[Dec 29, 2021] Ultimate 156-215.80 Guide to Prepare Free Latest CheckPoint Practice Tests Dumps
Get Top-Rated CheckPoint 156-215.80 Exam Dumps Now
Check Point Certified Security Administrator (CCSA R80) 156-215.80 Exam
Check Point Certified Security Administrator (CCSA R80) 156-215.80 Exam is related to Check Point Certified Security Administrator Certification.156-215.80 Exam validates the ability to install R80 Management, security in a distributed environment configure objects rules, settings to define a security policy, work with multiple concurrent administrators and define permission profiles. This exam also deals with the ability to configure a virtual private network, work with checkpoint clustering and perform periodic administrator tasks as specified in administrator job descriptions. Security Administrator and Check Point Professionals usually hold or pursue this certification and candidate can expect the same job roles after completion of this certification.
NEW QUESTION 115
The IT Management team is interested in the new features of the Check Point R80 Management and wants to upgrade but they are concerned that the existing R77.30 Gaia Gateways cannot be managed by R80 because it is so different. As the administrator responsible for the Firewalls, how can you answer or confirm these concerns?
- A. R80 Management requires the separate installation of compatibility hotfix packages for managing the earlier versions of Check Point Gateways prior to R80. Consult the R80 Release Notes for more information.
- B. R80 Management cannot manage earlier versions of Check Point Gateways prior to R80. Only R80 and above Gateways can be managed. Consult the R80 Release Notes for more information.
- C. R80 Management was designed as a completely different Management system and so can only monitor Check Point Gateways prior to R80.
- D. R80 Management contains compatibility packages for managing earlier versions of Check Point Gateways prior to R80. Consult the R80 Release Notes for more information.
Answer: D
Explanation:
Explanation/Reference:
Explanation:
Reference: http://dl3.checkpoint.com/paid/1f/1f7e21da67aa992954aa12a0a84e53a8/ CP_R80_ReleaseNotes.pdf?HashKey=1479838085_d6ffcb36c6a3128708b3f6d7bcc4f94e&xtn=.pdf
NEW QUESTION 116
Which command is used to obtain the configuration lock in Gaia?
- A. Unlock database lock
- B. Unlock database override
- C. Lock database user
- D. Lock database override
Answer: D
Explanation:
Explanation
Obtaining a Configuration Lock
lock database override
unlock database
NEW QUESTION 117
Choose the Best place to find a Security Management Server backup file named backup_fw, on a Check Point
Appliance.
- A. /var/log/Cpbackup/backups/backup/backup_fw.tgs
- B. /var/log/Cpbackup/backups/backups/backup_fw.tar
- C. /var/log/Cpbackup/backups/backup_fw.tgz
- D. /var/log/Cpbackup/backups/backup/backup_fw.tar
Answer: C
Explanation:
Explanation
Gaia's Backup feature allows backing up the configuration of the Gaia OS and of the Security Management
server database, or restoring a previously saved configuration.
The configuration is saved to a .tgz file in the following directory:
Gaia OS Version
Hardware
Local Directory
R75.40 - R77.20
Check Point appliances
/var/log/CPbackup/backups/
Open Server
/var/CPbackup/backups/
R77.30
Check Point appliances
/var/log/CPbackup/backups/
Open Server
NEW QUESTION 118
Assuming you have a Distributed Deployment, what will be the effect of running the following command on the Security Management Server?
- A. No effect.
- B. Remove the local ACL lists.
- C. Reset SIC on all gateways.
- D. Remove the installed Security Policy.
Answer: D
Explanation:
This command uninstall actual security policy (already installed)
Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_SecurityGatewayTech_WebAdmin/6751.htm
NEW QUESTION 119
What Identity Agent allows packet tagging and computer authentication?
- A. Endpoint Security Client
- B. System Agent
- C. Full Agent
- D. Light Agent
Answer: C
Explanation:
Explanation/Reference:
Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_IdentityAwareness_WebAdminGuide/ html_frameset.htm?topic=documents/R77/CP_R77_IdentityAwareness_WebAdminGuide/62838
NEW QUESTION 120
What component of R80 Management is used for indexing?
- A. SOLR
- B. API Server
- C. DBSync
- D. fwm
Answer: A
Explanation:
Explanation/Reference: https://www.checkpoint.com/downloads/product-related/r80.10-mgmt-architecture-overview.pdf
NEW QUESTION 121
Jennifer McHanry is CEO of ACME. She recently bought her own personal iPad. She wants use her iPad to access the internal Finance Web server. Because the iPad is not a member of the Active Directory domain, she cannot identify seamlessly with AD Query.
However, she can enter her AD credentials in the Captive Portal and then get the same access as on her office computer. Her access to resources is based on rules in the R77
Firewall Rule Base.
To make this scenario work, the IT administrator must:
1) Enable Identity Awareness on a gateway and select Captive Portal as one of the Identity
Sources.
2) In the Portal Settings window in the User Access section, make sure that Name and password login is selected.
3) Create a new rule in the Firewall Rule Base to let Jennifer McHanry access network destinations. Select accept as the Action.
4) Install policy.
Ms McHanry tries to access the resource but is unable. What should she do?
- A. Install the Identity Awareness agent on her iPad.
- B. Have the security administrator select Any for the Machines tab in the appropriate
Access Role. - C. Have the security administrator select the Action field of the Firewall Rule "Redirect
HTTP connections to an authentication (captive) portal". - D. Have the security administrator reboot the firewall.
Answer: C
NEW QUESTION 122
Bob and Joe both have Administrator Roles on their Gaia Platform.
Bob logs in on the WebUI and then Joe logs in through CLI.
Choose what BEST describes the following scenario, where Bob and Joe are both logged in:
- A. If Joe tries to make changes, he won't, database will be locked.
- B. When Joe logs in, Bob will be log out automatically.
- C. Since they both are log in on different interfaces, they both will be able to make changes.
- D. Bob will be prompt that Joe logged in.
Answer: A
NEW QUESTION 123
Can multiple administrators connect to a Security Management Server at the same time?
- A. Yes, all administrators can modify a network object at the same time
- B. Yes, but only one has the right to write
- C. No, only one can be connected
- D. Yes, every administrator has their own username, and works in a session that is independent of other
administrators
Answer: D
NEW QUESTION 124
Which of the following uses the same key to decrypt as it does to encrypt?
- A. Asymmetric encryption
- B. Symmetric encryption
- C. Certificate-based encryption
- D. Dynamic encryption
Answer: B
NEW QUESTION 125
Choose what BEST describes a Session.
- A. Starts when an Administrator logs in to the Security Management Server through
SmartConsole and ends when it is published. - B. Sessions locksthe policy package for editing.
- C. Sessions ends when policy is pushed to the Security Gateway.
- D. Starts when an Administratorpublishes all the changes made on SmartConsole.
Answer: A
Explanation:
Administrator Collaboration
More than one administrator can connect to the Security Management Server at the same time. Every administrator has their own username, and works in a session that isindependent of the other administrators.
When an administrator logs in to the Security Management Server through SmartConsole, a new editing session starts. The changes that the administrator makes during the session are only available to that administrator. Other administrators see a lock icon on object and rules that are being edited.
To make changes available to all administrators, and to unlock the objects and rules that are being edited, the administrator must publish the session.
NEW QUESTION 126
Which command is used to obtain the configuration lock in Gaia?
- A. Unlock database lock
- B. Unlock database override
- C. Lock database user
- D. Lock database override
Answer: D
Explanation:
Explanation/Reference:
Explanation: Obtaining a Configuration Lock
lock database override
unlock database
Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Gaia_WebAdmin/75697.htm#o73091
NEW QUESTION 127
In R80 spoofing is defined as a method of:
- A. Making packets appear as if they come from an authorized IP address.
- B. Hiding your firewall from unauthorized users.
- C. Detecting people using false or wrong authentication logins
- D. Disguising an illegal IP address behind an authorized IP address through Port Address Translation.
Answer: A
Explanation:
IP spoofing replaces the untrusted source IP address with a fake, trusted one, to hijack connections to your network. Attackers use IP spoofing to send malware and bots to your protected network, to execute DoS attacks, or to gain unauthorized access.
Reference:
http://dl3.checkpoint.com/paid/74/74d596decb6071a4ee642fbdaae7238f/
CP_R80_SecurityManagement_AdminGuide.pdf?
HashKey=1479584563_6f823c8ea1514609148aa4fec5425db2&xtn=.pdf
NEW QUESTION 128
SmartUpdate is mainly for which kind of work -
1. Monitoring Performance and traffic
2. Provision Package
3. Managing licenses
4. Creating a Rule Base
- A. 1, 3
- B. 2, 4
- C. 1, 2
- D. 2, 3
Answer: D
NEW QUESTION 129
Bob and Joe both have Administrator Roles on their Gaia Platform. Bob logs in on the WebUI and then Joe logs in through CLI. Choose what BEST describes the following scenario, where Bob and Joe are both logged in:
- A. When Joe logs in, Bob will be logged out automatically.
- B. The database will be locked by Bob and Joe will not be able to make any changes.
- C. Since they both are logged in on different interfaces, they both will be able to make changes.
- D. Bob will receive a prompt that Joe has logged in.
Answer: B
NEW QUESTION 130
Jack works for a managed service provider and he has been tasked to create 17 new policies for several new customers. He does not have much time. What is the BEST way to do this with R80 security management?
- A. Create a text-file with DBEDIT script that creates all objects and policies. Run the file in the command line of the management server using command dbedit -f.
- B. Create a text-file with Gaia CLI -commands in order to create all objects and policies. Run the file in CLISH with command load configuration.
- C. Use Object Explorer in SmartConsole to create the objects and Manage Policies from the menu to create the policies.
- D. Create a text-file with mgmt_cli script that creates all objects and policies. Open the file in SmartConsole Command Line to run it.
Answer: D
Explanation:
Explanation
Did you know: mgmt_cli can accept csv files as inputs using the --batch option.
The first row should contain the argument names and the rows below it should hold the values for these parameters.
So an equivalent solution to the powershell script could look like this:
data.csv:
mgmt_cli add host --batch data.csv -u <username> -p <password> -m <management server> This can work with any type of command not just "add host" : simply replace the column names with the ones relevant to the command you need.
NEW QUESTION 131
Which type of Endpoint Identity Agent includes packet tagging and computer authentication?
- A. Full
- B. Custom
- C. Light
- D. Complete
Answer: A
Explanation:
Endpoint Identity Agents - dedicated client agents installed on users' computers that acquire and report identities to the Security Gateway.
NEW QUESTION 132
Which remote Access Solution is clientless?
- A. Endpoint Security Suite
- B. Mobile Access Portal
- C. SecuRemote
- D. Checkpoint Mobile
Answer: B
Explanation:
Reference:
https://sc1.checkpoint.com/documents/R77/CP_R77_Firewall_WebAdmin/92708.htm
NEW QUESTION 133
Provide very wide coverage for all products and protocols, with noticeable performance impact.
How could you tune the profile in order to lower the CPU load still maintaining security at good level?
Select the BEST answer.
- A. Set High Confidence to Low and Low Confidence to Inactive.
- B. Set the Performance Impact to Very Low Confidence to Prevent.
- C. Set the Performance Impact to Medium or lower.
- D. The problem is not with the Threat Prevention Profile. Consider adding more memory to the appliance.
Answer: C
NEW QUESTION 134
ALPHA Corp has a new administrator who logs into the Gaia Portal to make some changes. He realizes that even though he has logged in as an administrator, he is unable to make any changes because all configuration options are greyed out as shown in the screenshot image below. What is the likely cause for this?
- A. The database is locked by another administrator SSH session.
- B. The IP address of his computer is not in the allowed hosts.
- C. The Network address of his computer is in the blocked hosts.
- D. The Gaia/bin/confdis locked by another administrator from aSmartConsole session.
Answer: A
Explanation:
There is a lock ontop left side of the screen. B is the logical answer.
NEW QUESTION 135
When installing a dedicated R80 SmartEvent server, what is the recommended size of the root partition?
- A. Any size
- B. More than 10GB and less than 20 GB
- C. Less than 20GB
- D. At least 20GB
Answer: D
NEW QUESTION 136
......
Career Path
There are 3 comprehensive certification paths on the Check Point official website including the Check Point Certified Security Administrator, the Check Point Certified Security Expert, and the Check Point Certified Security Master. The mentioned CCSA certification is the first step in this series, recognizing the foundational skills that administrators need to manage everyday operations of the Check Point Products and security solutions. So, after completing this training, you will likely go after the top-level exams such as the already mentioned CCSE and CCSM certifications.
Passing Key To Getting 156-215.80 Certified Exam Engine PDF: https://www.dumpsquestion.com/156-215.80-exam-dumps-collection.html