test are Available On-Demand: https://drive.google.com/open?id=1VwxKDThMvtbnu8NrH2EcYsoz0Qtp0onn